Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F5238918265F5EF068899D28C510A53E05C057BC.cer
File:                     F5238918265F5EF068899D28C510A53E05C057BC.cer (raw, json)
Hash identifier:          H6eHDtYw2FE2KnWPELq5zIGajNpoJKfNCn6MuK3bLQc=
Subject key identifier:   F5:23:89:18:26:5F:5E:F0:68:89:9D:28:C5:10:A5:3E:05:C0:57:BC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6F1FF32730A1CE071388378290B51B5E10CE7127
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/F5238918265F5EF068899D28C510A53E05C057BC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Jan 2023 20:52:59 +0000
Certificate not after:    Mon 29 Jan 2024 20:57:59 +0000
Subordinate resources:    AS: 53181
                          IP: 191.241.64.0/20
                          IP: 201.33.160.0/20
                          IP: 2804:113c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1f:f3:27:30:a1:ce:07:13:88:37:82:90:b5:1b:5e:10:ce:71:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 30 20:52:59 2023 GMT
            Not After : Jan 29 20:57:59 2024 GMT
        Subject: CN=F5238918265F5EF068899D28C510A53E05C057BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:4e:bd:89:29:be:f1:3b:86:73:be:f1:6e:
                    59:07:6a:64:c0:e8:0c:93:df:46:a7:de:69:1d:5f:
                    38:65:c6:29:0b:06:dc:f5:0d:78:48:f3:a7:3b:94:
                    07:40:26:d2:0c:b5:d0:57:ac:2b:c9:ea:6a:1f:b6:
                    3a:05:44:38:9c:6f:16:86:92:6d:cd:96:3c:e0:49:
                    de:23:7f:de:e9:db:65:75:48:27:5b:be:14:dd:32:
                    ad:73:9d:43:93:5e:fb:a3:7c:b3:d7:1c:1e:8c:cd:
                    58:9c:e1:12:0d:2e:f9:39:ce:3f:06:61:7d:07:76:
                    a3:fd:ea:1d:8b:51:0c:0f:fe:41:80:67:43:be:bc:
                    6a:77:8c:a8:8a:c6:ee:79:51:07:22:8b:a0:f5:e8:
                    58:f3:15:ce:d0:11:08:38:e3:15:9f:91:c6:82:41:
                    de:54:be:e7:be:95:82:25:95:06:e2:c0:a9:4d:50:
                    cd:5e:55:23:31:0e:aa:6f:f6:d3:2a:c0:e4:63:61:
                    c4:b2:d5:bd:82:68:89:37:5e:88:99:3f:bd:ae:7b:
                    c8:b7:00:72:02:b0:e8:7d:89:27:cf:a1:28:16:2e:
                    16:57:7e:f5:71:d1:03:13:f5:33:0a:a6:11:7d:0c:
                    ca:fb:22:59:92:43:d9:35:42:06:b1:d5:68:41:4d:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:23:89:18:26:5F:5E:F0:68:89:9D:28:C5:10:A5:3E:05:C0:57:BC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/F5238918265F5EF068899D28C510A53E05C057BC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.64.0/20
                  201.33.160.0/20
                IPv6:
                  2804:113c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53181

    Signature Algorithm: sha256WithRSAEncryption
         04:d3:dc:33:3a:71:f8:c2:9f:c9:b8:97:47:05:6e:a2:62:df:
         23:03:66:0f:2e:26:bc:71:dd:03:21:ee:90:c9:87:2f:ba:7e:
         11:ea:4b:a6:31:e2:e9:09:a1:db:61:df:e0:6a:7b:de:9f:41:
         d2:86:85:ec:79:94:69:b5:b2:6b:0e:c3:2c:32:c1:e4:75:b3:
         d6:82:5c:ec:07:3a:97:93:50:5a:14:96:49:cc:15:53:6c:9c:
         a1:26:d2:d2:47:cd:4a:74:74:89:6a:d5:6f:53:bb:44:ab:95:
         e0:29:b7:29:8b:6a:09:13:3b:3b:1e:29:88:30:a7:62:41:8e:
         f0:6a:87:a6:f0:11:80:e0:a3:90:6f:27:49:d6:66:3d:e1:5e:
         dd:a0:dc:37:ee:fc:c1:8a:91:e5:7c:7a:ea:91:79:f5:83:1b:
         c3:75:0e:8e:18:b6:bf:f6:1e:05:75:67:fb:9a:bf:e2:09:f7:
         bb:5d:4e:19:7a:11:11:0e:79:4c:b3:06:67:82:c6:a2:8b:36:
         f4:ef:d7:0f:21:99:2b:07:64:da:e3:51:41:8e:04:3f:f0:44:
         26:b1:57:64:c7:d9:21:52:c7:12:9b:3d:cd:f5:c9:5b:bb:7d:
         2c:6d:fa:2b:a1:bf:ba:d2:4b:f5:48:f9:61:48:08:8e:06:fe:
         69:1a:21:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org