Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5235FF5A08D489F45001090F647E47609765047E.cer
File:                     5235FF5A08D489F45001090F647E47609765047E.cer (raw, json)
Hash identifier:          ae01mjjrM1qOzz8syrKH4bU8WRqjzVjOSkn2AAUEqlA=
Subject key identifier:   52:35:FF:5A:08:D4:89:F4:50:01:09:0F:64:7E:47:60:97:65:04:7E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       232516BE3DE0E99D4DCD3714FB089D2F069BB44C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/1/5235FF5A08D489F45001090F647E47609765047E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 13:38:17 +0000
Certificate not after:    Tue 04 Mar 2025 13:43:17 +0000
Subordinate resources:    AS: 270362
                          IP: 190.89.60.0/22
                          IP: 2804:6adc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:25:16:be:3d:e0:e9:9d:4d:cd:37:14:fb:08:9d:2f:06:9b:b4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  5 13:38:17 2024 GMT
            Not After : Mar  4 13:43:17 2025 GMT
        Subject: CN=5235FF5A08D489F45001090F647E47609765047E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:8a:a9:51:3a:52:0a:07:8a:e8:56:57:b0:
                    3d:e1:a2:40:f1:64:58:9e:a8:b4:57:6d:85:f4:76:
                    a8:2a:bd:b3:fa:a6:de:1d:d7:f6:dc:0e:69:50:49:
                    d7:a6:3c:12:23:40:d1:04:c6:d4:b9:c5:cf:3c:d2:
                    ff:42:c6:6b:4e:47:3b:b4:d8:18:5a:7a:a1:d8:1e:
                    80:6d:7e:72:f4:2e:fe:fd:8f:c3:73:30:de:0e:fc:
                    5b:53:a4:3f:37:26:67:ed:5b:df:0b:44:97:b1:5a:
                    08:c6:66:f1:18:0c:d8:84:9f:f9:d2:a6:e5:c9:9b:
                    f0:a1:68:1a:90:8f:42:c1:f7:a4:c9:0f:db:3f:1d:
                    e6:4a:df:1b:0c:6e:eb:4d:00:92:6c:4c:50:0c:50:
                    1d:e7:c0:5f:be:bd:61:71:54:7a:31:1c:0a:f4:06:
                    f7:1c:13:11:52:d9:31:7b:0f:e8:ee:96:38:2d:62:
                    23:55:3a:85:b9:d8:20:c2:fa:82:1e:51:d6:6a:cd:
                    8f:0c:73:bd:70:7b:41:a5:17:58:3f:44:2c:b3:dd:
                    38:fb:04:d7:ee:df:0c:92:69:c7:c7:04:ac:86:5f:
                    03:27:c0:4e:6d:98:98:69:f7:e6:ef:3e:c6:4e:df:
                    6a:2c:be:b2:8c:fc:91:c5:03:4d:dc:48:7b:18:85:
                    ba:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:35:FF:5A:08:D4:89:F4:50:01:09:0F:64:7E:47:60:97:65:04:7E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/1/5235FF5A08D489F45001090F647E47609765047E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.60.0/22
                IPv6:
                  2804:6adc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270362

    Signature Algorithm: sha256WithRSAEncryption
         10:88:2d:66:d5:2f:42:c5:27:5f:a9:e2:2a:ce:47:03:a1:da:
         13:22:43:82:fd:1d:35:16:73:b8:66:5d:aa:ee:d0:a7:cf:48:
         dc:7c:61:a1:af:09:b6:bf:dc:be:c1:22:b6:3a:7f:44:97:da:
         9b:df:59:e3:b6:93:40:fc:5c:bc:ee:cd:9d:8a:7e:89:50:9c:
         14:b8:ad:de:b4:77:f9:d3:11:7d:64:05:15:24:44:7f:f6:13:
         b3:f7:fa:c5:31:58:be:f6:f5:72:b8:04:cb:23:33:c1:34:bd:
         0d:7a:63:56:a5:62:05:fa:d8:9b:2c:d7:7d:f6:54:bf:08:0c:
         e0:ec:d1:b7:e5:e4:64:57:f8:c4:ff:b8:0e:ba:f7:e4:fa:7b:
         a5:72:4f:e8:6a:a9:2f:07:a2:40:0b:2c:67:02:80:9a:ca:9b:
         18:c9:43:98:ba:29:41:67:b2:05:0e:2b:54:11:7a:a3:1e:11:
         74:7a:7c:c6:93:ab:2d:7a:98:61:32:23:f0:d2:85:59:f7:6a:
         67:75:e4:0e:09:38:b8:e0:a9:36:e0:72:d5:a2:c0:45:fd:a2:
         2e:9f:99:9b:47:1b:e5:de:33:df:3c:b1:24:8d:a4:08:dd:c6:
         fe:0b:89:ee:6f:1f:e9:42:24:43:46:e5:2a:88:7a:34:82:97:
         a9:12:9d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org