Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A5F0198F56570C4D8BDFBDA7B75D197CC3A775A4.cer
File:                     A5F0198F56570C4D8BDFBDA7B75D197CC3A775A4.cer (raw, json)
Hash identifier:          KI7ekt20U5q8IwOtehOaiqGEXjBLzT5KQYyxTBsGtCE=
Subject key identifier:   A5:F0:19:8F:56:57:0C:4D:8B:DF:BD:A7:B7:5D:19:7C:C3:A7:75:A4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       533578DFAE08355CA6D0AA8BF36FDA855533424E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/A5F0198F56570C4D8BDFBDA7B75D197CC3A775A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Nov 2022 11:44:01 +0000
Certificate not after:    Mon 20 Nov 2023 11:49:01 +0000
Subordinate resources:    AS: 28227
                          IP: 189.126.208.0/20
                          IP: 2804:4b7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:35:78:df:ae:08:35:5c:a6:d0:aa:8b:f3:6f:da:85:55:33:42:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 21 11:44:01 2022 GMT
            Not After : Nov 20 11:49:01 2023 GMT
        Subject: CN=A5F0198F56570C4D8BDFBDA7B75D197CC3A775A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:23:49:b6:b2:d9:b7:d7:82:db:57:1c:4e:
                    1e:8f:e5:d0:e8:fc:c1:89:e5:da:42:0a:1b:cd:cb:
                    cf:44:b9:31:70:4b:ad:bf:6d:65:1e:7f:7c:4e:d4:
                    66:d0:10:df:7e:90:5d:aa:b1:74:12:f7:28:a8:27:
                    f0:fe:aa:f7:44:74:d4:33:a1:b7:e3:15:0d:11:0e:
                    e0:b3:4a:f2:21:a8:5e:e6:7b:10:59:79:f0:67:45:
                    7f:fd:37:49:a4:04:2c:c0:89:6f:d5:b9:78:02:f1:
                    19:e7:e4:b1:6e:cf:c3:dd:7a:4d:97:a2:2c:35:f1:
                    d3:b0:61:99:79:b2:89:2e:cd:48:5b:21:a1:b6:4c:
                    d1:a0:f0:28:af:a8:36:06:3d:63:ab:2c:0d:30:c9:
                    67:c2:c7:6a:5e:78:f4:cc:35:40:65:51:07:59:61:
                    24:c9:5f:44:c1:ea:af:3d:fb:4b:bb:8f:8e:de:09:
                    fe:fb:1f:55:80:b3:92:1b:d0:ce:48:34:83:a3:70:
                    fa:bf:9e:52:73:79:bf:f0:23:20:dc:f7:f0:ca:a4:
                    37:a4:f6:00:ad:b8:32:bd:8d:95:f5:01:0a:2f:fb:
                    2f:b9:7c:43:88:dc:ce:8e:08:12:b6:77:f7:28:af:
                    52:84:44:7b:f5:30:65:6d:ee:a9:ef:f2:0d:79:e2:
                    7d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:F0:19:8F:56:57:0C:4D:8B:DF:BD:A7:B7:5D:19:7C:C3:A7:75:A4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/A5F0198F56570C4D8BDFBDA7B75D197CC3A775A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.208.0/20
                IPv6:
                  2804:4b7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28227

    Signature Algorithm: sha256WithRSAEncryption
         a5:68:c9:c9:8d:0d:6e:c4:42:ca:7e:8e:03:c4:4d:f0:48:18:
         ad:2f:34:54:41:47:91:ad:fe:00:4d:b4:e6:00:5c:9c:ff:3b:
         30:3e:40:ae:8d:6f:c3:07:51:f9:c0:e3:13:b7:21:45:28:b0:
         67:e7:4c:75:57:77:6a:b4:2a:4b:d3:ca:47:d6:62:29:bc:0b:
         5d:6e:ff:00:15:f1:7c:d7:bf:d5:18:31:b2:e5:9b:5f:78:95:
         94:8e:8c:9b:b3:3c:12:e4:26:48:a6:0d:d7:74:c8:82:3e:28:
         5a:34:ff:41:6e:34:d2:c1:5e:9f:60:25:76:83:1b:79:43:e4:
         ea:e7:cf:b6:cc:43:ec:72:59:9b:df:45:3d:5e:24:b0:08:2a:
         78:8e:73:f8:b3:70:f1:fb:db:70:6b:a1:1b:14:70:8e:a7:df:
         3b:f7:e4:64:d9:4e:c8:1e:c7:bc:76:0b:6d:1e:ec:22:14:01:
         c5:07:3c:76:68:bb:ec:cf:b6:59:b5:9f:95:43:26:f5:42:79:
         20:c2:b5:9c:99:f2:21:84:e3:b4:52:62:12:41:23:ce:5d:d7:
         71:52:60:39:bd:93:9d:d2:62:22:c8:fd:6e:9b:3c:24:fe:d2:
         e6:3d:5c:1b:fc:5a:53:70:23:9e:94:c1:21:81:49:d6:da:85:
         30:57:8f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org