Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/53B1C8BA2F11A8876C0513D35126DD29A9FD9C07.cer
File:                     53B1C8BA2F11A8876C0513D35126DD29A9FD9C07.cer (raw, json)
Hash identifier:          +X33gC1K1CbnfEAusQvdNyCZHGM6Wxk+I8Wcz5h5FUU=
Subject key identifier:   53:B1:C8:BA:2F:11:A8:87:6C:05:13:D3:51:26:DD:29:A9:FD:9C:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C01230D9E3A0F5E88F1F6BE098C56AA0BD4270F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/53B1C8BA2F11A8876C0513D35126DD29A9FD9C07.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 17:28:13 +0000
Certificate not after:    Mon 01 Apr 2024 17:33:13 +0000
Subordinate resources:    AS: 267199
                          IP: 45.231.140.0/22
                          IP: 2804:49b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:01:23:0d:9e:3a:0f:5e:88:f1:f6:be:09:8c:56:aa:0b:d4:27:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 17:28:13 2023 GMT
            Not After : Apr  1 17:33:13 2024 GMT
        Subject: CN=53B1C8BA2F11A8876C0513D35126DD29A9FD9C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c3:f8:16:53:6c:33:d4:1a:28:30:3b:7c:f1:
                    d7:61:96:ef:1f:94:23:c9:6e:a8:a5:3f:dc:c0:dc:
                    d5:ac:3f:52:83:07:cc:b4:5c:b5:33:81:62:b3:0d:
                    30:4b:1d:88:7a:84:f9:4e:54:48:8f:4a:3f:83:a5:
                    60:59:a4:78:90:03:09:d1:ce:7b:de:39:35:03:a7:
                    ef:36:df:d4:2b:40:30:8a:42:a2:37:1f:f8:62:f9:
                    76:47:81:71:04:b9:53:80:86:8b:87:6d:9c:8b:13:
                    19:e6:de:f6:4a:cc:44:74:7d:0c:07:db:14:30:12:
                    2e:ac:22:1b:1d:7b:25:d9:38:db:f8:3f:06:ee:1c:
                    f7:e8:2c:99:fc:3a:f6:1d:9c:a6:81:dc:be:0f:35:
                    bc:e9:69:63:6a:f2:ca:ea:a4:f3:3a:e1:f0:53:22:
                    7d:7d:f8:07:a1:58:08:53:fc:3b:1c:ef:2b:1c:64:
                    1f:ee:a9:ec:84:c7:b4:24:12:ee:e6:87:09:9d:13:
                    f1:7d:39:da:28:80:7e:72:d0:d4:4a:02:ce:40:0e:
                    03:15:37:f7:bb:df:3f:66:5e:e5:3c:2d:60:94:d5:
                    3a:e0:60:84:1e:52:3e:ed:5c:de:9d:b5:e0:09:40:
                    77:46:30:2e:c5:35:42:eb:24:9e:79:b9:09:a7:27:
                    47:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:B1:C8:BA:2F:11:A8:87:6C:05:13:D3:51:26:DD:29:A9:FD:9C:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/53B1C8BA2F11A8876C0513D35126DD29A9FD9C07.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.140.0/22
                IPv6:
                  2804:49b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267199

    Signature Algorithm: sha256WithRSAEncryption
         04:9d:d3:a9:0a:87:a3:5e:b8:74:62:82:95:ee:bf:2f:9a:de:
         ba:d7:0c:4d:68:cc:20:33:48:d7:28:c4:ec:ae:78:55:76:b2:
         c1:20:8a:a9:ab:fc:4c:2a:5e:bf:55:ec:52:c6:e5:28:44:11:
         98:9a:f0:00:32:7d:14:ad:19:c2:5c:a4:94:6e:c0:82:01:04:
         de:42:c5:b2:0f:34:17:3a:71:b5:f6:76:d8:54:6f:12:6a:6d:
         06:e6:81:1a:dc:8d:a0:d7:8b:dc:80:d9:19:3c:b0:17:03:49:
         33:65:0e:01:14:f2:1f:67:19:f5:f0:20:82:47:ac:2d:1a:b5:
         50:65:05:d6:88:40:59:ca:b6:eb:af:dd:26:ca:4a:15:75:06:
         81:ef:91:23:df:a4:72:62:09:c6:fb:94:01:15:0f:d8:5e:44:
         bb:46:aa:83:67:57:96:55:2b:a7:b4:34:16:5b:07:71:55:5d:
         dc:69:77:59:f1:4c:8d:98:3a:e2:99:98:50:dd:4d:ac:fb:9c:
         ea:44:b3:ce:1d:d3:ac:17:eb:af:3d:5f:0c:e3:58:7d:a3:59:
         49:eb:ce:5e:d7:55:6f:bc:d1:ad:99:58:a4:a3:49:ce:52:b8:
         7b:03:94:be:f4:ff:24:69:26:62:92:0b:11:c8:83:2d:b1:d1:
         91:c9:86:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org