Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B5E880AC0ED4A359D2B0CAF40F9BA427AD76F336.cer
File:                     B5E880AC0ED4A359D2B0CAF40F9BA427AD76F336.cer (raw, json)
Hash identifier:          kWl6gGbn+5V2hlVwEq0O3UOGPvET/BU48ERjjC9D2I4=
Subject key identifier:   B5:E8:80:AC:0E:D4:A3:59:D2:B0:CA:F4:0F:9B:A4:27:AD:76:F3:36
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6120E2FD7FE4DB185D28B65FBA8162A2FC3D7620
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/B5E880AC0ED4A359D2B0CAF40F9BA427AD76F336.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Jan 2023 18:27:06 +0000
Certificate not after:    Thu 18 Jan 2024 18:32:06 +0000
Subordinate resources:    AS: 269664
                          IP: 45.191.20.0/22
                          IP: 2804:6800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:20:e2:fd:7f:e4:db:18:5d:28:b6:5f:ba:81:62:a2:fc:3d:76:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 19 18:27:06 2023 GMT
            Not After : Jan 18 18:32:06 2024 GMT
        Subject: CN=B5E880AC0ED4A359D2B0CAF40F9BA427AD76F336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:a4:26:57:9d:ec:16:d0:79:ac:b7:48:2f:
                    0a:07:df:ee:92:cb:51:64:34:86:cb:83:27:df:cb:
                    52:1a:7e:2e:30:c2:2e:58:ab:61:79:85:0b:f2:10:
                    68:a0:cb:b1:51:4e:74:a8:b5:42:e1:2a:d5:ea:8d:
                    64:66:36:b6:b5:35:f4:07:8a:bb:32:68:8a:0b:82:
                    08:dc:8a:ce:12:0a:b2:18:b6:d2:61:8e:e5:32:83:
                    4b:9f:2c:4b:7a:f5:6b:c1:60:bd:5d:14:5a:e2:63:
                    a7:ef:ad:54:33:28:9b:cd:09:41:d2:32:a9:77:ea:
                    32:1e:26:7e:90:37:d3:29:14:83:f8:67:d1:f7:39:
                    8b:78:5b:f1:3f:97:fe:d4:04:bb:39:b7:1e:aa:6b:
                    bd:7d:30:e9:cf:55:1c:af:78:4e:c2:1a:a7:4a:8b:
                    ed:aa:28:f5:23:cc:dd:43:86:bf:8f:f2:38:25:76:
                    c9:f0:86:69:d6:ba:dc:c6:fc:ae:fb:db:43:af:8e:
                    7d:2b:62:42:2d:43:0d:d3:61:8c:47:81:52:a0:3a:
                    3b:f8:c2:56:84:d4:63:48:9c:8d:bc:ca:db:dc:97:
                    b5:06:93:d4:6d:ea:50:f2:4d:43:e4:bd:f7:58:cf:
                    cb:2e:4c:34:9f:ad:c2:6c:02:3c:08:01:29:4b:77:
                    50:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:E8:80:AC:0E:D4:A3:59:D2:B0:CA:F4:0F:9B:A4:27:AD:76:F3:36
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/B5E880AC0ED4A359D2B0CAF40F9BA427AD76F336.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.20.0/22
                IPv6:
                  2804:6800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269664

    Signature Algorithm: sha256WithRSAEncryption
         20:c3:c9:c2:81:89:55:fd:44:90:26:3e:f7:a6:76:d2:07:47:
         2f:47:c2:cd:45:5f:76:d0:1d:f1:2c:a7:88:8e:83:a6:0b:6c:
         9d:16:9d:b9:c5:d0:84:32:eb:61:97:c9:6d:77:d0:ae:8f:7b:
         93:c4:4e:ba:fb:29:9e:cc:50:df:9b:28:a3:0b:9a:2a:ca:c2:
         9a:89:0b:a1:2d:6a:85:ad:7a:44:11:8f:fe:b5:fa:e4:96:c2:
         e2:69:d9:15:06:66:68:7b:90:44:f9:e5:c1:37:fd:47:8e:55:
         51:c6:e3:af:7c:c5:d0:7b:e2:19:93:aa:2e:ee:dd:d1:13:98:
         62:4a:eb:1c:eb:55:b5:36:9d:80:df:7a:5d:13:41:56:f3:50:
         d6:d9:24:c7:85:5d:57:0a:d8:8f:10:e2:b5:08:56:fc:f7:05:
         bb:f5:eb:7a:68:1f:d6:7a:f5:54:c0:53:ff:4d:fb:87:92:ad:
         88:b8:5b:1b:d7:8d:1a:2e:36:86:73:b0:c3:a5:d2:0f:69:9d:
         76:09:6a:00:1f:90:56:ba:e1:9e:f2:04:0a:f2:44:ac:73:e7:
         aa:46:c3:11:02:53:fc:ac:4d:c6:97:00:0a:3e:ab:8c:f9:df:
         e1:b1:26:56:a7:93:91:d2:22:24:31:5e:1f:fe:46:e2:c8:b9:
         d4:8c:55:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org