Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B5A102063C2AE1BF53C484AFA6107C8D380AE59F.cer
File:                     B5A102063C2AE1BF53C484AFA6107C8D380AE59F.cer (raw, json)
Hash identifier:          D6bSgSRzTtG0qe/bRx3hc2pZI+A6BGgwmPx/bVPtYQk=
Subject key identifier:   B5:A1:02:06:3C:2A:E1:BF:53:C4:84:AF:A6:10:7C:8D:38:0A:E5:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BE07F434F2A22F2A6E0071772CED96143053934
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/B5A102063C2AE1BF53C484AFA6107C8D380AE59F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Sep 2023 01:51:45 +0000
Certificate not after:    Fri 20 Sep 2024 01:56:45 +0000
Subordinate resources:    AS: 268707
                          AS: 270966
                          IP: 45.169.160.0/23
                          IP: 2804:5984::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e0:7f:43:4f:2a:22:f2:a6:e0:07:17:72:ce:d9:61:43:05:39:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 01:51:45 2023 GMT
            Not After : Sep 20 01:56:45 2024 GMT
        Subject: CN=B5A102063C2AE1BF53C484AFA6107C8D380AE59F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:5f:ad:fe:23:30:51:cc:2e:ac:88:db:ec:
                    19:9f:fb:55:46:57:9b:b2:da:ba:7c:89:0e:94:c2:
                    1b:2a:9e:3c:5d:fc:38:6e:04:ec:ea:a0:f0:c7:a2:
                    8f:0b:11:56:94:21:c1:9a:05:ac:39:e2:c5:cd:0e:
                    88:94:9c:3a:bd:e4:84:be:03:ae:ac:b2:2e:2d:52:
                    ee:0a:81:3f:c4:6f:47:5a:99:8d:bc:e4:e2:60:0f:
                    0b:90:63:63:7c:55:7c:30:bc:6a:96:2b:58:cc:a5:
                    58:25:e5:16:b2:f2:cb:5c:d1:73:c8:c5:27:bd:0a:
                    c3:d9:b6:2f:64:76:a9:b2:d3:71:16:1d:60:77:af:
                    c2:e7:dd:25:2d:89:4b:0f:7d:a0:c7:c8:6c:f9:8d:
                    80:4e:e1:c0:33:b3:98:7d:a0:1c:2a:af:5d:70:6b:
                    ca:23:50:36:71:cb:3c:05:5e:2c:54:c1:c2:af:4b:
                    2b:43:9d:2d:1e:4e:cd:48:c4:bd:42:a9:ca:cc:3c:
                    7f:e0:19:30:4a:68:d9:33:50:64:cd:13:c0:78:77:
                    9e:6b:e5:82:2a:6a:cd:8c:5f:6a:c1:72:af:60:e2:
                    ee:5d:39:ad:17:af:39:8a:c4:63:7a:8e:e9:31:fc:
                    8a:a9:2b:b0:82:c9:c0:81:25:39:2b:bf:0a:75:c8:
                    8d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:A1:02:06:3C:2A:E1:BF:53:C4:84:AF:A6:10:7C:8D:38:0A:E5:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/B5A102063C2AE1BF53C484AFA6107C8D380AE59F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.160.0/23
                IPv6:
                  2804:5984::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268707
                  270966

    Signature Algorithm: sha256WithRSAEncryption
         3a:bf:99:ba:ae:c3:ef:9e:67:3b:e8:67:16:2f:c1:fd:c0:58:
         be:4c:91:7e:bc:5b:d6:b9:e3:3b:d4:d1:75:10:95:b8:66:9f:
         be:35:50:51:c8:b3:72:81:83:7e:fd:c5:66:f9:c3:62:17:35:
         80:ef:ca:df:46:f1:75:d7:6e:91:86:ee:94:b5:9b:21:39:db:
         21:3a:b5:57:79:d8:c6:e4:9e:10:61:46:cc:72:40:48:e8:08:
         15:73:53:47:af:8c:34:ad:d4:e9:ce:dc:b6:d0:b3:9c:05:83:
         84:97:b3:e4:ee:3f:f6:cf:2f:5c:b7:a1:3c:3b:0e:dd:3e:b6:
         4e:c2:41:06:d7:5a:3d:28:45:a1:e5:be:5e:74:d6:48:6e:fb:
         74:a4:93:7c:2c:d1:bd:55:60:21:f9:7c:2d:b4:94:cb:0f:c0:
         7f:e6:85:ac:8a:1e:6b:9d:de:4e:70:6b:0a:86:83:e5:6b:ce:
         92:28:ed:87:ce:ad:66:33:64:30:01:d5:83:83:da:e4:f4:12:
         ec:fd:7f:8c:6e:14:6a:e0:48:e2:75:ad:52:99:7c:09:7e:b1:
         e7:e8:49:af:5f:b4:4e:76:b7:f3:fc:0d:3a:4d:a9:c3:dc:ed:
         f9:eb:6c:9e:2e:fd:1a:d8:74:0c:d5:4d:30:ed:d8:da:cf:02:
         6e:b9:70:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org