Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer
File:                     AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer (raw, json)
Hash identifier:          5Y/41b+oNhviiccSjLQU2cuzzFHmHwdJlo//X9aiAII=
Subject key identifier:   AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2753D42F11696BD0728912A9096406F87F784271
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jan 2024 16:40:27 +0000
Certificate not after:    Mon 06 Jan 2025 16:45:27 +0000
Subordinate resources:    AS: 268444
                          IP: 45.161.64.0/22
                          IP: 2804:514c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:53:d4:2f:11:69:6b:d0:72:89:12:a9:09:64:06:f8:7f:78:42:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  8 16:40:27 2024 GMT
            Not After : Jan  6 16:45:27 2025 GMT
        Subject: CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:3c:12:08:ab:23:58:df:aa:ad:03:50:1e:
                    42:83:0b:91:a5:12:6f:d8:db:95:38:bb:7b:57:44:
                    a7:ea:11:5e:a9:d0:38:ea:12:4e:34:57:39:33:19:
                    50:e3:29:25:0c:81:47:c8:bf:58:fc:4a:1b:d2:7e:
                    c2:5a:ef:d1:6f:02:91:03:7f:96:34:98:f2:bb:5d:
                    39:be:74:9c:18:13:07:44:88:3d:51:76:3c:8f:60:
                    0b:23:44:3e:de:f4:3e:14:d8:fc:66:9d:2b:15:28:
                    49:51:2b:aa:c8:c7:11:80:7b:95:2a:62:10:bc:42:
                    fe:e1:2a:00:ab:e2:31:52:8a:67:0b:f6:4c:1b:d8:
                    65:72:0b:03:c7:d0:4e:c2:a7:79:62:c1:18:04:38:
                    c2:40:ff:f9:bc:0c:20:6b:10:65:05:eb:f7:18:59:
                    47:3f:f3:4b:68:0c:db:b8:4c:b9:1b:36:98:d6:65:
                    56:2f:c1:38:46:82:0b:65:b1:17:ff:4e:a7:1d:46:
                    a7:44:52:46:56:d7:b0:a8:14:5b:59:95:d7:24:89:
                    1a:65:96:d0:7e:eb:0d:85:b2:02:c1:b7:81:28:c1:
                    8b:b4:56:35:7e:66:f6:23:ca:48:e1:a7:32:e0:22:
                    e9:68:c0:3f:fd:fe:2b:67:1e:7e:82:46:d3:b2:5b:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.64.0/22
                IPv6:
                  2804:514c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268444

    Signature Algorithm: sha256WithRSAEncryption
         81:5e:ad:17:34:35:3c:03:71:42:ad:18:4c:98:04:5a:5e:81:
         01:a3:72:5b:e7:fb:37:56:80:61:d3:18:63:4f:34:09:4b:60:
         08:b3:0c:4a:9b:b8:e4:fd:2a:dc:43:0c:c7:9d:d5:7c:4d:57:
         54:d6:d8:6f:57:55:0e:cb:74:35:ef:54:d7:de:fa:b0:98:1c:
         13:3b:50:ae:26:e6:e4:9a:8d:cc:fe:23:16:9a:ad:e3:2e:30:
         99:f7:36:75:7c:f9:2b:67:d7:39:cd:c3:6b:e8:17:06:69:7a:
         7a:55:13:ec:4c:19:1c:73:d3:ec:dd:9e:a5:3c:fb:1b:5c:89:
         87:a7:b4:53:54:f1:98:22:1b:b8:60:e4:58:70:52:5a:49:2d:
         92:6f:ae:f3:d5:33:12:1d:5e:f7:82:f5:be:77:f6:de:d4:90:
         58:bc:5f:32:2a:16:cf:73:93:59:54:42:74:48:cd:9a:5c:87:
         01:55:2b:2d:38:3e:7e:75:eb:c5:fe:f5:f8:6a:b1:db:a3:3e:
         f8:af:8b:fa:43:03:5d:82:71:24:aa:e9:9e:f0:5a:34:1d:9b:
         9c:ce:38:33:e4:98:ef:58:2e:9b:cc:b2:1e:7b:02:24:b1:7c:
         4d:52:64:f7:f1:56:85:df:f9:f5:ba:c3:cb:d9:6b:bb:37:1c:
         08:bc:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org