Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/52F74CD9CD82590FB93E8841BA356D693CF1C4E4.cer
File:                     52F74CD9CD82590FB93E8841BA356D693CF1C4E4.cer (raw, json)
Hash identifier:          /Io5JBEWOTTDszypnTkQH3ibQILUDmWF6oQzWsMYw64=
Subject key identifier:   52:F7:4C:D9:CD:82:59:0F:B9:3E:88:41:BA:35:6D:69:3C:F1:C4:E4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       404E65B14AA9FC944D5D7D6E815823F0C66B38F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/52F74CD9CD82590FB93E8841BA356D693CF1C4E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Mar 2022 17:36:48 +0000
Certificate not after:    Tue 28 Mar 2023 17:41:48 +0000
Subordinate resources:    AS: 52989
                          IP: 177.53.0.0/20
                          IP: 2804:4a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4e:65:b1:4a:a9:fc:94:4d:5d:7d:6e:81:58:23:f0:c6:6b:38:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 29 17:36:48 2022 GMT
            Not After : Mar 28 17:41:48 2023 GMT
        Subject: CN=52F74CD9CD82590FB93E8841BA356D693CF1C4E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:0c:7d:e4:27:88:4f:b4:d5:6f:13:b9:9d:
                    ea:46:9a:a3:2a:57:5a:03:e6:cd:fd:f6:09:7f:26:
                    15:a4:9f:67:54:4b:51:9d:1e:f8:a3:df:c4:6d:42:
                    87:3b:e7:e8:04:33:ed:e2:bb:e6:de:1a:54:e5:8f:
                    a0:07:b0:8a:08:85:80:5d:f6:91:e8:37:b5:33:0d:
                    84:1f:bd:2e:b7:21:d7:f9:d9:f6:1b:16:77:23:f6:
                    39:65:7e:78:b0:ae:98:19:33:65:7e:4a:18:ad:be:
                    40:b9:7c:78:0f:8b:a1:1e:7a:be:a7:8b:22:06:ad:
                    78:ac:9b:b6:44:e7:73:1a:40:c0:fd:4b:a8:6c:96:
                    d3:43:3a:6c:de:94:24:61:97:c4:56:56:04:46:55:
                    37:53:e5:47:c3:f0:e7:6b:bb:34:87:75:34:3e:5e:
                    3a:0d:06:c6:0b:86:2a:ee:87:69:33:9f:d8:87:48:
                    04:46:bf:04:86:21:39:46:da:02:28:a3:53:a7:3b:
                    62:f0:2a:72:f3:91:ff:84:88:e3:20:fd:cd:9c:44:
                    ec:c8:00:59:2f:e3:45:d1:61:01:c8:51:ea:3e:64:
                    d9:f8:2f:f6:a5:4e:ff:0d:35:c0:08:43:6e:f3:20:
                    3f:30:7b:23:ab:0b:56:c5:8b:c0:8f:81:4a:d9:10:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:F7:4C:D9:CD:82:59:0F:B9:3E:88:41:BA:35:6D:69:3C:F1:C4:E4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/52F74CD9CD82590FB93E8841BA356D693CF1C4E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.0.0/20
                IPv6:
                  2804:4a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52989

    Signature Algorithm: sha256WithRSAEncryption
         7d:a7:81:b9:2b:ff:a7:68:2f:83:97:9b:70:4c:08:77:4d:47:
         be:ab:8f:f1:65:b5:fa:95:43:95:38:f6:fd:63:eb:c0:42:7c:
         e4:d6:de:95:29:ad:a0:c9:e6:df:c8:43:08:b3:65:5c:c7:02:
         7f:09:a4:73:ba:2a:5e:f9:e3:da:b2:87:2a:c3:9e:50:73:1a:
         4b:36:db:93:b7:79:bd:4c:9a:cf:cd:57:df:fc:2f:b2:96:04:
         81:52:97:61:15:b2:f3:81:d1:2c:94:9c:66:70:da:fc:6f:d7:
         c9:51:fb:7f:69:9d:14:99:40:56:d6:92:68:cd:23:fb:1d:24:
         d5:14:a2:da:2c:d2:92:eb:c2:c3:72:ab:d2:88:d4:f0:57:79:
         4b:7f:41:fd:81:ad:79:52:3d:f5:ad:c8:50:d1:53:10:d2:7d:
         01:ad:db:bb:5e:14:d6:79:8c:7e:53:86:e6:9b:64:1d:16:1f:
         bd:82:77:4a:ae:0d:10:6e:e3:2d:86:eb:ee:67:93:9d:66:e9:
         f6:76:9e:e1:05:ee:ac:bb:77:bb:a6:c1:04:bd:b8:82:e8:45:
         73:66:0d:93:d9:1f:2e:6e:29:e2:ec:87:19:fc:92:00:b8:4b:
         50:f8:86:60:a3:23:8f:de:68:76:c4:b8:77:18:fb:e0:95:bb:
         58:2a:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org