Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
File:                     1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer (raw, json)
Hash identifier:          2q/FGboWwnhaxfKu0I5mSR69RELQx/WzuM2hUsDAHwk=
Subject key identifier:   14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       29005C8F99479B95B12F0408AAC8D1F1573A0E0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.mft
caRepository:             rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 10:51:26 +0000
Certificate not after:    Mon 01 Apr 2024 10:56:26 +0000
Subordinate resources:    AS: 265496
                          IP: 170.78.60.0/22
                          IP: 2804:3508::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:00:5c:8f:99:47:9b:95:b1:2f:04:08:aa:c8:d1:f1:57:3a:0e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 10:51:26 2023 GMT
            Not After : Apr  1 10:56:26 2024 GMT
        Subject: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:27:9d:88:aa:ea:69:20:5b:b0:f4:f0:77:
                    4d:38:47:c5:1b:f1:18:14:6a:bf:81:f2:de:8b:42:
                    31:e0:4f:5a:39:47:96:ea:53:b4:b2:92:af:3f:72:
                    9c:70:fd:39:fa:c0:08:df:00:06:68:bd:0c:4e:77:
                    e7:63:93:6d:64:44:21:0b:b5:ae:fb:55:81:c4:ac:
                    ea:ff:ad:2a:bf:ea:e9:c5:ed:52:d0:70:5a:c3:7f:
                    01:34:f9:3f:55:71:94:d5:7b:6f:03:a6:44:41:58:
                    76:a5:6f:47:8d:a6:41:5a:12:ca:29:9e:77:39:24:
                    2e:3e:e4:6a:7b:b2:4e:64:03:40:87:33:ee:7b:16:
                    63:69:e2:ea:77:9d:aa:fe:85:7d:40:14:15:d4:cb:
                    77:05:c2:ad:43:db:73:c0:ec:ac:87:8c:23:63:c9:
                    b3:f1:00:7c:88:02:29:b1:59:ed:9f:5f:89:fb:7d:
                    40:0a:54:62:05:d1:f8:58:a0:2d:5f:ec:73:e4:2d:
                    7f:62:e1:89:7c:82:fb:22:1b:b0:52:c8:9f:45:1a:
                    ee:e4:78:c0:41:95:58:64:8b:ba:d4:77:ba:40:76:
                    21:23:2d:4a:8e:49:47:69:91:e6:64:36:7a:25:df:
                    c1:34:28:31:76:ad:14:08:d6:f5:63:67:b2:b8:b3:
                    0a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.60.0/22
                IPv6:
                  2804:3508::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265496

    Signature Algorithm: sha256WithRSAEncryption
         17:e1:94:b3:c0:95:a8:32:89:3b:75:58:04:a1:be:58:88:51:
         1e:5c:8a:9f:fa:60:5f:9c:12:99:c6:03:5e:9b:bf:20:56:7d:
         8a:e8:01:52:e5:40:95:3c:2c:df:f6:f4:25:9e:53:a6:58:3e:
         4e:96:22:24:00:cc:b6:11:d7:ed:55:33:58:89:5d:6b:e6:06:
         18:cc:66:e7:e9:14:0c:85:be:3f:68:99:03:9b:05:3d:d5:bc:
         ef:ad:ae:f9:41:20:a2:fd:66:2c:c1:6e:8c:a2:0a:5d:e0:0e:
         79:6a:33:6b:c4:b6:60:25:05:ac:d3:95:30:7c:cb:3c:4b:80:
         26:b2:9d:95:26:7f:f7:e1:0a:08:f9:7f:dc:c1:31:64:b8:0f:
         89:15:e7:63:74:9c:7f:00:57:56:c8:86:ec:ae:bd:b5:6e:07:
         08:63:00:ea:b7:3b:93:de:3e:53:b9:21:1e:b0:da:2f:c3:cf:
         51:fd:97:7f:7d:7b:9b:c5:c9:57:29:29:dc:61:67:da:d7:e6:
         57:5e:a2:5a:6b:6b:93:0f:b5:f9:b9:b9:15:39:21:d2:2e:08:
         78:0a:3d:39:a1:ba:87:60:df:dc:0f:ec:6b:78:91:4c:ec:93:
         f4:e8:55:78:67:51:db:b1:ea:43:cb:4a:20:55:98:9d:95:68:
         78:97:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org