Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.cer
File:                     C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.cer (raw, json)
Hash identifier:          CKDB8TyyPfBImBGNW5mc8JtiKnrxfmhFoyoxNOzDlVE=
Subject key identifier:   C5:B9:91:0C:7B:4E:71:FD:2B:F9:FC:1A:66:96:7A:2B:7D:75:87:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       52F4D9F454137C1FA2F3D91B627AA58182D191EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 14:38:31 +0000
Certificate not after:    Wed 19 Mar 2025 14:43:31 +0000
Subordinate resources:    AS: 268876
                          IP: 45.171.122.0/23
                          IP: 2804:5be8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f4:d9:f4:54:13:7c:1f:a2:f3:d9:1b:62:7a:a5:81:82:d1:91:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 14:38:31 2024 GMT
            Not After : Mar 19 14:43:31 2025 GMT
        Subject: CN=C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:29:d7:91:f7:f1:2b:ee:b3:26:db:f4:e7:45:
                    80:a5:42:f7:03:46:99:5b:a4:57:39:54:37:38:52:
                    e0:a9:89:b4:3c:2e:16:98:f6:9b:6b:54:80:3a:3a:
                    bb:d9:ff:82:2d:7f:b9:0c:b7:d1:03:3e:09:e6:1f:
                    7a:39:a1:b7:f5:b7:69:15:16:84:10:b8:28:56:bf:
                    72:08:3b:15:aa:20:dd:6b:ec:84:86:51:7a:72:a1:
                    a8:ac:03:01:f2:b1:2e:34:19:4a:94:bf:94:32:de:
                    16:69:f8:ef:16:9d:71:c1:17:81:65:7e:25:3f:59:
                    12:3a:cb:ab:a1:ff:ad:a3:ca:ba:ea:a7:26:5e:5d:
                    26:38:d3:05:17:a8:c5:c2:96:e1:7c:54:ea:b2:5f:
                    86:7a:2a:88:e5:d3:12:23:b9:a3:52:e0:d5:80:f1:
                    34:81:e2:8e:6e:77:03:96:bd:bd:98:f3:ed:03:99:
                    8f:3c:2c:a8:8e:3d:8d:96:19:56:6b:52:71:2d:21:
                    c0:79:1d:06:32:21:ee:2b:0c:c0:ad:2e:c4:55:6a:
                    1b:30:f3:84:a0:98:82:85:49:cc:d1:2b:d0:40:e3:
                    17:c7:8d:d0:e6:54:35:9e:9d:f6:04:22:66:ad:33:
                    2c:69:b1:2f:08:24:0c:7c:92:6c:1f:db:fc:eb:7e:
                    f2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:B9:91:0C:7B:4E:71:FD:2B:F9:FC:1A:66:96:7A:2B:7D:75:87:86
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.122.0/23
                IPv6:
                  2804:5be8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268876

    Signature Algorithm: sha256WithRSAEncryption
         96:0a:58:aa:49:b8:4f:7b:f0:b1:e9:ef:92:69:e7:e9:b5:de:
         a7:49:7e:2a:30:b6:a4:0e:8b:36:2a:bf:4d:7b:a4:b3:dc:e9:
         da:cb:f9:f0:b7:98:4e:53:b6:3e:9b:aa:17:47:42:60:2a:4b:
         1b:02:8b:9f:a4:7c:1d:2b:87:cc:01:a3:f7:be:ca:fc:cb:3e:
         79:2a:98:81:40:24:0d:48:68:91:33:5f:3a:c9:8a:9d:95:ad:
         02:d0:23:fa:be:f7:84:be:61:ef:dc:ca:a0:f7:ca:2a:f8:0f:
         b4:39:c2:fe:84:d8:00:f3:e0:12:91:89:0e:94:82:87:c0:1f:
         7a:27:10:2a:68:2f:d1:58:50:dd:3a:9e:18:55:78:6d:57:e2:
         a4:ba:79:0c:b9:fd:67:3b:be:8c:f6:96:67:55:92:61:ef:b0:
         9b:91:e2:d8:48:2c:02:3c:b2:04:6c:a8:3e:21:22:b1:14:e2:
         3c:a2:6d:56:68:cd:7a:34:21:25:44:5b:94:04:0c:6d:e0:a0:
         94:1d:f2:98:14:9b:75:ba:1f:d2:c7:6f:fb:3f:47:86:bc:f8:
         9e:53:53:63:ba:33:fa:c1:23:ce:8b:76:98:dd:33:6f:72:12:
         5f:2a:15:b6:a4:cb:1e:86:b2:69:a4:b3:fe:b1:0c:79:13:63:
         de:00:34:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----