Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/53666A390F5DE1FC3C0681A203675A78B27E834D.cer
File:                     53666A390F5DE1FC3C0681A203675A78B27E834D.cer (raw, json)
Hash identifier:          Z6F6rDDldVILw14VFs3KNUpe6GssTBpuCA2GdWOvZKk=
Subject key identifier:   53:66:6A:39:0F:5D:E1:FC:3C:06:81:A2:03:67:5A:78:B2:7E:83:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       17926DE907321FD999654658D67EC0F32E0D19EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/53666A390F5DE1FC3C0681A203675A78B27E834D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 11:33:09 +0000
Certificate not after:    Tue 03 Dec 2024 11:38:09 +0000
Subordinate resources:    AS: 265017
                          IP: 170.84.140.0/22
                          IP: 2804:3178::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:92:6d:e9:07:32:1f:d9:99:65:46:58:d6:7e:c0:f3:2e:0d:19:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 11:33:09 2023 GMT
            Not After : Dec  3 11:38:09 2024 GMT
        Subject: CN=53666A390F5DE1FC3C0681A203675A78B27E834D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:5b:0c:02:00:67:a9:3f:8f:99:36:74:86:
                    80:d9:f4:e9:65:48:5c:c0:77:09:7c:d5:47:c2:6b:
                    ab:f5:af:05:32:e4:76:a3:6b:8c:ec:5a:2a:58:b4:
                    7c:49:a1:1d:4c:38:87:c1:e3:fb:88:25:8c:83:b8:
                    8f:8b:65:10:53:eb:75:d5:26:20:4f:8c:d7:3a:f5:
                    27:4c:35:05:8d:d5:bb:11:6f:02:1b:e4:97:bb:34:
                    c6:b7:9a:b5:1d:18:a9:2d:4b:58:39:d1:87:6c:55:
                    9d:3a:e6:2f:e8:fa:ba:e6:20:7b:0e:16:15:a2:94:
                    22:bb:9c:0d:40:f5:cb:ed:23:be:40:f5:95:9e:f3:
                    72:ac:42:03:eb:1a:76:67:a4:2b:d3:a3:25:7c:c8:
                    b4:ef:e3:5a:17:e4:29:11:13:8d:e6:27:4f:46:39:
                    30:e5:ce:03:20:b7:fd:38:3c:e3:a6:a1:88:9e:92:
                    f9:bc:bc:40:cf:09:00:62:b8:2a:e4:37:74:10:d1:
                    89:da:74:16:1e:f2:3b:70:4d:fe:35:4e:55:bf:5f:
                    36:e9:bf:0e:7a:c3:78:e6:81:27:33:2f:33:36:ff:
                    2c:d3:bc:57:48:7a:f3:d3:57:ea:d4:3c:15:0c:04:
                    34:57:04:66:a5:1b:6e:fb:6f:b8:7f:ce:32:cb:35:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:66:6A:39:0F:5D:E1:FC:3C:06:81:A2:03:67:5A:78:B2:7E:83:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/53666A390F5DE1FC3C0681A203675A78B27E834D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.140.0/22
                IPv6:
                  2804:3178::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265017

    Signature Algorithm: sha256WithRSAEncryption
         71:c9:41:d9:18:b8:e2:46:f1:89:3b:b8:e5:37:98:87:8a:dd:
         a2:c3:43:49:2e:7a:1a:14:c3:89:7f:0c:c6:bb:2e:ab:a0:2c:
         4d:a8:b3:d7:c5:03:10:5e:61:08:39:6a:a7:4d:b5:ee:ab:20:
         94:f2:63:c6:a8:97:8f:ee:db:1b:19:68:2e:6c:cf:af:5b:c0:
         22:70:de:ee:8d:63:cd:dd:bb:90:b8:ff:5c:f7:2f:9e:20:23:
         79:c2:c9:e7:5f:0f:e8:db:66:b5:7e:f7:5f:d0:56:69:83:a6:
         e2:ef:09:4c:aa:5e:2f:63:4b:18:0c:59:94:62:07:6a:a2:9a:
         8b:c4:0a:3e:b3:29:ee:da:a5:1d:06:65:85:2f:01:30:b4:76:
         2b:90:76:d2:7b:2a:75:da:09:cf:c2:08:8a:81:77:fc:4b:d0:
         35:b0:9b:0d:ab:e1:d5:f4:1d:a3:d6:b8:71:98:08:5f:9c:30:
         83:92:ff:88:ac:bf:8f:24:99:08:38:a0:20:e5:17:10:fa:b8:
         44:80:e2:13:ef:b2:29:9c:5c:dd:f2:d0:51:63:e2:b7:47:e8:
         22:1a:85:7f:7a:a3:5b:90:28:1b:a3:ac:69:2f:d2:9d:5b:67:
         58:99:c0:d8:00:83:7c:55:68:2d:91:45:3e:4a:c0:72:41:fb:
         86:fc:3d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org