Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D5C6AFEA72EACE21CAF8211FBF519D375CB01702.cer
File:                     D5C6AFEA72EACE21CAF8211FBF519D375CB01702.cer (raw, json)
Hash identifier:          PjcINkY9BhOmc8za8m/92IxffniFJRWXVDHEdT1M9AQ=
Subject key identifier:   D5:C6:AF:EA:72:EA:CE:21:CA:F8:21:1F:BF:51:9D:37:5C:B0:17:02
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5ED29A14B01B2617F8614BBA59369952949320A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/D5C6AFEA72EACE21CAF8211FBF519D375CB01702.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 14:43:50 +0000
Certificate not after:    Thu 06 Mar 2025 14:48:50 +0000
Subordinate resources:    AS: 264906
                          IP: 168.228.84.0/22
                          IP: 2804:2fb0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d2:9a:14:b0:1b:26:17:f8:61:4b:ba:59:36:99:52:94:93:20:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 14:43:50 2024 GMT
            Not After : Mar  6 14:48:50 2025 GMT
        Subject: CN=D5C6AFEA72EACE21CAF8211FBF519D375CB01702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:30:66:3f:96:51:57:be:38:80:85:ad:fa:
                    ff:87:89:c9:40:60:84:63:46:0d:b8:4b:22:13:1c:
                    fc:b7:8f:36:35:16:7f:7f:e1:2e:25:21:f6:f5:f2:
                    d7:11:8a:93:3a:7a:69:0f:79:1c:57:2c:1c:ec:1f:
                    f2:b6:f8:a4:ae:bf:4d:6b:5e:61:81:d7:3f:7c:e3:
                    b4:50:67:d9:d6:4f:a5:07:4a:12:31:1c:be:8f:90:
                    74:a2:49:38:1e:b5:56:cd:c4:66:17:36:49:ef:65:
                    9a:fb:f2:e3:82:d6:14:d2:a6:06:17:20:58:25:c3:
                    24:f8:90:8b:1c:12:94:bf:e9:5d:2c:1b:1f:41:df:
                    a6:82:7a:74:3e:3f:02:31:7a:6b:c2:fe:da:9c:73:
                    e9:06:e3:d1:cf:26:a6:78:10:3e:b8:e8:83:f6:64:
                    23:c7:50:33:28:d7:42:b8:0b:28:f1:89:1d:f7:2c:
                    17:db:9c:90:a1:91:a9:8b:3f:50:6d:e4:b6:a7:db:
                    fb:2c:95:48:15:a5:4a:d3:50:30:4f:50:00:b6:15:
                    db:31:15:91:07:ab:cd:94:89:61:d9:1b:b6:6e:1e:
                    46:c0:49:05:98:4c:6e:3b:f5:eb:70:5b:09:77:f6:
                    dd:8f:75:63:d9:c4:48:38:ab:2c:48:00:7c:fb:9e:
                    f9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:C6:AF:EA:72:EA:CE:21:CA:F8:21:1F:BF:51:9D:37:5C:B0:17:02
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/D5C6AFEA72EACE21CAF8211FBF519D375CB01702.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.84.0/22
                IPv6:
                  2804:2fb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264906

    Signature Algorithm: sha256WithRSAEncryption
         4b:7d:24:b9:84:11:9b:ef:21:7f:82:66:fe:31:03:4d:5e:16:
         68:39:60:9b:51:45:cd:f1:8a:31:0f:7a:30:2a:3d:6b:de:10:
         33:57:33:99:75:06:f8:77:ce:0c:41:d5:5c:e2:3a:57:7a:67:
         46:3a:10:5f:3d:df:8c:25:76:81:6c:08:4d:e5:cc:25:50:bf:
         65:b0:55:4a:d8:09:08:11:61:d4:64:99:ab:37:6e:d7:c5:24:
         d5:02:c8:ae:97:64:a0:f5:16:04:79:9b:69:df:e5:e9:60:f7:
         56:99:eb:5b:e6:52:e1:fa:47:79:5e:90:d6:e9:b3:cb:d9:6f:
         06:30:fa:7e:12:e0:4a:2f:67:9a:74:fa:d0:28:97:af:64:ba:
         1f:15:c1:02:2c:df:3f:a0:6d:1a:d3:19:ad:6c:d5:1c:54:43:
         bd:20:c8:d6:ee:f2:d5:46:b9:bf:f8:33:2a:b6:a3:11:82:9f:
         52:08:e1:06:de:80:39:e2:00:27:af:e3:89:5c:0a:83:32:e9:
         8b:10:87:69:f4:9e:d7:52:30:13:82:b0:1e:79:b4:aa:2e:f3:
         16:7a:64:ec:1d:dc:eb:00:b3:e8:d6:f8:83:14:c4:90:b0:dc:
         d8:d5:63:a1:24:aa:ca:84:fd:d5:dd:fd:1d:d3:1d:32:dd:fd:
         0d:a1:0c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org