Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D5A296E7637B50AB6A5A1B4621E114740B98B53B.cer
File:                     D5A296E7637B50AB6A5A1B4621E114740B98B53B.cer (raw, json)
Hash identifier:          V/YNexI3nR/EpUoMZWapLJBGW7QxLnz7HNNoLSupH+g=
Subject key identifier:   D5:A2:96:E7:63:7B:50:AB:6A:5A:1B:46:21:E1:14:74:0B:98:B5:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       777FAFB39304FF77DD2D3C2DC44B71AE25A91B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/D5A296E7637B50AB6A5A1B4621E114740B98B53B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 14:31:29 +0000
Certificate not after:    Thu 18 Apr 2024 14:36:29 +0000
Subordinate resources:    AS: 264181
                          IP: 138.97.100.0/22
                          IP: 2804:23c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7f:af:b3:93:04:ff:77:dd:2d:3c:2d:c4:4b:71:ae:25:a9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 20 14:31:29 2023 GMT
            Not After : Apr 18 14:36:29 2024 GMT
        Subject: CN=D5A296E7637B50AB6A5A1B4621E114740B98B53B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:41:86:fb:25:ba:b6:59:2b:f1:c4:f3:6c:
                    ea:76:9c:1a:91:ca:1a:d7:54:d2:0d:cf:ae:be:78:
                    b0:10:f1:00:63:1b:c5:a3:6d:68:bd:9f:fd:67:8c:
                    8a:fc:63:5d:09:cb:f8:34:f9:eb:f9:d9:19:b6:fe:
                    ea:08:0d:cd:16:5d:ac:f1:dc:bf:b3:25:4a:ad:0d:
                    70:60:26:c3:d0:63:7a:59:b4:46:4f:80:14:c0:ff:
                    e0:0e:89:d3:2b:be:d5:49:65:59:6a:76:d9:19:02:
                    e8:16:85:bb:ec:36:9f:9a:58:b5:72:83:df:3d:26:
                    27:c1:92:00:f2:28:aa:fc:7d:cb:ba:c1:fc:ee:94:
                    a0:5e:9e:c1:73:58:52:10:9c:5a:da:25:53:0c:ca:
                    36:64:12:c3:d7:92:80:81:d9:23:87:55:88:d8:4e:
                    05:91:3b:21:cb:31:1f:08:7c:57:fd:ca:d0:ae:d0:
                    28:f3:73:13:0d:62:84:3b:64:5b:b3:ab:5a:24:51:
                    85:0f:38:32:d6:2b:9f:be:db:75:e2:2a:b7:0d:b2:
                    0c:1c:4f:80:07:26:b1:30:d1:71:a6:54:d6:a4:b5:
                    58:50:2d:29:97:9c:5d:cb:a2:1e:30:54:0f:9f:57:
                    f2:70:61:76:81:7e:70:da:c2:32:85:7e:10:99:9a:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:A2:96:E7:63:7B:50:AB:6A:5A:1B:46:21:E1:14:74:0B:98:B5:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/D5A296E7637B50AB6A5A1B4621E114740B98B53B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.100.0/22
                IPv6:
                  2804:23c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264181

    Signature Algorithm: sha256WithRSAEncryption
         21:5d:e3:d0:e2:de:a8:8e:88:03:48:94:62:18:07:a9:77:16:
         4e:6d:57:5a:64:fc:9f:b6:48:ce:c5:da:c8:d7:cc:fe:0f:8d:
         26:3c:1e:e9:f4:9c:c2:3d:00:82:f9:e4:8d:87:aa:5b:58:a3:
         f7:3c:cb:57:7f:c8:67:01:d7:52:4a:d3:ea:26:6d:cf:14:89:
         23:8b:1d:66:bb:d0:24:6b:76:52:07:4e:b3:1a:34:77:81:f1:
         af:16:b2:0d:62:69:23:59:65:a7:e4:3e:da:f1:c5:ab:b7:9a:
         83:86:a3:45:f0:89:70:13:a7:d5:cc:f8:79:22:88:b4:5c:d0:
         27:ca:f8:b7:bf:03:ac:17:a9:98:b3:15:23:00:a9:54:b7:5c:
         eb:24:d6:62:c2:0f:b7:77:67:f6:79:43:76:b2:5b:5a:40:7b:
         82:02:bc:c6:17:d9:2d:75:35:7d:bf:89:e4:a1:4c:58:da:99:
         fb:1d:0a:c6:cd:56:33:aa:ca:9a:84:9c:60:d5:1e:41:e2:14:
         38:b4:d0:96:5c:9d:01:c3:dd:3f:46:67:26:cc:32:28:81:e8:
         b6:51:0a:96:78:de:14:c2:86:b6:94:57:94:52:bb:a7:08:ce:
         c2:40:58:29:a7:55:e1:41:ec:bd:b1:d1:3e:83:34:6e:34:cd:
         9c:98:5a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org