Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/53AA058FBD5C11D4F68414FB2B620B8175CC4399.cer
File:                     53AA058FBD5C11D4F68414FB2B620B8175CC4399.cer (raw, json)
Hash identifier:          2yFpnBDZbIIn8FZh3nK2ptY/ECi/Zl3kkGgVlNLbU8M=
Subject key identifier:   53:AA:05:8F:BD:5C:11:D4:F6:84:14:FB:2B:62:0B:81:75:CC:43:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       54DF006EE587014B0F7AF136DCB31BCAB78F806C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/53AA058FBD5C11D4F68414FB2B620B8175CC4399.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Jan 2024 13:05:19 +0000
Certificate not after:    Fri 03 Jan 2025 13:10:19 +0000
Subordinate resources:    AS: 14282
                          IP: 189.14.240.0/20
                          IP: 200.189.56.0/21
                          IP: 2804:84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:df:00:6e:e5:87:01:4b:0f:7a:f1:36:dc:b3:1b:ca:b7:8f:80:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  5 13:05:19 2024 GMT
            Not After : Jan  3 13:10:19 2025 GMT
        Subject: CN=53AA058FBD5C11D4F68414FB2B620B8175CC4399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:96:08:0b:81:62:f1:05:06:a1:5f:24:a6:
                    ce:06:e5:33:72:3f:43:3e:e1:25:75:11:9c:5a:db:
                    49:1e:ef:c6:d5:20:b2:24:f6:f2:e1:67:d9:c8:44:
                    78:eb:ba:a9:c5:f8:ec:7b:10:8a:07:75:3b:25:9d:
                    44:bf:10:b2:9b:1d:35:58:a3:d2:18:90:7f:3a:c7:
                    f9:4c:85:a2:ea:2f:92:52:68:4b:ea:ee:6b:ee:26:
                    8e:2b:8b:71:15:33:38:50:e1:7f:37:22:71:5d:4d:
                    6f:c0:20:20:71:d9:40:e1:2f:30:d4:a0:e1:32:9f:
                    30:6b:82:7c:15:dc:6e:5e:63:7e:70:a3:92:43:84:
                    51:e6:e8:ed:37:0a:ea:93:ca:03:a1:c8:c3:15:39:
                    81:b0:f0:20:ae:5e:f5:9d:26:f6:d2:6e:87:7a:c0:
                    f8:3f:30:f4:57:e1:3e:bb:40:1e:0a:1b:2f:ab:c5:
                    92:44:c0:96:13:ca:b2:fa:c3:59:0d:1e:fb:13:58:
                    7c:b9:7e:f3:60:01:0b:b3:14:61:31:f4:0a:4f:51:
                    b3:ce:82:76:d9:1f:1b:da:32:83:a0:72:68:6d:27:
                    be:41:67:24:7c:cb:5f:68:38:98:f2:81:95:b2:e7:
                    08:c1:4d:68:84:77:33:68:29:82:df:d0:c0:fe:f2:
                    99:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:AA:05:8F:BD:5C:11:D4:F6:84:14:FB:2B:62:0B:81:75:CC:43:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/53AA058FBD5C11D4F68414FB2B620B8175CC4399.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.240.0/20
                  200.189.56.0/21
                IPv6:
                  2804:84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14282

    Signature Algorithm: sha256WithRSAEncryption
         97:e6:41:f1:cc:5a:6c:76:44:a5:f2:cf:81:99:72:90:9d:72:
         77:a1:6b:00:9a:9e:b6:e6:b8:a8:65:86:1b:b9:ea:b4:7c:63:
         f0:fe:2a:35:d2:4f:d2:42:64:12:d4:6f:c3:75:ac:55:ea:c6:
         03:10:f1:7a:4f:b4:c8:2a:8f:7b:29:b9:e5:cf:be:17:e5:76:
         25:56:f0:11:2f:62:e8:39:a1:2e:95:0c:4e:e9:a6:7a:11:d8:
         4b:9a:c6:63:c9:4d:af:10:5b:ff:d1:75:6f:a5:e5:b9:80:b4:
         c2:ed:59:1a:7c:6d:6d:21:3c:87:15:55:2b:83:fd:4a:64:f7:
         a5:0c:dc:6a:60:2a:a3:75:9c:64:4a:24:a2:4f:d7:38:78:9e:
         4c:99:45:ff:86:d4:65:65:e0:31:4f:b6:51:75:77:c2:2b:03:
         c1:06:c2:8d:8d:97:32:0a:2d:e3:5a:b4:c1:3a:4f:bc:94:0e:
         1e:17:75:c3:76:a9:06:37:28:50:38:8e:dc:35:df:78:bd:09:
         31:f1:cd:f1:d5:2c:f2:22:69:2d:e7:a2:61:29:62:36:13:b3:
         5c:89:6f:8e:ae:e5:52:dc:36:fd:c0:a1:84:8e:d2:01:3c:69:
         00:24:1a:7a:90:93:ba:60:8d:28:2d:e4:2a:e5:1a:4b:44:e5:
         1c:52:9e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org