Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.cer
File:                     B5D59FAAE8519CF77C8C40B65815F04384ACE81B.cer (raw, json)
Hash identifier:          TEfmqU09JbZd2D7Hib6jUPcs1DGaR57C8eg6MfgE7JI=
Subject key identifier:   B5:D5:9F:AA:E8:51:9C:F7:7C:8C:40:B6:58:15:F0:43:84:AC:E8:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       36F82A35233D0D5DD0AE682E4E0B30469EDE33A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Sep 2021 17:54:18 +0000
Certificate not after:    Sat 03 Sep 2022 17:59:18 +0000
Subordinate resources:    AS: 61776
                          IP: 143.208.136.0/22
                          IP: 200.196.136.0/22
                          IP: 2804:192c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f8:2a:35:23:3d:0d:5d:d0:ae:68:2e:4e:0b:30:46:9e:de:33:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  4 17:54:18 2021 GMT
            Not After : Sep  3 17:59:18 2022 GMT
        Subject: CN=B5D59FAAE8519CF77C8C40B65815F04384ACE81B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:a0:0c:50:1b:88:c7:a9:80:d7:0a:99:2a:
                    f9:d6:61:97:b7:f5:4f:e9:11:37:5e:66:73:30:0d:
                    15:ad:d2:50:c6:80:e3:09:16:01:7e:c5:92:e1:b3:
                    81:c8:17:95:5f:6c:19:90:ff:1a:6e:51:59:96:80:
                    a9:41:b0:10:06:ce:36:44:5f:df:1a:e5:87:5f:f6:
                    ce:00:f8:40:75:96:2d:67:04:fd:f8:b0:64:e4:b2:
                    a2:88:94:ff:d0:f3:1e:6d:a8:0c:8b:a5:e4:94:ce:
                    a6:ee:b9:8b:90:ad:c9:1e:b7:24:c0:b4:cb:8e:44:
                    81:18:32:b9:cd:53:84:ec:8b:4c:7b:d1:75:79:a4:
                    b2:64:2a:91:61:bf:5b:cd:80:e0:72:17:2a:a4:cd:
                    12:27:4e:02:66:a1:2d:75:67:da:d8:66:97:ab:2c:
                    60:40:d0:99:a3:7f:79:de:72:a4:74:c0:3c:7f:2b:
                    28:db:f0:b6:c5:5f:01:be:0e:72:ab:f6:8d:f6:ad:
                    c4:c6:e6:4b:a5:36:f3:fa:6a:4d:d9:13:06:c3:3e:
                    72:86:ff:ae:eb:5e:ee:3b:46:d2:9a:98:1e:d0:d8:
                    2e:75:1b:c6:b1:99:79:f1:c0:67:2b:36:bf:2d:d3:
                    81:2c:fb:8f:09:d8:fc:b6:7f:34:c0:05:3a:cb:ef:
                    10:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:D5:9F:AA:E8:51:9C:F7:7C:8C:40:B6:58:15:F0:43:84:AC:E8:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.136.0/22
                  200.196.136.0/22
                IPv6:
                  2804:192c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61776

    Signature Algorithm: sha256WithRSAEncryption
         7c:ed:68:cd:0d:ba:ef:59:23:b4:42:4e:11:2b:dd:f3:8c:9a:
         4f:65:b5:96:75:f8:34:57:15:61:c4:15:fa:ed:83:39:cc:f3:
         5e:bd:80:fc:74:3d:fd:9e:89:ef:9b:d7:1a:df:47:8a:ea:0b:
         87:d6:f8:dd:6b:b7:10:9d:99:a6:9c:29:b1:37:f8:8d:d7:b8:
         63:ef:9e:1e:10:bd:db:4b:e6:75:ec:81:33:14:75:87:0d:d8:
         f3:ab:f4:d6:ed:8d:19:af:b5:40:d4:a3:a1:bc:e0:ad:46:27:
         2f:29:c9:db:99:3e:ad:71:f3:55:36:b9:71:dd:bb:0c:f5:e6:
         b3:ca:e4:80:88:ba:3c:e6:8a:e1:c1:cd:58:cc:bb:97:96:10:
         a1:7e:bd:dd:34:47:12:fe:eb:92:18:95:ea:b7:52:e1:af:d5:
         5c:01:79:7d:32:2f:e6:04:de:d7:22:ef:f3:f5:28:33:18:a1:
         98:57:a1:56:36:55:aa:d9:65:7a:43:82:20:f3:5e:e2:52:1c:
         29:2d:d9:57:18:dc:94:e9:b5:9c:e2:61:28:6a:fa:c3:51:c9:
         9f:33:ac:fc:d1:e7:23:b6:bb:86:5a:b1:69:94:9d:d1:d8:60:
         55:1a:63:10:bc:6d:a3:18:eb:d4:4b:a1:40:cb:19:00:ed:07:
         4a:f5:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org