Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/53591DD5E351B945FCF842C06D244EE12F738570.cer
File:                     53591DD5E351B945FCF842C06D244EE12F738570.cer (raw, json)
Hash identifier:          0bbAjPiVx9jkim7xLw8S2rjsOtxjRLE7HZgQ61k3SNI=
Subject key identifier:   53:59:1D:D5:E3:51:B9:45:FC:F8:42:C0:6D:24:4E:E1:2F:73:85:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       117EB63390B682961289D37A661F410601AAEC76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9EeU4iYKeEeQogRRLR8kWUcjCe3dCPT6aTrgDvheEVF6/0/53591DD5E351B945FCF842C06D244EE12F738570.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9EeU4iYKeEeQogRRLR8kWUcjCe3dCPT6aTrgDvheEVF6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 13 Aug 2023 14:25:11 +0000
Certificate not after:    Sun 11 Aug 2024 14:30:11 +0000
Subordinate resources:    AS: 262610
                          IP: 177.101.64.0/20
                          IP: 2804:7b80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7e:b6:33:90:b6:82:96:12:89:d3:7a:66:1f:41:06:01:aa:ec:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 13 14:25:11 2023 GMT
            Not After : Aug 11 14:30:11 2024 GMT
        Subject: CN=53591DD5E351B945FCF842C06D244EE12F738570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:22:e6:27:fb:cd:04:1b:4e:5e:60:7c:90:
                    e8:0c:11:ce:be:5f:3a:7f:ee:b0:b5:76:d8:0b:23:
                    6b:ff:d8:27:99:17:9d:50:76:6e:ce:10:8f:be:ed:
                    05:31:07:df:eb:45:b4:07:9d:e3:50:3c:78:62:fc:
                    05:fe:16:a1:2f:5c:77:52:4f:92:1e:c4:d7:73:53:
                    e1:da:47:4c:fa:74:c3:e8:14:24:7a:49:6a:de:04:
                    2e:da:2c:25:3e:ae:c9:78:13:c9:4b:20:a7:01:09:
                    01:c9:e4:bc:59:6d:d9:12:12:c2:1d:f3:e0:d5:30:
                    34:e6:f7:44:7f:d9:09:bb:9f:7b:82:c8:1e:9c:d4:
                    2e:da:1e:d5:c8:39:aa:a9:b7:5d:19:b7:f2:05:36:
                    80:7c:9f:1b:56:bf:16:ad:f7:7e:88:54:a3:e0:1e:
                    34:d9:c4:06:cb:15:e6:36:f8:2f:d7:e1:10:8b:ad:
                    12:af:ac:02:b9:28:2a:68:5d:a5:25:62:d6:e2:e6:
                    a0:53:62:71:64:12:6b:8d:c6:bf:c6:23:e3:dc:ee:
                    ba:16:83:35:96:af:93:74:05:2f:9c:fe:55:f3:f5:
                    9e:5a:19:d1:12:c0:03:92:5a:be:c0:64:1b:26:b8:
                    6e:f5:e3:94:2d:21:18:6b:40:40:b7:c7:46:0a:2f:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:59:1D:D5:E3:51:B9:45:FC:F8:42:C0:6D:24:4E:E1:2F:73:85:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9EeU4iYKeEeQogRRLR8kWUcjCe3dCPT6aTrgDvheEVF6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9EeU4iYKeEeQogRRLR8kWUcjCe3dCPT6aTrgDvheEVF6/0/53591DD5E351B945FCF842C06D244EE12F738570.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.64.0/20
                IPv6:
                  2804:7b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262610

    Signature Algorithm: sha256WithRSAEncryption
         33:f0:26:19:b0:51:55:18:0e:31:a3:dd:79:fa:84:58:bd:cb:
         72:61:c3:2a:bb:6b:e6:37:c0:25:30:c1:5c:95:44:2d:7d:d5:
         ae:bb:47:12:82:64:b1:5f:43:26:45:c0:8e:2a:cb:71:94:b5:
         66:ac:27:a8:e0:cc:67:bb:d4:22:a7:ad:ce:12:41:83:67:fc:
         56:2a:53:5e:6d:1c:81:28:dd:13:c9:7f:e6:5e:a2:8b:cf:b4:
         02:55:ed:b8:e7:8d:d3:85:38:2b:31:3e:b1:ed:e5:93:73:4d:
         02:86:a1:c7:7b:84:42:3d:11:42:8e:b9:e6:55:87:43:ff:60:
         57:9d:ca:22:f4:f5:40:59:77:30:cd:0f:69:27:7e:51:47:1e:
         15:e9:63:37:bf:ff:1e:2e:4b:3a:54:9b:2a:65:15:c1:d9:ac:
         55:96:2c:3d:eb:5d:51:92:6a:0e:59:3c:6c:78:65:19:04:d5:
         3a:8e:7a:24:ef:9d:34:07:8d:81:37:af:bb:20:9d:51:e2:21:
         dc:f8:cf:30:f7:c1:53:eb:eb:06:50:d3:2a:95:d6:17:7a:7c:
         ae:32:c0:e4:90:9f:90:ea:87:22:b8:08:a3:16:b8:27:fa:68:
         5f:17:ce:3a:02:8a:3d:93:72:e8:64:ce:1f:19:a1:58:9f:f8:
         62:50:c1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org