Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/053D41A1BE5107E4C134842B74EB54E8F9483E4C.cer
File:                     053D41A1BE5107E4C134842B74EB54E8F9483E4C.cer (raw, json)
Hash identifier:          4a0DwhxqRBq13gjryux92O7c6pG/U7/owXHL2H1k9DM=
Subject key identifier:   05:3D:41:A1:BE:51:07:E4:C1:34:84:2B:74:EB:54:E8:F9:48:3E:4C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       03DE8276028393E6A2B2EDBF58696FAE0F366784
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/053D41A1BE5107E4C134842B74EB54E8F9483E4C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 16:35:33 +0000
Certificate not after:    Mon 01 Apr 2024 16:40:33 +0000
Subordinate resources:    AS: 265256
                          IP: 168.0.156.0/22
                          IP: 2804:2d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:de:82:76:02:83:93:e6:a2:b2:ed:bf:58:69:6f:ae:0f:36:67:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 16:35:33 2023 GMT
            Not After : Apr  1 16:40:33 2024 GMT
        Subject: CN=053D41A1BE5107E4C134842B74EB54E8F9483E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:d2:51:4c:5a:e8:e2:0b:18:fd:40:f9:54:
                    ea:a5:0e:7c:20:b9:87:0a:40:88:fa:8c:03:3c:b8:
                    1f:41:31:a5:65:b1:21:88:c8:92:2d:4e:a5:d8:af:
                    31:77:ac:47:2e:3a:b7:d7:71:b3:46:89:20:3e:d1:
                    f2:87:f2:69:fa:9a:f0:a1:f6:5d:9d:0e:bf:12:06:
                    90:fa:34:14:ab:45:31:36:fc:f8:3a:5b:e8:a4:50:
                    d1:b9:38:2a:ea:a3:73:51:7c:d2:03:2f:cc:d6:93:
                    30:98:de:82:9b:5d:b3:3b:16:a7:55:3b:e0:06:44:
                    fc:10:4c:e1:05:48:7c:bf:84:ac:e3:87:cd:75:41:
                    b0:f0:91:58:8f:9b:df:4c:a9:78:56:d9:c3:43:56:
                    ae:90:a4:65:83:45:e5:2c:35:8e:15:d5:e1:e6:12:
                    2b:20:c1:34:2a:c9:44:cc:2d:d3:10:e4:ef:99:3d:
                    98:45:e4:22:cf:ca:93:8a:f9:60:b1:48:9d:5b:2a:
                    a3:be:56:05:4e:cd:7e:ea:44:9b:0f:51:fa:3c:33:
                    36:c1:d8:5c:30:36:13:06:29:c5:11:58:0f:41:5d:
                    86:aa:05:93:f5:ed:56:02:bd:36:48:8a:38:83:8b:
                    aa:6c:45:b5:18:57:97:f8:8c:ee:d8:68:7f:03:1e:
                    4b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:3D:41:A1:BE:51:07:E4:C1:34:84:2B:74:EB:54:E8:F9:48:3E:4C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/053D41A1BE5107E4C134842B74EB54E8F9483E4C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.156.0/22
                IPv6:
                  2804:2d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265256

    Signature Algorithm: sha256WithRSAEncryption
         3d:d7:12:ab:f6:c4:16:05:f5:63:f5:cf:ef:d1:6a:a5:93:86:
         fb:99:cb:8e:de:be:ac:1e:20:84:20:9f:f7:8f:b7:54:a1:b3:
         39:cc:73:5e:2b:a8:ae:aa:7a:df:ed:eb:8e:ca:78:a4:db:dd:
         54:80:a2:f3:88:43:d9:3b:77:1a:68:f5:4f:1b:ca:be:58:fe:
         df:c8:74:08:41:73:b8:e9:e0:cc:df:09:d5:9a:f4:b9:03:9a:
         16:2a:27:b7:ad:75:40:b9:1a:3b:0d:f8:37:28:83:94:f3:58:
         9f:c3:ab:64:1d:df:e0:28:cc:cb:20:bc:75:20:31:b1:82:2b:
         ca:7f:8f:37:e2:8b:71:a6:ea:02:0b:b6:a0:db:48:4d:b2:b9:
         ba:f7:27:a9:b7:8c:80:83:e6:6e:16:a0:7a:db:97:49:a9:a7:
         74:0a:e2:ef:1a:f5:74:06:ae:60:ca:53:60:28:f9:f2:15:5f:
         23:a1:89:c8:99:12:f6:34:17:6b:7d:ae:01:9f:30:bf:0a:4f:
         a0:1a:98:46:99:7b:45:82:52:fe:f7:22:ff:69:e2:3b:92:3d:
         cb:53:9e:69:55:59:8c:d4:12:61:dc:18:52:1f:f8:73:21:18:
         5c:41:06:a3:ff:7e:38:1d:ef:e7:99:c3:da:99:78:a3:df:84:
         83:3a:a6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org