Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.cer
File:                     F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.cer (raw, json)
Hash identifier:          NC5gT+QawGw0aWN85PS2nsaPSzQm/UyhQiZTXogGLyQ=
Subject key identifier:   F5:B3:F4:E6:F7:D5:F9:74:35:F2:46:14:41:A0:52:90:3A:7F:AF:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25A6046C54160BB4F486A316D5CB77E81E8DCB7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 15:39:46 +0000
Certificate not after:    Wed 29 May 2024 15:44:46 +0000
Subordinate resources:    AS: 61850
                          IP: 201.149.112.0/22
                          IP: 2804:1a48::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a6:04:6c:54:16:0b:b4:f4:86:a3:16:d5:cb:77:e8:1e:8d:cb:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 15:39:46 2023 GMT
            Not After : May 29 15:44:46 2024 GMT
        Subject: CN=F5B3F4E6F7D5F97435F2461441A052903A7FAF2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:67:ab:63:e5:50:85:96:b9:23:85:ca:e8:
                    65:b5:41:db:c8:92:53:5a:e9:2b:22:10:25:a5:5e:
                    64:9e:26:52:22:b5:87:83:0c:49:ff:61:3b:d2:93:
                    a3:8d:73:1f:97:d8:be:bc:77:02:e0:fd:e1:43:e2:
                    c2:26:c6:0f:f6:c7:36:d8:86:14:7f:73:a3:a2:8a:
                    17:00:56:51:ac:98:f5:70:59:f7:aa:41:da:e8:25:
                    3e:93:14:ce:ff:1c:87:46:94:36:d0:ef:68:5c:87:
                    44:ee:61:94:01:dc:44:bb:d3:ae:f4:18:34:2f:4e:
                    53:bc:00:1c:06:98:ea:2b:0c:0f:78:ff:ce:0e:ee:
                    81:9d:97:da:74:9c:0d:73:3a:74:ef:62:9b:c6:e2:
                    b1:27:7f:c5:0e:9e:15:4f:47:c5:02:05:ee:fb:ea:
                    8f:13:b6:1e:3f:f9:c2:51:d4:f1:55:7a:86:3e:0d:
                    d1:4c:bb:0f:05:68:26:11:f8:f8:22:a3:0d:fe:14:
                    d7:ba:80:7b:a8:b3:c4:4f:ca:d3:8a:0b:24:ae:c7:
                    e4:0e:81:28:dc:96:c9:67:ce:66:32:c1:01:bc:03:
                    39:cc:4c:fe:ee:54:21:56:85:04:cf:06:02:e9:27:
                    3b:b6:21:55:20:e0:ba:72:df:4d:53:a3:5c:75:bb:
                    46:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:B3:F4:E6:F7:D5:F9:74:35:F2:46:14:41:A0:52:90:3A:7F:AF:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.112.0/22
                IPv6:
                  2804:1a48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61850

    Signature Algorithm: sha256WithRSAEncryption
         8d:2e:00:83:51:87:9f:81:3c:89:59:ac:40:10:1c:54:93:fc:
         2b:f7:27:96:b1:df:47:51:8f:47:a6:08:3b:c6:a8:8a:04:1d:
         e4:d4:53:df:68:38:4c:56:50:9b:16:94:95:fd:b8:67:7d:db:
         3f:4d:6c:d6:a3:eb:cc:49:ca:32:e1:e4:71:60:4c:e6:3e:8f:
         a6:59:a4:3e:d6:51:6e:5d:e5:c0:a4:97:2d:c9:a6:cd:8f:35:
         5c:07:2e:00:5a:96:00:48:ab:94:a1:07:9d:6c:6f:ef:13:54:
         0a:43:11:0a:4f:9d:12:89:db:2c:d5:b9:a9:3a:06:83:37:40:
         54:e3:8f:ca:3b:05:1e:81:12:21:c2:3d:92:0a:24:e7:37:5b:
         a3:05:7a:ec:72:cc:02:a1:04:22:e5:2a:6f:17:78:00:0e:26:
         c0:7c:54:6f:6f:5c:48:0a:30:ab:ba:ad:62:ad:32:0e:0b:b3:
         23:5e:c3:38:e8:82:e8:f7:9d:a4:45:35:f8:59:9d:3e:42:a7:
         3c:da:cb:b5:80:dc:47:7b:af:64:8c:e7:7e:b2:d7:ef:60:e4:
         9e:25:0c:c2:e8:5a:56:1b:4c:1a:36:b8:21:0e:e8:47:5e:a1:
         47:d5:6b:ee:24:dc:0c:33:e5:24:92:56:30:d6:6f:ea:73:57:
         30:65:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org