Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B.cer
File:                     527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B.cer (raw, json)
Hash identifier:          F3HSQYC8ZlFrXRweXxNF2aW08qbk62MuNV50k/99YsQ=
Subject key identifier:   52:7D:0D:C5:6A:DA:4B:C5:18:76:CA:BD:B1:3F:64:C8:DA:BD:EE:5B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4DD8BBE093BC4BA99ACF68FE1585F03DB5304A0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 28 Oct 2023 13:03:11 +0000
Certificate not after:    Sat 26 Oct 2024 13:08:11 +0000
Subordinate resources:    AS: 265011
                          IP: 170.84.148.0/22
                          IP: 2804:3164::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d8:bb:e0:93:bc:4b:a9:9a:cf:68:fe:15:85:f0:3d:b5:30:4a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 28 13:03:11 2023 GMT
            Not After : Oct 26 13:08:11 2024 GMT
        Subject: CN=527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:fb:1e:dd:a4:fb:cf:3a:6c:1b:d4:07:28:
                    e2:be:50:5a:a2:bf:d5:96:68:88:f0:b7:ce:f3:ba:
                    1d:1e:5d:21:fd:09:53:c8:7b:a3:24:1e:c0:d3:d3:
                    58:cf:56:f7:bd:9e:35:19:5a:d5:c4:0d:ab:f3:0f:
                    5d:de:d4:c9:f9:9b:c7:ce:27:af:46:5a:66:29:34:
                    5e:7e:b7:db:0c:df:3e:5b:08:1d:4e:95:9c:66:c6:
                    fe:44:f2:a0:30:da:66:68:76:d6:b0:0d:78:d9:bd:
                    0a:fb:2d:e7:d0:59:08:76:d9:18:7d:ab:51:79:45:
                    6c:93:7f:f8:8a:f7:07:00:c5:cb:94:90:84:59:e9:
                    b7:44:60:6e:0b:f0:33:5c:6e:df:e0:0f:f4:68:8a:
                    16:92:2a:6a:a1:f4:36:44:5a:e7:1e:e3:54:ba:91:
                    aa:e0:48:4a:37:62:b1:b5:9e:06:59:29:92:1f:0e:
                    3e:7e:60:06:53:1e:a0:f7:8a:ab:d1:4d:a3:c4:08:
                    3a:27:33:e1:8d:14:10:6b:08:33:ff:75:ca:f2:f1:
                    aa:88:45:2a:25:b2:7d:ce:9b:03:04:2c:7e:f8:9a:
                    d2:3c:b6:95:d8:81:4d:8a:e8:2c:03:fb:08:dc:34:
                    e4:d7:77:fe:69:02:15:25:42:ee:23:30:c4:9f:ca:
                    25:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:7D:0D:C5:6A:DA:4B:C5:18:76:CA:BD:B1:3F:64:C8:DA:BD:EE:5B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.148.0/22
                IPv6:
                  2804:3164::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265011

    Signature Algorithm: sha256WithRSAEncryption
         66:73:52:14:41:ec:5d:ab:17:10:b4:08:d5:01:f0:66:91:c3:
         f2:b3:e6:49:39:7d:12:0a:cd:89:38:9d:66:5f:5a:23:2c:b5:
         17:89:ab:cd:7a:9f:ca:a3:45:04:cd:7e:a9:9a:3c:d2:00:bc:
         ef:70:9a:1e:18:5c:f5:11:ca:ba:aa:e1:2e:86:30:f2:ac:8a:
         b6:d9:13:fb:67:d9:cb:52:f5:f3:e4:80:2c:67:06:41:2d:5c:
         e8:ec:35:1d:5d:43:da:b1:01:55:c2:e6:03:5a:eb:4c:a7:10:
         91:00:d7:c7:e0:3c:52:bd:97:53:0f:db:53:c1:c5:eb:08:08:
         49:d1:b3:49:9e:73:34:63:f5:3b:42:62:0a:dd:07:86:51:17:
         83:7c:88:db:f8:f9:31:17:94:d3:a0:52:92:af:d8:11:7d:6e:
         49:e6:a2:69:22:dd:79:3c:a3:47:7e:30:46:7e:10:36:3b:80:
         8a:89:15:04:b2:4b:b1:3c:04:dd:05:e3:3f:3b:53:1a:f4:d4:
         fb:5c:ba:f1:96:ac:34:00:9a:81:e8:45:01:5f:45:8b:9a:c6:
         6d:06:9b:fd:b8:57:d4:5f:58:00:a2:50:75:e0:2a:65:5f:7c:
         b4:fc:9c:e8:39:17:7f:b0:8c:38:c3:ca:8f:1c:66:79:19:0d:
         11:20:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org