Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5350C3F0DEB1EC513832C678B649B9E213241AEB.cer
File:                     5350C3F0DEB1EC513832C678B649B9E213241AEB.cer (raw, json)
Hash identifier:          2vM2Q3JhLWYx1IMG1xi1AYnQ7SVLB0UnKn1rz18EOZ4=
Subject key identifier:   53:50:C3:F0:DE:B1:EC:51:38:32:C6:78:B6:49:B9:E2:13:24:1A:EB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27009F292B53A8144178FEDCC21E1A587E172658
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1/5350C3F0DEB1EC513832C678B649B9E213241AEB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2024 07:47:33 +0000
Certificate not after:    Thu 13 Mar 2025 07:52:33 +0000
Subordinate resources:    AS: 266401
                          IP: 170.81.60.0/22
                          IP: 2804:3748::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:00:9f:29:2b:53:a8:14:41:78:fe:dc:c2:1e:1a:58:7e:17:26:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 07:47:33 2024 GMT
            Not After : Mar 13 07:52:33 2025 GMT
        Subject: CN=5350C3F0DEB1EC513832C678B649B9E213241AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:3d:62:b2:55:53:b2:11:c5:0e:42:22:c6:
                    39:ff:50:15:6a:04:96:c0:6b:f1:ea:75:6b:94:f0:
                    fa:8e:08:fb:71:b5:dd:a6:2e:3a:5e:44:f8:f7:19:
                    85:54:b0:fb:68:a8:4a:5f:51:e2:f7:25:31:76:5b:
                    90:e1:3c:52:45:4d:e3:9c:9d:cc:98:c9:9c:3c:b3:
                    32:c5:50:88:f4:58:7e:eb:3d:f1:fe:3e:48:69:df:
                    54:91:2f:69:b6:9f:d8:96:3d:79:1e:67:ca:82:a4:
                    29:d8:4e:70:84:0d:01:99:f8:49:c3:22:10:eb:b4:
                    b5:92:95:0f:89:e5:69:75:eb:5e:d2:3c:a6:b7:69:
                    c5:63:c1:43:ac:b8:78:c3:d3:1f:9c:6f:e2:ff:f5:
                    02:2b:46:8e:c5:24:2e:4b:4d:10:df:6b:8e:00:37:
                    a5:45:bc:f2:ef:55:79:21:a8:c5:9c:39:70:c8:1a:
                    85:5a:f7:62:bf:7b:85:c2:12:49:55:f0:bb:96:3c:
                    38:8b:f6:c2:01:73:32:ac:b9:83:69:e6:24:34:32:
                    12:62:04:be:87:13:af:30:a6:02:13:72:e5:b9:70:
                    1d:75:d9:99:95:f3:ed:31:be:48:be:27:6f:c4:1a:
                    d1:2a:85:ce:54:59:43:31:e4:42:66:71:6d:74:a8:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:50:C3:F0:DE:B1:EC:51:38:32:C6:78:B6:49:B9:E2:13:24:1A:EB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1/5350C3F0DEB1EC513832C678B649B9E213241AEB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.60.0/22
                IPv6:
                  2804:3748::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266401

    Signature Algorithm: sha256WithRSAEncryption
         0b:8f:45:13:98:d0:cb:c4:48:81:ed:9a:74:77:33:6a:83:b2:
         0d:fa:9f:da:3c:89:81:5d:72:75:eb:b2:4c:4e:50:fc:50:a3:
         5a:03:ee:4b:18:fc:e7:5e:81:19:cb:34:c2:f0:00:9b:a5:a2:
         4d:5e:73:29:64:04:4f:b2:39:6d:22:9b:00:79:cb:b0:9b:2f:
         99:c1:b4:46:41:01:45:8c:4f:1e:75:2f:a6:42:59:85:48:3a:
         f7:41:a2:f5:69:3a:cc:b3:60:da:16:f6:e1:7b:59:50:16:95:
         99:e1:68:48:2d:4e:bb:2c:01:47:9b:d3:1f:16:a3:02:00:a5:
         46:0c:b4:61:8b:70:c7:a7:57:e4:21:b9:78:9a:e6:c5:57:62:
         c9:6d:69:d8:db:fe:f6:a8:2e:a2:f0:dc:b8:cd:20:12:55:1a:
         34:e9:63:55:3b:c8:f9:98:17:b5:93:a0:62:8b:7d:5c:09:87:
         da:65:52:ef:0f:82:52:8f:2e:54:a7:08:85:2e:54:c1:af:53:
         c7:c7:fa:ff:7a:9e:ee:e4:39:07:66:0c:f4:a0:28:00:c0:90:
         ae:47:67:30:72:2b:05:6a:63:84:be:ad:9a:47:da:45:ac:d8:
         aa:bd:ed:20:77:4c:f9:8f:2a:17:e1:ac:c4:45:71:a1:58:6b:
         8e:2e:75:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org