Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ED5D66318EFFC37900E14A00DD2D9379FECCFA14.cer
File:                     ED5D66318EFFC37900E14A00DD2D9379FECCFA14.cer (raw, json)
Hash identifier:          dBhufqPeJ752Q6fPx2+VHWxmlyXJGOnekB2J9IvGBaE=
Subject key identifier:   ED:5D:66:31:8E:FF:C3:79:00:E1:4A:00:DD:2D:93:79:FE:CC:FA:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5F26224D35E598E1C9E99195294F842BD2A394CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/ED5D66318EFFC37900E14A00DD2D9379FECCFA14.mft
caRepository:             rsync://rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Aug 2023 11:37:29 +0000
Certificate not after:    Fri 23 Aug 2024 11:42:29 +0000
Subordinate resources:    AS: 269645
                          IP: 45.190.96.0/22
                          IP: 2804:67b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:26:22:4d:35:e5:98:e1:c9:e9:91:95:29:4f:84:2b:d2:a3:94:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 25 11:37:29 2023 GMT
            Not After : Aug 23 11:42:29 2024 GMT
        Subject: CN=ED5D66318EFFC37900E14A00DD2D9379FECCFA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:ee:85:49:c7:73:74:93:d3:3b:53:95:6e:
                    a0:9a:5f:c3:a8:e6:80:dd:ef:54:10:d1:42:e8:17:
                    a5:a2:0f:30:ad:b1:87:c7:6b:fe:70:33:0f:5c:81:
                    1c:98:0b:00:3a:58:c7:96:b7:64:b8:24:19:93:e1:
                    97:0b:6e:66:08:cb:af:a2:1e:b0:94:d1:87:29:c6:
                    2d:9f:55:30:14:e8:f3:7a:be:80:51:d0:4b:35:d9:
                    07:1d:34:c6:50:05:93:2c:5e:37:6f:ee:a6:74:5e:
                    b2:bb:c6:47:a7:26:6a:2b:30:c7:ff:e3:34:c2:e3:
                    74:1b:85:79:e5:a7:fb:1d:e2:b8:7e:c9:a3:95:86:
                    53:43:7c:0e:ca:49:e6:2c:33:72:f3:fa:48:4d:65:
                    88:00:e5:a7:6d:67:1b:f1:14:17:20:a9:af:1a:f3:
                    9c:25:82:39:e3:36:3e:24:ba:bc:19:38:3b:5b:ac:
                    e0:c8:62:c9:3f:5d:0a:d8:93:a2:40:31:2a:44:3a:
                    8b:70:4f:4c:ef:90:ae:e2:6b:c9:6d:ce:88:70:c9:
                    66:92:71:a6:7a:d3:26:7f:2e:cd:1f:34:7e:72:7e:
                    67:c3:e8:da:97:cf:11:0a:b0:a8:d9:45:26:47:cf:
                    a5:91:c6:24:ac:76:38:f3:8c:80:39:01:5d:1e:ae:
                    a2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:5D:66:31:8E:FF:C3:79:00:E1:4A:00:DD:2D:93:79:FE:CC:FA:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/ED5D66318EFFC37900E14A00DD2D9379FECCFA14.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.96.0/22
                IPv6:
                  2804:67b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269645

    Signature Algorithm: sha256WithRSAEncryption
         2e:67:b4:51:5b:01:9d:c6:ed:4e:0d:1b:6e:b7:92:14:7a:ba:
         0b:5b:89:d3:33:81:83:8b:ec:17:e3:0d:d2:86:71:d1:ad:cc:
         bf:de:e2:e9:46:82:7b:44:74:13:a5:4c:a8:fb:7e:a1:34:49:
         6d:ea:7b:d5:b6:fd:a5:ba:dd:d7:6f:21:ff:ac:66:07:b5:39:
         ab:48:34:e8:10:25:14:f7:a7:a5:65:b0:ee:61:86:2a:18:5b:
         76:32:a1:9c:23:87:b8:42:98:24:36:6e:c1:c9:2f:65:36:2c:
         0f:56:7c:7f:43:35:b2:d2:5d:58:32:7c:3e:e3:c1:c5:b9:53:
         98:7d:6c:b4:49:23:85:86:63:65:7d:09:dd:3b:3e:29:71:1e:
         ab:ec:a5:f1:cf:3c:3e:37:6b:51:27:f3:01:fb:ef:71:aa:92:
         49:60:2c:f1:db:bd:87:39:b2:eb:15:02:07:f7:4d:c4:a7:12:
         7a:ee:ec:2a:33:e2:9b:71:9b:ad:c8:2e:a2:33:1b:31:8b:b2:
         cc:1e:d4:ce:48:87:b9:dd:bc:f1:fe:16:27:8f:aa:ca:9a:b8:
         c6:f7:36:ba:ad:3a:e1:e2:3d:41:77:82:ce:45:15:47:11:64:
         ed:0a:c6:55:6b:fe:ce:f0:b5:18:49:07:44:6d:bf:01:65:a2:
         f8:ac:c5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org