Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.cer
File:                     F5B1E2DE3922BE45CD0899545537337BDA94DC01.cer (raw, json)
Hash identifier:          bJ4gIi1scLF1W5OTafo8XLdUsIT2MNZy7s3qj6AvLiI=
Subject key identifier:   F5:B1:E2:DE:39:22:BE:45:CD:08:99:54:55:37:33:7B:DA:94:DC:01
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2EDB7AA3C5B587C44D8602D6736CDD3A5778B4CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 02 Dec 2023 02:56:12 +0000
Certificate not after:    Sat 30 Nov 2024 03:01:12 +0000
Subordinate resources:    AS: 268431
                          IP: 45.160.152.0/22
                          IP: 2804:511c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:db:7a:a3:c5:b5:87:c4:4d:86:02:d6:73:6c:dd:3a:57:78:b4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  2 02:56:12 2023 GMT
            Not After : Nov 30 03:01:12 2024 GMT
        Subject: CN=F5B1E2DE3922BE45CD0899545537337BDA94DC01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b5:e1:1f:26:af:13:a4:81:42:f1:90:cd:b5:
                    4f:24:64:20:1e:50:79:44:94:97:14:4d:e8:d0:26:
                    f8:dd:1b:11:66:63:88:d7:56:09:c1:ae:99:41:7f:
                    81:2c:30:53:fe:cd:fd:e2:8e:b8:94:e6:28:1f:93:
                    60:ba:1d:6b:a3:52:75:9b:b7:49:ef:47:75:55:9b:
                    3d:5c:22:d5:db:a1:c0:7f:5e:30:18:4d:82:21:21:
                    8b:31:ff:b1:84:2c:5e:18:8a:cd:b3:b9:d9:20:dd:
                    94:8d:7c:b4:38:ec:b9:0e:7e:a3:65:2b:cd:87:6d:
                    c7:14:66:12:83:23:a5:7d:a9:9c:cb:26:dd:d3:3d:
                    34:39:d7:a5:44:ec:f0:62:76:db:97:d2:89:6f:4e:
                    f2:62:55:27:3b:e2:88:44:57:36:99:d5:53:e4:49:
                    5a:32:09:29:eb:27:4c:10:11:06:ff:91:b7:e1:c5:
                    fd:93:1c:1e:db:08:3b:01:66:ed:fb:93:12:bf:c3:
                    04:a7:fe:18:ef:61:b5:de:5d:64:f9:99:ed:a6:04:
                    18:e1:43:99:b9:3f:1d:f6:0b:6a:cc:6f:0d:3e:b3:
                    f1:5a:28:58:54:e6:04:1d:1e:48:77:58:dd:97:06:
                    14:c7:cb:80:8e:0c:df:ac:4a:f8:44:f2:6b:6e:fa:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:B1:E2:DE:39:22:BE:45:CD:08:99:54:55:37:33:7B:DA:94:DC:01
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.152.0/22
                IPv6:
                  2804:511c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268431

    Signature Algorithm: sha256WithRSAEncryption
         10:05:71:23:99:f5:5b:4f:7c:9f:01:c9:5a:72:e2:e0:6a:cf:
         4d:22:bf:69:af:a5:98:bc:98:8a:40:c5:08:e8:6c:d1:ff:4c:
         28:53:f7:6f:d1:a3:0a:d2:18:f6:de:cf:15:35:0a:b6:54:01:
         a4:99:8e:f7:f7:78:ec:99:b6:21:f7:5c:50:09:66:9e:cd:58:
         fa:f4:fa:27:00:07:2a:33:5e:80:16:36:59:1b:ae:12:f9:8c:
         c6:48:78:95:4c:ea:03:ed:ba:f0:0c:6d:d2:e9:e3:28:54:fb:
         96:d3:93:92:93:ce:65:f1:38:28:cb:e6:34:1d:3f:45:02:b4:
         d4:73:23:37:9e:77:a1:2f:c6:43:ac:85:8d:08:5f:ba:74:2b:
         5d:d5:48:0f:d3:2f:2c:1d:9f:b3:22:42:40:68:c0:1a:f8:41:
         d7:6e:3f:11:ff:2a:38:ad:da:d9:c4:ae:f3:69:0a:be:e7:d2:
         7c:c3:19:20:96:e2:86:39:20:42:5c:98:3f:c2:32:13:b6:6c:
         49:30:6b:36:33:08:dd:13:e4:25:f2:b6:6c:0a:1a:85:50:9b:
         bb:f0:95:fa:1f:20:76:33:0f:fa:ea:e9:aa:2b:14:3c:a7:f1:
         43:95:3e:58:b8:12:2e:db:28:fa:0b:b8:ed:f4:34:87:47:8a:
         50:d4:e9:7f
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIULtt6o8W1h8RNhgLWc2zdOld4tMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDIwMjU2MTJaFw0yNDExMzAwMzAxMTJaMDMxMTAvBgNV
BAMTKEY1QjFFMkRFMzkyMkJFNDVDRDA4OTk1NDU1MzczMzdCREE5NERDMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoteEfJq8TpIFC8ZDNtU8kZCAe
UHlElJcUTejQJvjdGxFmY4jXVgnBrplBf4EsMFP+zf3ijriU5igfk2C6HWujUnWb
t0nvR3VVmz1cItXbocB/XjAYTYIhIYsx/7GELF4Yis2zudkg3ZSNfLQ47LkOfqNl
K82HbccUZhKDI6V9qZzLJt3TPTQ516VE7PBidtuX0olvTvJiVSc74ohEVzaZ1VPk
SVoyCSnrJ0wQEQb/kbfhxf2THB7bCDsBZu37kxK/wwSn/hjvYbXeXWT5me2mBBjh
Q5m5Px32C2rMbw0+s/FaKFhU5gQdHkh3WN2XBhTHy4CODN+sSvhE8mtu+n43AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT1seLeOSK+Rc0I
mVRVNzN72pTcATAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80S0pheUVEUkFjZHVQdm96alhuTGYxNGFySFc3aTJLRnRt
YWVBbWhzU2hKZS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80S0pheUVEUkFjZHVQdm96alhuTGYxNGFySFc3aTJLRnRt
YWVBbWhzU2hKZS8wL0Y1QjFFMkRFMzkyMkJFNDVDRDA4OTk1NDU1MzczMzdCREE5
NERDMDEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2gmDANBAIAAjAHAwUA
KARRHDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGI8wDQYJKoZIhvcNAQELBQAD
ggEBABAFcSOZ9VtPfJ8ByVpy4uBqz00iv2mvpZi8mIpAxQjobNH/TChT92/RowrS
GPbezxU1CrZUAaSZjvf3eOyZtiH3XFAJZp7NWPr0+icAByozXoAWNlkbrhL5jMZI
eJVM6gPtuvAMbdLp4yhU+5bTk5KTzmXxOCjL5jQdP0UCtNRzIzeed6EvxkOshY0I
X7p0K13VSA/TLywdn7MiQkBowBr4QdduPxH/Kjit2tnErvNpCr7n0nzDGSCW4oY5
IEJcmD/CMhO2bEkwazYzCN0T5CXytmwKGoVQm7vwlfofIHYzD/rq6aorFDyn8UOV
Pli4Ei7bKPoLuO30NIdHilDU6X8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org