Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.cer
File:                     B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.cer (raw, json)
Hash identifier:          UYGL8WQUeSHfnX7r0DruVAWxKxy78C97JpSllO8UwXc=
Subject key identifier:   B5:54:1D:2F:C4:F0:FE:E0:33:E6:8E:EC:7D:7F:F7:D4:BD:34:92:28
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5FABF3A5A16E5C063272251A216F572E7843A173
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 20:21:06 +0000
Certificate not after:    Thu 11 Jul 2024 20:26:06 +0000
Subordinate resources:    AS: 264879
                          IP: 168.227.124.0/22
                          IP: 2804:2f3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ab:f3:a5:a1:6e:5c:06:32:72:25:1a:21:6f:57:2e:78:43:a1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 20:21:06 2023 GMT
            Not After : Jul 11 20:26:06 2024 GMT
        Subject: CN=B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:f3:8d:02:d8:79:e3:8a:76:a2:62:00:ea:
                    ec:9d:3c:3a:08:7b:dc:0f:9e:12:1e:52:8a:e0:58:
                    42:de:f2:7e:c8:fe:cf:b3:29:db:a5:e6:0c:57:fb:
                    c5:65:ad:73:9c:21:07:a0:eb:9e:d6:27:a0:0f:7a:
                    ad:f4:64:c1:de:4d:54:54:86:42:b9:2b:c0:e0:30:
                    84:93:e3:25:10:37:31:2e:b8:b9:71:c7:ec:5c:0b:
                    f1:9a:f0:cb:44:c4:04:d0:97:04:9d:88:45:15:de:
                    32:5b:08:b4:ed:75:3c:97:26:c5:3b:a1:ed:10:7c:
                    bc:a9:da:fc:d5:a1:8c:2d:91:2c:ca:08:80:74:f9:
                    8d:e6:b2:cb:53:7f:ac:93:0a:40:bd:9c:cb:40:02:
                    17:15:f2:0d:af:17:b2:5f:a5:cf:8c:33:a0:ee:ed:
                    c3:0b:e3:04:ef:65:e9:ac:b6:9a:d1:5f:03:83:f2:
                    39:2a:3a:2f:e5:c9:e9:3b:ff:79:3d:03:15:89:78:
                    21:34:8d:24:f6:eb:61:c2:31:89:32:e5:55:a3:99:
                    d8:45:72:84:e2:ac:42:e5:0d:1a:32:d9:dc:b3:f0:
                    ca:24:2e:00:20:bb:f8:02:e9:09:bd:0a:c7:09:c2:
                    5b:5b:95:98:f1:f2:5e:70:c2:5a:ab:b3:33:49:78:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:54:1D:2F:C4:F0:FE:E0:33:E6:8E:EC:7D:7F:F7:D4:BD:34:92:28
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.124.0/22
                IPv6:
                  2804:2f3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264879

    Signature Algorithm: sha256WithRSAEncryption
         b7:d6:07:f3:45:91:88:6f:30:53:bd:1d:06:25:3c:42:cd:4c:
         4d:18:d9:38:71:af:fd:0a:88:bc:5c:d9:70:6e:66:09:d2:5e:
         dc:28:e9:f3:07:7e:9e:a1:dd:1f:15:46:f1:3a:d8:ed:8f:e2:
         b9:3f:4c:f1:45:95:6c:3d:ac:44:2d:23:0c:d7:eb:d4:f5:8d:
         5a:4b:fb:9d:fe:d6:3c:92:ab:17:61:c5:4e:0c:8e:4c:45:34:
         c3:cb:dc:d3:5e:1e:b2:73:19:ef:a3:02:e3:4e:d2:8e:cf:3b:
         5c:13:6f:22:0e:58:e2:a4:82:49:60:4c:55:7e:57:19:85:3a:
         42:d3:9b:54:8e:cb:3e:34:a7:c2:bc:52:09:5c:e1:53:15:3b:
         75:5e:65:b1:a9:a2:b9:61:24:71:b1:4c:29:6a:8b:6d:74:da:
         b6:c0:95:5e:d5:9f:0a:57:6b:81:4b:db:f2:a8:05:63:34:7a:
         54:ff:d6:dc:0e:80:19:59:a1:a3:5e:2f:d1:3f:3b:89:74:66:
         11:1c:d4:32:4c:8d:54:f5:8a:12:75:13:56:90:45:71:c8:d5:
         28:bd:4a:39:d7:e5:f3:bd:e4:b1:2d:45:a8:7b:9d:e1:74:6e:
         54:fe:c8:a5:e5:7f:65:8d:89:c1:e6:f1:1e:d5:e8:73:3d:cd:
         f8:13:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org