Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/538E3016A58D538A8E37C13617C6A21BBA07AAED.cer
File:                     538E3016A58D538A8E37C13617C6A21BBA07AAED.cer (raw, json)
Hash identifier:          0GFn55lH9/ljopCt6JI1xgV9XaSCmtSKm40EaKzU6O8=
Subject key identifier:   53:8E:30:16:A5:8D:53:8A:8E:37:C1:36:17:C6:A2:1B:BA:07:AA:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3D3623C3C24F2DE205C53A38C4FDE4E94699FE69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/538E3016A58D538A8E37C13617C6A21BBA07AAED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 13:59:13 +0000
Certificate not after:    Thu 27 Jun 2024 14:04:13 +0000
Subordinate resources:    AS: 53019
                          IP: 177.70.160.0/20
                          IP: 2804:5dc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:36:23:c3:c2:4f:2d:e2:05:c5:3a:38:c4:fd:e4:e9:46:99:fe:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 13:59:13 2023 GMT
            Not After : Jun 27 14:04:13 2024 GMT
        Subject: CN=538E3016A58D538A8E37C13617C6A21BBA07AAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ee:c6:d8:18:8c:b9:81:05:37:8e:57:33:24:
                    d2:de:fd:3f:ad:00:60:2b:69:43:da:ed:ac:7e:86:
                    cd:03:8d:5b:3a:8b:e8:38:7a:cf:3a:3e:16:a6:41:
                    74:78:4a:99:fc:95:8f:82:30:d9:01:0c:7e:02:d8:
                    81:b5:02:45:76:13:cc:59:1a:63:08:a0:64:23:79:
                    28:57:e2:ed:d3:33:22:26:d2:3c:5b:bc:12:0e:12:
                    4c:04:6e:02:05:b5:e0:b9:df:fc:cc:1e:07:97:54:
                    a6:05:c3:d2:f5:c7:1b:76:4c:ea:39:88:cf:22:82:
                    16:c5:b2:c6:62:9e:42:c0:1c:3f:a5:b0:5b:52:1d:
                    0b:2d:6c:27:0f:55:86:48:36:88:5a:4b:17:17:bd:
                    f1:fd:ba:ab:6d:89:9d:6b:c0:71:cf:c7:77:d6:70:
                    2e:e5:0a:34:3d:d6:e0:7d:a4:5e:73:00:d7:ee:71:
                    42:d6:1f:9c:bc:06:1c:4d:6b:ec:10:99:0c:4b:0a:
                    d8:43:84:c4:30:96:e9:ba:47:24:be:dd:68:bd:af:
                    8d:d5:85:93:39:c7:fe:98:aa:6d:1a:fe:70:a9:fe:
                    14:79:6d:48:cd:96:42:ce:2c:71:0c:19:c4:5e:e9:
                    6a:a6:b3:ea:ef:32:24:e9:87:97:1f:bb:56:c6:d6:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:8E:30:16:A5:8D:53:8A:8E:37:C1:36:17:C6:A2:1B:BA:07:AA:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/538E3016A58D538A8E37C13617C6A21BBA07AAED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.160.0/20
                IPv6:
                  2804:5dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53019

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:6f:0a:28:f3:ae:fb:2a:75:e4:4b:40:e3:f0:e7:02:6d:
         32:99:14:27:b2:52:3c:19:c2:dd:b5:62:6a:dc:33:5a:6c:3c:
         92:c7:e4:44:3a:72:7f:c6:fa:2d:1d:b4:c9:b8:98:74:de:2f:
         7c:54:1f:c9:25:fc:72:7c:98:7e:20:0b:34:f3:d9:fe:87:65:
         ca:83:7e:9e:75:11:e4:ad:24:b1:1f:b1:86:6b:9c:15:98:fc:
         b4:70:a4:5e:f9:20:51:c5:da:ec:d2:c1:f8:d1:ef:fb:8b:dc:
         c1:c7:eb:82:50:f3:ea:5b:c6:34:ae:8a:86:54:67:59:21:ff:
         7d:5f:34:72:aa:d7:c2:44:75:f8:af:68:d7:34:ba:c4:59:44:
         8d:97:87:dd:e3:87:d6:a9:0f:db:f4:13:42:9e:69:be:e9:78:
         81:c4:64:b2:f2:cc:64:1c:63:64:a6:4f:87:52:bb:ea:a3:96:
         1a:5d:01:64:1c:88:82:99:18:86:e4:4a:c2:8e:9e:55:44:70:
         51:91:ec:68:2e:3c:5d:3d:a3:ad:09:5a:d3:38:d8:2c:d6:47:
         6e:b8:cb:83:8b:25:ac:bc:ea:fa:97:74:49:94:c2:9a:af:7d:
         02:31:d2:8c:10:a0:3c:f5:f7:7e:6e:49:1c:bf:53:46:fb:0a:
         9b:5b:a5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:03 2025 by rpki-client