Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/52A6D195524E5D77063F4811A6C89136CC740F16.cer
File:                     52A6D195524E5D77063F4811A6C89136CC740F16.cer (raw, json)
Hash identifier:          aKU/RgdJBYMRj9WYdlyOskMd0JWn0qGdIrpd5z18Kbw=
Subject key identifier:   52:A6:D1:95:52:4E:5D:77:06:3F:48:11:A6:C8:91:36:CC:74:0F:16
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11879E8A713EC06D27C0DDEB39828AFA7F4F1A49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/52A6D195524E5D77063F4811A6C89136CC740F16.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Aug 2023 13:09:26 +0000
Certificate not after:    Wed 14 Aug 2024 13:14:26 +0000
Subordinate resources:    AS: 52953
                          IP: 177.22.48.0/20
                          IP: 2804:5dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:87:9e:8a:71:3e:c0:6d:27:c0:dd:eb:39:82:8a:fa:7f:4f:1a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 16 13:09:26 2023 GMT
            Not After : Aug 14 13:14:26 2024 GMT
        Subject: CN=52A6D195524E5D77063F4811A6C89136CC740F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:18:37:5d:b9:eb:fe:ee:93:a1:e2:57:f4:
                    48:8d:4e:ee:2e:d0:be:cd:58:a4:5e:04:70:58:4d:
                    7e:2f:7d:3c:b6:8c:2f:b4:5b:da:3c:b1:05:e4:cb:
                    7f:27:61:f1:14:d8:83:91:c6:46:fa:70:b2:c9:b1:
                    50:16:e5:d8:d6:01:8a:86:99:89:2a:64:ba:55:12:
                    e3:9b:9d:1f:07:6f:b3:e1:98:71:7a:6d:e3:da:fe:
                    3c:ad:fe:35:66:3a:36:51:b5:2d:b3:79:1f:92:83:
                    8a:3c:d3:2b:30:73:7c:cc:c2:05:ca:ad:32:91:60:
                    22:b1:3b:ed:a2:54:c5:36:ba:7c:cb:31:c5:16:31:
                    48:4e:70:02:6a:ce:39:d1:8a:4a:9d:fc:40:fb:e5:
                    44:eb:4d:02:d8:9b:21:0b:51:d9:80:5e:13:4c:c6:
                    a5:cb:28:fb:87:65:2c:f9:2e:ad:01:ad:0d:3f:8c:
                    4d:9f:3c:6a:d6:14:ee:f2:fe:12:77:e9:18:e5:08:
                    fc:bb:52:93:b2:48:6a:14:dd:63:f6:95:0d:8f:5e:
                    97:0e:f5:91:d7:6f:89:30:bf:22:65:e8:83:a4:4c:
                    8b:02:5a:e4:6e:9a:be:43:7e:18:5f:9a:ea:14:e6:
                    f9:f6:00:b2:a9:9b:9d:5d:20:53:84:85:af:8a:47:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:A6:D1:95:52:4E:5D:77:06:3F:48:11:A6:C8:91:36:CC:74:0F:16
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/52A6D195524E5D77063F4811A6C89136CC740F16.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.48.0/20
                IPv6:
                  2804:5dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52953

    Signature Algorithm: sha256WithRSAEncryption
         a5:f1:41:09:9c:90:53:d7:52:66:b7:a2:e7:85:d3:61:eb:ad:
         6c:bc:d0:53:03:4f:c2:7f:a3:f2:f7:3f:8e:20:2f:1e:f3:50:
         fa:65:2e:bf:c0:9d:2d:42:94:c2:0d:1a:76:93:84:81:db:22:
         c6:f7:ec:cc:05:ae:0b:a6:dc:c2:28:22:9e:10:a1:81:55:15:
         d5:c1:2a:27:13:0d:95:bb:78:40:cc:5d:05:a1:83:a1:dc:f3:
         73:95:c1:db:cb:a9:48:ef:06:94:51:c7:5a:1f:9e:76:ae:e5:
         d9:7a:56:64:21:c4:e2:af:9b:fc:58:f1:ce:b3:62:ef:9f:5d:
         1f:59:c0:cc:01:e0:23:3e:b2:1d:84:b3:7c:d1:b6:7f:ec:3f:
         75:ce:09:a6:39:02:65:c3:5f:48:a6:08:fa:34:0d:dd:f7:fa:
         56:09:af:8a:d7:35:da:a4:81:aa:f1:a2:74:86:b4:30:35:60:
         3c:b3:de:96:db:41:8a:09:a1:08:be:34:7c:9d:c3:68:07:cf:
         bd:04:56:3b:09:ef:d6:dd:1f:ec:48:87:a5:2a:72:54:e7:c0:
         96:c4:e8:3b:a0:ff:cb:6f:53:21:ee:83:2d:ed:74:ec:3e:de:
         2a:85:d7:cd:c7:ba:9a:35:c9:05:97:4c:36:95:5a:1b:50:62:
         a8:cf:3a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org