Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C5413045E00558EB22334E83D6DB67E3FADECDFA.cer
File:                     C5413045E00558EB22334E83D6DB67E3FADECDFA.cer (raw, json)
Hash identifier:          AvHLCc5j49/L91zTH2hGWrz3HCfCvHMBNLdp+b707gc=
Subject key identifier:   C5:41:30:45:E0:05:58:EB:22:33:4E:83:D6:DB:67:E3:FA:DE:CD:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C16DAC02EBFB52576A0F7FFF11785398A3CBDEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/C5413045E00558EB22334E83D6DB67E3FADECDFA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 28 May 2022 20:26:21 +0000
Certificate not after:    Sat 27 May 2023 20:31:21 +0000
Subordinate resources:    AS: 264032
                          IP: 143.137.56.0/22
                          IP: 2804:29c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:16:da:c0:2e:bf:b5:25:76:a0:f7:ff:f1:17:85:39:8a:3c:bd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 28 20:26:21 2022 GMT
            Not After : May 27 20:31:21 2023 GMT
        Subject: CN=C5413045E00558EB22334E83D6DB67E3FADECDFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:0b:94:ca:77:c0:8a:bf:ab:de:6b:97:71:
                    15:58:da:bb:93:14:47:f5:6f:34:f7:ae:9a:c6:68:
                    00:80:24:25:75:14:59:04:ed:4e:16:d1:6c:b2:fd:
                    9c:f8:e4:36:5f:6c:95:11:f9:61:cc:31:41:e2:5b:
                    e4:45:3a:19:9c:ac:bf:ff:ed:40:d3:c6:3a:19:05:
                    10:9a:47:d3:5f:70:e4:07:fd:f6:04:80:da:91:a8:
                    50:15:20:bd:c5:2e:ff:21:7e:a7:07:27:d0:08:b6:
                    eb:16:ca:17:b4:9d:83:0d:cc:7b:15:c2:a2:b7:47:
                    30:ef:5c:41:a6:ca:a0:2f:5a:cd:87:ca:99:cf:11:
                    dc:3a:d3:d1:bf:53:49:ab:4a:81:7a:29:08:db:67:
                    9a:9f:91:d6:ed:e8:7c:4f:cf:9f:78:6e:a6:9b:53:
                    05:15:05:98:0e:8c:ea:06:2a:94:bd:90:b6:7d:78:
                    8e:1e:64:96:45:e8:45:03:44:60:76:a9:e9:78:c9:
                    fc:c7:29:cf:e1:79:53:42:81:12:e3:75:f2:e5:24:
                    af:01:07:f6:a5:1a:18:c8:f7:a7:fe:e2:aa:d6:3d:
                    a5:a7:9d:c7:3c:f9:eb:20:2e:0d:af:91:44:6c:32:
                    84:90:f1:ee:aa:d6:8f:c9:bc:69:88:ee:61:c3:f5:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:41:30:45:E0:05:58:EB:22:33:4E:83:D6:DB:67:E3:FA:DE:CD:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/C5413045E00558EB22334E83D6DB67E3FADECDFA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.56.0/22
                IPv6:
                  2804:29c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264032

    Signature Algorithm: sha256WithRSAEncryption
         09:e2:2c:8e:ec:64:6a:f8:69:59:3f:1c:85:d7:c3:57:d5:bb:
         55:9f:22:92:31:9d:31:8b:b7:3d:50:9d:dc:f2:be:3e:3f:f1:
         ce:da:0c:f8:25:e9:7a:90:bb:f6:48:56:d1:5a:33:7b:04:85:
         c9:d1:90:b3:28:8e:24:d0:0b:5c:f7:d1:37:75:6c:ac:47:c8:
         95:83:95:2c:3d:2e:cd:bf:d6:98:8d:bd:d3:c1:ad:e0:c8:f3:
         21:aa:b5:e2:ef:5a:32:b9:d3:70:78:b4:fe:52:5e:74:34:c5:
         d6:09:61:aa:73:3c:f3:5f:58:9a:27:50:d8:b6:0f:fa:b3:c1:
         67:f9:4c:52:4b:ac:98:23:6a:3e:1c:97:c3:c0:c1:f8:61:5f:
         4e:5d:f1:e8:2c:c2:0a:b3:d6:c6:4c:8b:61:cc:f3:6a:f9:81:
         11:63:31:11:0b:9f:eb:89:c8:5b:6b:93:ff:a8:ae:2a:32:4a:
         39:83:a2:82:06:92:39:4e:53:1d:5f:40:ce:5e:42:90:83:a8:
         a5:c3:18:7c:86:98:96:73:ae:d5:a0:6d:5f:d3:cf:d0:c5:93:
         9e:35:2a:12:1c:76:7e:52:e2:7c:f3:b9:44:fa:df:fe:f1:24:
         9e:67:d6:48:3b:ea:44:f1:12:2f:1b:d1:f2:ca:46:a6:12:f8:
         18:b5:47:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org