Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/533B8335992AC24C92CD2553C5F62AC293DF880D.cer
File:                     533B8335992AC24C92CD2553C5F62AC293DF880D.cer (raw, json)
Hash identifier:          MsVHuv0XZevj/0vFIE5+EmHmfKjcRZybfjGMdRFN/ww=
Subject key identifier:   53:3B:83:35:99:2A:C2:4C:92:CD:25:53:C5:F6:2A:C2:93:DF:88:0D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       17B09C0079E2AFC65F078E16277420876430A124
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/533B8335992AC24C92CD2553C5F62AC293DF880D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 15:14:56 +0000
Certificate not after:    Tue 25 Feb 2025 15:19:56 +0000
Subordinate resources:    AS: 263396
                          IP: 177.125.252.0/22
                          IP: 2804:1594::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b0:9c:00:79:e2:af:c6:5f:07:8e:16:27:74:20:87:64:30:a1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 27 15:14:56 2024 GMT
            Not After : Feb 25 15:19:56 2025 GMT
        Subject: CN=533B8335992AC24C92CD2553C5F62AC293DF880D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:a9:e0:e1:3a:47:6d:02:7e:67:da:be:52:
                    96:e3:31:3e:0c:e0:8e:7c:a2:6e:8c:98:a8:c0:dd:
                    b3:c5:02:5e:9b:58:77:42:9d:f8:d9:ab:fd:a5:9b:
                    d4:18:e3:4c:25:ca:85:1a:2a:9e:bd:29:17:14:3f:
                    66:d5:3a:4d:14:9e:ad:73:02:67:4c:bc:0d:1e:48:
                    78:a8:e9:b1:85:f3:54:d0:ce:6c:79:05:e7:f4:1b:
                    17:ce:7f:82:44:45:0a:79:44:26:ee:b9:48:b6:9c:
                    0c:1d:e4:8f:17:4c:e7:d5:a2:36:1c:fb:b2:43:e7:
                    ee:a5:8c:5e:e3:b2:ab:29:2d:da:0e:57:22:0e:2c:
                    68:48:0d:f3:ab:ce:58:80:09:62:75:af:48:6b:2c:
                    65:fa:5e:de:32:72:80:6c:c2:80:07:20:fc:72:4e:
                    f8:c7:5c:39:e4:d7:44:54:ad:c7:69:e6:4d:b7:88:
                    da:e1:32:ad:90:27:c5:92:1c:8e:02:91:3c:f5:bc:
                    67:28:fa:af:0b:6a:2c:18:e4:b5:5f:43:90:9c:77:
                    06:6f:7b:ec:93:21:72:b0:40:d7:af:60:f4:eb:f8:
                    db:51:0c:30:6b:93:22:94:cd:f0:02:a2:91:78:87:
                    27:80:a5:1c:7e:76:e9:87:45:3b:71:b5:2f:64:de:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:3B:83:35:99:2A:C2:4C:92:CD:25:53:C5:F6:2A:C2:93:DF:88:0D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/533B8335992AC24C92CD2553C5F62AC293DF880D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.252.0/22
                IPv6:
                  2804:1594::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263396

    Signature Algorithm: sha256WithRSAEncryption
         73:c3:46:a4:77:c5:1e:9b:e1:fc:fb:91:5b:19:d4:2a:3e:e9:
         c1:93:f5:b0:00:8f:10:bf:b1:54:8e:4b:93:83:7e:7d:cc:10:
         76:2c:73:f7:bd:73:fc:b3:aa:7a:03:25:99:14:06:f8:ac:c0:
         b9:75:07:ce:a8:fa:3a:35:d6:d0:4f:df:02:62:26:d1:08:5c:
         35:f1:98:7a:65:53:56:0b:bf:e5:ca:31:0d:6b:62:3c:85:de:
         96:a7:d9:32:e6:c9:3b:af:27:5b:b7:20:b7:eb:ee:32:54:c7:
         3e:b9:9e:df:68:6a:ec:79:14:de:74:47:e2:00:47:2f:1b:09:
         56:64:0b:e1:ca:11:04:fc:5b:cf:23:18:91:5f:52:90:83:60:
         fa:59:0d:45:75:ea:5b:22:8e:35:d5:1b:88:cd:64:19:2d:3f:
         d0:ab:8e:fb:82:c3:63:69:e1:0c:6b:51:7a:18:7a:d8:6a:0d:
         a1:80:dc:90:c5:11:a2:c2:29:0b:e6:fa:e4:2f:bc:ce:f3:43:
         5d:d2:bf:58:79:e5:3b:9e:94:72:88:48:34:f8:b2:ab:db:48:
         f6:92:27:f0:b7:d1:c0:d1:dd:9e:ab:f9:e0:5f:33:ad:49:cd:
         da:a9:16:b7:20:da:e4:9d:27:51:75:d9:87:57:06:17:9a:17:
         45:cf:e4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----