Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9.cer
File:                     A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9.cer (raw, json)
Hash identifier:          B57/2cs+JJslL8faHCp6eCl65tegV9bdmcdj4U1qSWc=
Subject key identifier:   A5:E3:7A:56:49:9A:8D:D7:03:E5:C3:73:7C:4B:F1:A3:B4:C5:15:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2187477BBBA006AFDCBED754020C23C8DE055A00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 12:03:37 +0000
Certificate not after:    Tue 07 Jan 2025 12:08:37 +0000
Subordinate resources:    AS: 266083
                          IP: 45.5.16.0/22
                          IP: 2804:3a54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:87:47:7b:bb:a0:06:af:dc:be:d7:54:02:0c:23:c8:de:05:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 12:03:37 2024 GMT
            Not After : Jan  7 12:08:37 2025 GMT
        Subject: CN=A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:ea:2f:d9:3c:08:8b:a5:a2:41:52:3b:29:
                    02:64:32:98:8f:c2:59:9d:61:ad:d8:0b:4c:bf:37:
                    7e:42:25:1c:43:6d:18:bc:0b:8d:f2:70:bf:44:71:
                    83:20:d1:b0:9e:84:a3:35:34:46:c2:11:40:d7:cd:
                    52:20:7f:03:48:4c:1c:49:d7:fb:b6:3e:8d:2a:d7:
                    01:e5:a0:20:34:bb:df:e6:82:9f:fa:41:61:19:09:
                    36:ef:99:dc:68:c8:15:5e:59:45:87:67:9c:fa:57:
                    d4:0f:11:18:ff:1f:51:28:5d:c4:df:bb:f9:87:e1:
                    4e:e1:15:83:fb:58:58:64:90:9e:80:87:1d:97:fa:
                    bd:ac:d6:36:1f:7c:46:82:cc:c5:6b:7f:35:42:2d:
                    e0:7c:be:8f:db:52:dc:b6:f6:fd:0e:92:01:d2:5d:
                    da:89:54:98:fb:c2:c8:ae:c9:a7:0c:26:7f:5e:fd:
                    35:74:5c:6d:df:14:2d:4f:71:c8:21:c9:bf:84:40:
                    dc:b7:ca:95:9c:56:39:47:d4:85:be:7c:b0:dc:3a:
                    c2:59:68:7a:92:35:81:3b:b4:2b:da:ee:8d:e8:99:
                    48:88:c4:dd:e8:a5:36:43:e0:75:35:73:35:3e:83:
                    5b:96:d4:41:07:3c:72:03:d2:6b:cc:bf:94:d0:98:
                    01:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:E3:7A:56:49:9A:8D:D7:03:E5:C3:73:7C:4B:F1:A3:B4:C5:15:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.16.0/22
                IPv6:
                  2804:3a54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266083

    Signature Algorithm: sha256WithRSAEncryption
         3a:07:78:09:fe:cb:bc:b3:20:46:9d:a3:dc:2c:b3:58:3d:89:
         2a:41:34:c6:ec:f7:6c:90:24:9f:7d:44:fb:88:9f:7c:2a:91:
         9f:9a:a3:c2:58:83:b8:16:fe:ca:cd:39:10:92:20:48:fa:10:
         92:71:86:2d:db:41:32:34:04:56:c0:00:26:db:48:49:d4:d1:
         e2:22:dd:25:d8:97:24:10:fa:fb:79:0d:65:8d:da:92:86:d0:
         aa:f4:09:76:58:eb:2e:78:2e:b2:41:15:6d:a5:86:07:5c:25:
         8d:68:89:ce:de:7d:35:3b:21:24:03:ce:ea:6d:94:d4:f3:98:
         9d:aa:54:ff:c6:b9:5a:7d:be:69:87:30:9c:81:b4:41:8b:a3:
         09:50:54:44:74:9c:b1:18:71:1c:d9:49:a6:35:f6:2a:49:33:
         da:da:ba:36:b8:4a:42:02:6f:75:37:d9:29:34:41:6c:c1:ef:
         8d:27:54:f6:66:6a:6c:f9:a1:65:fb:86:04:d8:4a:3b:30:ed:
         62:f0:54:fc:19:9c:00:eb:9d:3c:72:d3:b7:37:5e:f4:12:ff:
         88:09:e8:6e:4e:a0:a1:44:5f:3b:e0:94:44:7d:5a:33:08:0f:
         e2:a1:68:af:c6:33:d6:b5:11:63:fa:31:a4:54:0b:49:29:76:
         89:9b:3c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org