Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3.cer
File:                     53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3.cer (raw, json)
Hash identifier:          hKXp2PAgqTNc9jrS3JxzoCBJSz0/2UIfiVyeuQoXiqo=
Subject key identifier:   53:A0:3A:3B:3F:1F:5E:3F:C7:C9:78:6F:5F:F8:51:AA:51:BF:CC:C3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CDCF79C7B54B2DBA7BA9E94215052834F4222F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jan 2022 17:26:39 +0000
Certificate not after:    Tue 17 Jan 2023 17:31:39 +0000
Subordinate resources:    AS: 268345
                          IP: 45.239.8.0/22
                          IP: 2804:4fb8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:dc:f7:9c:7b:54:b2:db:a7:ba:9e:94:21:50:52:83:4f:42:22:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 17:26:39 2022 GMT
            Not After : Jan 17 17:31:39 2023 GMT
        Subject: CN=53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:24:d7:b0:37:55:c8:e8:f8:6a:0a:08:56:
                    c5:86:ac:74:3c:9a:c4:02:ba:4f:37:36:86:69:ff:
                    a6:35:1a:bf:e1:7e:02:9a:09:0a:8a:54:eb:2f:69:
                    9d:4e:03:04:a4:37:e3:3c:b1:eb:82:1f:24:ad:a0:
                    43:b1:8b:77:5d:98:e8:15:10:30:d1:5f:d9:71:46:
                    7f:b9:60:11:1b:70:d0:3b:3b:95:67:c2:b0:b8:c9:
                    48:38:db:69:05:5c:0a:58:6e:e7:85:25:50:8d:e5:
                    47:25:1e:4e:9c:63:c8:d9:e9:cf:5e:15:22:b5:a8:
                    cf:b3:b9:0c:a1:c8:b8:85:50:c1:50:5f:1b:bc:a0:
                    10:dd:73:f5:3a:04:9d:90:91:bf:1c:e0:88:cb:cc:
                    9f:5c:0f:a0:d6:7d:51:2f:bf:52:32:83:17:cb:af:
                    ff:84:62:8a:6a:25:70:5d:85:76:08:d5:b3:79:29:
                    49:f4:49:d9:16:27:2b:20:98:23:59:f5:12:0f:e7:
                    06:01:89:64:f3:f5:04:c2:81:67:d1:be:01:01:1d:
                    77:b6:ab:e1:d3:4d:c6:f1:46:1c:d2:4d:6b:e5:bc:
                    4b:15:c8:ef:42:c4:c3:ed:e6:2e:48:5e:0e:ea:73:
                    28:a3:6d:6e:ef:d7:84:77:a8:33:cc:c4:31:4b:5b:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:A0:3A:3B:3F:1F:5E:3F:C7:C9:78:6F:5F:F8:51:AA:51:BF:CC:C3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.8.0/22
                IPv6:
                  2804:4fb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268345

    Signature Algorithm: sha256WithRSAEncryption
         9f:9c:ec:99:ea:3b:13:7d:b5:69:28:2c:d0:27:61:99:91:89:
         49:2f:05:c6:71:87:7d:3a:6e:47:9f:de:ee:fa:e3:84:2d:6a:
         ed:c9:0f:ce:4c:53:5a:5c:25:16:6d:56:6d:5b:44:8a:17:d7:
         26:83:8b:16:ef:9b:9f:d9:e1:61:0e:16:7f:aa:e1:b7:99:7b:
         c0:34:16:e4:bf:81:13:05:c9:47:54:32:04:cf:8b:67:c6:d4:
         e1:e1:53:3a:b6:f0:b2:c2:ff:0d:1f:07:55:5f:da:e3:18:5b:
         36:0f:02:d3:87:aa:7f:d7:05:16:6a:a9:16:9a:b6:76:20:4d:
         81:6a:c0:fc:f8:27:d0:ad:51:a7:66:1a:f7:08:89:88:d2:68:
         ec:6c:f1:d9:b0:c2:44:26:9f:d2:42:b8:cd:43:88:c3:85:a9:
         d4:8a:bd:94:9d:0c:d9:79:fd:16:bd:60:52:89:f8:f6:76:ce:
         ee:d2:90:fd:95:a3:42:45:72:35:b7:64:32:33:6a:1f:fa:b3:
         66:0b:89:d3:6f:c8:34:ca:97:67:f9:27:f2:e9:5c:10:e3:83:
         49:c1:39:04:6f:eb:5e:b4:a3:1c:f6:a7:ff:ff:c2:75:10:c9:
         d5:76:c6:e9:8a:44:5d:c0:04:4f:af:8d:f1:3c:c4:89:8e:22:
         21:25:9e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org