Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F5CED17C45BDB6812EA27970F7981A63C8129A61.cer
File:                     F5CED17C45BDB6812EA27970F7981A63C8129A61.cer (raw, json)
Hash identifier:          7eruoa2Rx/7J+N3uP7AuHG5rqw38w4Xa9c/Qs3lufNo=
Subject key identifier:   F5:CE:D1:7C:45:BD:B6:81:2E:A2:79:70:F7:98:1A:63:C8:12:9A:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       391133D3AD53EDDAD2E99C4226568BDA299A62AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/F5CED17C45BDB6812EA27970F7981A63C8129A61.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Dec 2023 22:06:14 +0000
Certificate not after:    Mon 02 Dec 2024 22:11:14 +0000
Subordinate resources:    AS: 268463
                          IP: 45.161.96.0/22
                          IP: 2804:5194::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:11:33:d3:ad:53:ed:da:d2:e9:9c:42:26:56:8b:da:29:9a:62:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  4 22:06:14 2023 GMT
            Not After : Dec  2 22:11:14 2024 GMT
        Subject: CN=F5CED17C45BDB6812EA27970F7981A63C8129A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5b:b5:7f:e9:22:b9:d5:7d:59:5d:59:32:05:
                    f3:c7:02:a4:d8:3d:18:d3:55:41:58:66:2e:3f:2e:
                    66:c2:f8:0a:d5:81:b4:e6:56:a7:2b:8b:29:85:42:
                    52:09:51:b5:9d:15:26:6d:32:62:3c:01:ab:dd:1b:
                    71:2b:2e:23:dc:62:46:63:e6:be:f3:df:7c:90:7c:
                    c3:66:93:d1:29:11:e3:14:59:16:ff:7b:5e:eb:67:
                    f6:a5:e5:ad:df:53:9c:4e:c1:3a:25:e7:dd:34:8a:
                    ba:63:9d:ee:d2:d4:c9:bd:4f:07:cf:fd:cf:a6:d8:
                    88:9c:8d:da:56:7a:13:ed:2d:59:14:53:44:fd:73:
                    0c:66:bc:46:3c:5d:05:78:06:c6:ec:a0:e8:58:79:
                    f7:c4:f0:76:d7:64:eb:40:3d:f0:8b:87:a4:7a:c8:
                    32:2e:8e:be:1f:b5:97:eb:30:b4:b4:62:6b:c7:ad:
                    3b:30:dd:eb:ea:56:97:e2:f5:26:23:40:ce:59:14:
                    fe:0a:ab:d5:77:51:aa:48:e8:2b:ea:f1:81:60:92:
                    10:9e:db:39:ad:cb:55:95:d5:36:5b:11:ce:65:a0:
                    e8:a0:fe:c5:e9:85:cc:95:5b:93:a4:6f:89:d2:5f:
                    3b:2c:88:41:3a:36:d8:c9:ba:67:22:a0:89:fc:06:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:CE:D1:7C:45:BD:B6:81:2E:A2:79:70:F7:98:1A:63:C8:12:9A:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/F5CED17C45BDB6812EA27970F7981A63C8129A61.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.96.0/22
                IPv6:
                  2804:5194::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268463

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:df:bb:b6:b9:cc:46:ad:53:4c:9b:e8:90:0f:4a:4f:45:
         11:3a:b4:16:aa:61:fa:1b:c6:f6:2d:2c:e5:55:10:3d:7b:e0:
         70:90:66:d7:10:11:7d:95:b7:b0:b2:69:9e:0a:1e:8b:49:ad:
         14:cf:53:92:8b:bd:72:a0:6b:43:89:cb:ee:80:e0:d5:65:85:
         99:a3:df:55:07:8d:5b:f5:5a:9e:0f:9c:54:77:5a:d2:de:38:
         8b:ac:e6:07:66:43:75:b2:11:d4:42:17:be:7b:4e:81:54:a5:
         18:fd:24:58:83:54:0d:6c:b0:ef:72:ce:a9:6c:e4:e1:59:40:
         d8:ce:85:fb:77:cb:da:5b:12:cf:ba:ec:74:95:37:22:96:26:
         a2:1e:8b:59:7c:88:74:be:1d:f0:69:e6:6d:70:76:41:da:fe:
         e3:0a:54:83:07:ab:13:8e:7a:b2:eb:3b:3a:36:50:15:83:84:
         1a:0e:be:1c:4f:af:2f:43:d6:5e:33:16:6b:8b:63:7c:6f:2d:
         ab:47:61:70:91:29:52:79:41:5b:05:ee:7e:45:19:03:04:d8:
         1d:b7:e4:05:61:aa:2f:2e:dd:1c:14:a3:56:33:f6:c9:a8:f4:
         91:98:63:c5:0f:18:a8:11:aa:00:19:31:95:13:d4:f3:6a:16:
         1d:57:2a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org