Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D5E11E4E5713A8E1E9005DEE16B2C23B64EA2176.cer
File:                     D5E11E4E5713A8E1E9005DEE16B2C23B64EA2176.cer (raw, json)
Hash identifier:          x/89cxyhw9qfbWerfC9SuFUvmSMXFoywIGWYqrLKj3s=
Subject key identifier:   D5:E1:1E:4E:57:13:A8:E1:E9:00:5D:EE:16:B2:C2:3B:64:EA:21:76
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       45E2A55D740B02B6D4449560483B8F06E5328DDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/D5E11E4E5713A8E1E9005DEE16B2C23B64EA2176.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Nov 2023 17:10:47 +0000
Certificate not after:    Thu 28 Nov 2024 17:15:47 +0000
Subordinate resources:    AS: 268332
                          IP: 45.238.136.0/22
                          IP: 2804:4f88::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e2:a5:5d:74:0b:02:b6:d4:44:95:60:48:3b:8f:06:e5:32:8d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 30 17:10:47 2023 GMT
            Not After : Nov 28 17:15:47 2024 GMT
        Subject: CN=D5E11E4E5713A8E1E9005DEE16B2C23B64EA2176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:a3:d6:6a:65:53:3c:43:da:83:99:5a:45:
                    4e:72:0e:79:0b:b7:e6:b4:f0:6b:33:4d:3e:36:0b:
                    a5:3f:44:0b:aa:45:97:18:d0:7b:a3:a2:b9:29:d4:
                    32:71:7c:38:4c:08:84:87:7e:80:1f:05:56:b1:97:
                    1a:bd:28:f1:fe:e4:05:78:cc:1e:47:68:fb:22:b6:
                    c1:71:19:be:7f:73:39:1b:fe:55:bc:2c:32:c5:97:
                    02:da:1b:f6:fc:e6:fd:58:ec:3c:46:98:bd:ac:3c:
                    fa:47:31:55:55:d6:3b:66:2a:01:cb:28:d6:38:12:
                    f9:bb:ec:49:f4:c8:30:66:cb:69:29:6e:6d:8b:5e:
                    da:ff:80:b4:b1:a2:47:dc:aa:90:fc:c6:08:f4:f0:
                    15:d7:0a:20:e4:48:a5:2b:cd:41:00:8e:9c:b1:e3:
                    14:f6:8b:be:14:56:df:6c:9d:b4:2b:33:96:06:85:
                    f8:2f:98:5a:a4:ec:4e:52:a5:9f:e5:1f:a1:d8:55:
                    79:79:5c:ca:b4:ff:b6:16:59:55:97:62:0c:7d:bd:
                    f0:9a:77:5b:51:f8:11:59:98:20:87:95:29:64:31:
                    66:20:35:c7:cc:f0:fe:9f:90:01:a6:6b:d7:fb:de:
                    15:82:94:26:ae:46:f3:85:cc:10:f8:d7:b9:4d:ae:
                    1c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:E1:1E:4E:57:13:A8:E1:E9:00:5D:EE:16:B2:C2:3B:64:EA:21:76
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/D5E11E4E5713A8E1E9005DEE16B2C23B64EA2176.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.136.0/22
                IPv6:
                  2804:4f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268332

    Signature Algorithm: sha256WithRSAEncryption
         9e:de:b0:bf:f0:dc:03:a9:dd:a3:8a:72:1c:1a:e7:fd:68:bb:
         7f:04:d1:26:9d:12:02:bb:e3:ba:64:ba:1d:e5:b2:40:55:61:
         43:5e:64:3a:0c:64:ae:f6:8f:18:b8:3f:09:83:5d:b9:c4:3a:
         75:98:de:e2:7e:70:b1:4c:99:9f:9f:9a:4d:b2:f2:d6:9e:03:
         63:6e:46:1d:1a:27:8c:c8:33:ca:74:3e:91:4a:f1:51:6b:ba:
         3e:67:3d:67:30:c2:23:d1:de:56:cd:42:31:62:a0:ec:72:e5:
         e0:72:b4:0c:c1:dc:e6:dd:e0:0f:b1:d1:cc:94:72:25:da:ed:
         88:94:63:54:fc:e2:90:fa:bd:65:c9:a0:14:33:49:ee:21:5d:
         1f:5c:90:42:7c:c5:70:19:03:83:8c:9e:3d:17:ac:4d:ee:51:
         08:04:90:1d:85:ad:28:2c:f2:40:c8:6f:3e:ac:42:8b:e2:de:
         eb:85:79:7b:2d:31:11:b5:a0:f7:7c:be:2d:3c:99:3a:69:50:
         26:08:9a:ef:93:7c:e1:ec:a7:af:92:00:05:24:9f:18:2b:62:
         f6:07:08:c5:91:ca:d1:ac:af:ba:1c:44:09:91:23:84:0c:29:
         c9:8c:4a:7f:10:22:ae:c3:5b:5a:21:d8:c1:f3:78:b7:71:41:
         24:ab:ce:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:31:18 2025 by rpki-client