Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C5CB3BD4BEC06BCF009F75E32C1958E70F66DD13.cer
File:                     C5CB3BD4BEC06BCF009F75E32C1958E70F66DD13.cer (raw, json)
Hash identifier:          xcB5vSc4EQBxYxt68nSDOfi7+8Si0VpRUR5y29SDDI0=
Subject key identifier:   C5:CB:3B:D4:BE:C0:6B:CF:00:9F:75:E3:2C:19:58:E7:0F:66:DD:13
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6E215E9E82EBFB940E3181FCACC01666A3FA74FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/C5CB3BD4BEC06BCF009F75E32C1958E70F66DD13.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Aug 2023 01:49:52 +0000
Certificate not after:    Tue 20 Aug 2024 01:54:52 +0000
Subordinate resources:    AS: 267330
                          IP: 45.233.224.0/22
                          IP: 2804:4bcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:21:5e:9e:82:eb:fb:94:0e:31:81:fc:ac:c0:16:66:a3:fa:74:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 22 01:49:52 2023 GMT
            Not After : Aug 20 01:54:52 2024 GMT
        Subject: CN=C5CB3BD4BEC06BCF009F75E32C1958E70F66DD13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:4d:aa:4c:8c:21:e8:a9:17:74:8d:21:2b:22:
                    61:68:70:25:c2:20:93:96:dc:4e:d2:81:a3:b3:f5:
                    71:d1:c8:d7:d8:50:80:a5:9a:42:9a:64:4f:a3:2b:
                    5d:2b:8c:1f:0b:21:b4:06:3d:6b:2f:c4:c5:78:fc:
                    fc:95:b3:cb:ca:72:e2:ad:a4:c8:a4:50:67:3c:2f:
                    40:25:de:78:31:1f:de:6b:04:f4:25:39:d3:30:47:
                    60:48:a9:4c:a0:a1:6c:f2:03:77:cf:4d:74:6a:6f:
                    d4:6e:b8:80:fe:5b:76:61:d8:1c:57:1d:8c:b2:59:
                    1b:f4:2b:70:31:cc:5a:c6:72:25:a9:4b:c1:de:81:
                    d3:b7:42:ef:46:d6:a3:6d:8b:dc:1f:5e:be:b8:e9:
                    e5:53:94:fa:e8:d3:56:fa:9c:b8:91:2d:ad:c8:bc:
                    99:68:e5:34:1e:14:7a:84:4d:60:3a:2f:ec:d6:6a:
                    28:f7:20:b0:10:2b:c3:82:dd:6d:57:de:54:cd:71:
                    72:6e:04:8a:67:68:3d:4e:d9:1a:70:60:e7:eb:cd:
                    eb:48:92:70:c8:04:b5:bb:08:65:36:cd:49:27:6b:
                    c9:2f:e3:7f:fc:6f:6f:7f:f2:04:2f:8a:e5:d3:51:
                    cf:9b:5c:f5:49:e3:f4:e7:14:64:a6:c8:54:47:0c:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:CB:3B:D4:BE:C0:6B:CF:00:9F:75:E3:2C:19:58:E7:0F:66:DD:13
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/C5CB3BD4BEC06BCF009F75E32C1958E70F66DD13.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.224.0/22
                IPv6:
                  2804:4bcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267330

    Signature Algorithm: sha256WithRSAEncryption
         2d:3e:87:ac:02:2f:50:0e:a6:aa:d4:ed:a3:a1:66:cd:79:50:
         3a:de:2d:37:61:8f:4e:27:cd:de:07:1f:48:cb:c8:24:1b:c5:
         37:0d:59:50:c9:2c:f3:92:9c:78:5e:3c:78:a9:e0:8d:99:44:
         63:6c:04:e1:2e:33:59:4c:ff:ec:2d:1c:fe:df:6f:cb:12:5d:
         6f:b0:85:f7:40:f3:37:bf:07:3b:b6:3f:4f:eb:48:00:5b:c4:
         a6:a4:03:b8:82:dc:c3:2a:7d:ce:00:fc:c7:35:43:ac:f3:2b:
         bc:c8:28:34:45:15:2f:51:db:8e:4e:37:e3:76:93:0d:83:55:
         18:6c:a3:93:78:0f:da:7b:89:2a:f3:4e:90:37:d0:e3:76:18:
         59:ac:e6:1e:b0:53:48:40:20:99:22:64:08:5c:15:51:ad:0b:
         ab:23:46:d5:5f:c0:17:45:44:0b:e5:70:f7:aa:ab:76:69:a1:
         0f:d0:18:40:94:a9:cd:29:ff:f4:34:22:36:37:c3:5c:94:a6:
         7b:66:8f:34:89:fc:50:53:6b:2c:bb:2e:0b:86:4d:e6:e6:c2:
         51:ef:75:6c:63:72:49:b0:01:04:02:49:5b:e0:bc:83:23:ec:
         61:c0:1e:ac:47:d6:c3:94:bf:57:ba:7e:38:63:69:dd:c8:db:
         f3:a2:c7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org