Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C5949E0114CEC27739D4FFD39EAF9EC469F3325D.cer
File:                     C5949E0114CEC27739D4FFD39EAF9EC469F3325D.cer (raw, json)
Hash identifier:          HvXfKF0Ym6JAXw8589YuhRIcBeJPeV9WE35BSKDdOOs=
Subject key identifier:   C5:94:9E:01:14:CE:C2:77:39:D4:FF:D3:9E:AF:9E:C4:69:F3:32:5D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       56676DD7EEA5C15E51C9F545012C0434BD0E6FB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/1/C5949E0114CEC27739D4FFD39EAF9EC469F3325D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 01:56:26 +0000
Certificate not after:    Tue 18 Feb 2025 02:01:26 +0000
Subordinate resources:    AS: 266985
                          IP: 45.226.52.0/22
                          IP: 2804:465c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:67:6d:d7:ee:a5:c1:5e:51:c9:f5:45:01:2c:04:34:bd:0e:6f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 01:56:26 2024 GMT
            Not After : Feb 18 02:01:26 2025 GMT
        Subject: CN=C5949E0114CEC27739D4FFD39EAF9EC469F3325D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:94:13:f6:a5:fa:62:da:fa:96:7f:83:47:b6:
                    2e:c5:3c:53:2e:b9:fb:fc:14:69:20:eb:41:de:43:
                    c2:bf:57:b4:91:39:ef:a4:d5:3f:58:59:16:02:e1:
                    c1:27:f4:93:8c:84:dd:2e:fc:14:9b:01:8f:2e:7b:
                    d1:0e:43:40:16:c8:bb:70:9d:ca:fe:0f:4d:bf:dd:
                    a3:c9:0b:e8:d2:bf:b1:74:b5:70:d5:ea:24:c6:4a:
                    7a:fe:dd:b3:7e:ed:e2:c0:22:84:ae:ac:df:09:00:
                    72:ae:14:7f:9d:82:ff:bf:33:e2:29:e6:89:0a:08:
                    c6:c2:b0:c6:3a:df:c4:c2:de:b3:92:da:86:ba:6f:
                    42:2a:1c:5e:a4:d9:d2:ba:15:bd:f4:88:18:46:23:
                    64:26:b3:b0:db:1e:cb:d4:bb:df:c7:59:4a:18:1e:
                    ef:dc:05:5e:ec:41:00:18:7a:6d:3e:d1:51:45:c6:
                    68:0b:aa:9b:6c:55:de:5f:8a:fa:81:49:5d:b2:ea:
                    87:cf:9f:ec:aa:1c:5c:01:f3:6f:0d:36:89:09:e2:
                    6f:c7:8a:b2:23:75:0f:56:46:a9:1f:ff:41:d0:dd:
                    b3:cf:0c:90:53:67:28:96:5e:7b:bd:c2:01:33:e2:
                    dc:0a:c7:3d:bd:9c:07:37:c0:39:68:bb:a5:2e:d0:
                    81:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:94:9E:01:14:CE:C2:77:39:D4:FF:D3:9E:AF:9E:C4:69:F3:32:5D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/1/C5949E0114CEC27739D4FFD39EAF9EC469F3325D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.52.0/22
                IPv6:
                  2804:465c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266985

    Signature Algorithm: sha256WithRSAEncryption
         11:78:0a:88:33:64:16:66:88:43:55:95:63:8b:8b:46:72:be:
         44:7b:77:b3:df:a8:d6:c2:06:a1:03:fe:9e:94:b5:36:6f:bb:
         10:56:f8:0e:2b:aa:b2:22:74:05:a5:bd:03:6e:3e:de:f1:66:
         81:9a:c2:eb:cf:ac:9c:29:9c:fc:fc:ba:6d:12:80:57:2c:65:
         35:5a:3a:e5:27:9c:f9:90:eb:87:0e:8d:5d:dc:95:ec:7a:46:
         9f:79:27:86:44:5c:9d:e2:87:73:f3:15:f4:d1:00:ef:46:99:
         35:22:54:a6:98:40:c5:6b:24:21:24:02:4f:54:f7:49:3d:fa:
         f9:b2:98:b9:1d:a8:a9:cf:40:bc:f7:83:79:07:3d:72:e1:fa:
         38:b9:19:05:7e:0d:4d:53:37:87:ef:1d:6b:b6:76:f9:d2:48:
         cc:c1:49:ee:5b:33:ae:1f:f4:72:dc:05:10:b9:ce:4a:89:00:
         10:26:12:02:d3:82:c4:fa:25:e1:f7:c1:f8:93:7e:b1:c5:64:
         23:b2:d2:43:32:5f:21:b8:04:94:9a:54:31:c5:ec:fe:ea:47:
         a1:7f:6b:97:a2:28:83:bc:64:ff:c4:51:84:9d:d8:be:a2:08:
         1d:e5:54:a2:80:60:79:5b:14:6e:b4:7d:c2:85:ca:f8:54:bc:
         6b:a0:f6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org