Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/53BB4AACFE0205BA1F1E509DF70EDF60BE99246B.cer
File:                     53BB4AACFE0205BA1F1E509DF70EDF60BE99246B.cer (raw, json)
Hash identifier:          s1tJjFNwlTJFNgzE+eijSzlxtbpivqT9czLpdq/MpWg=
Subject key identifier:   53:BB:4A:AC:FE:02:05:BA:1F:1E:50:9D:F7:0E:DF:60:BE:99:24:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6624138E3B570A80A9AB949D9BE3A639543179B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/53BB4AACFE0205BA1F1E509DF70EDF60BE99246B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Sep 2023 19:23:15 +0000
Certificate not after:    Sat 21 Sep 2024 19:28:15 +0000
Subordinate resources:    AS: 53046
                          AS: 61600
                          IP: 45.186.143.0/24
                          IP: 143.208.160.0/22
                          IP: 177.93.120.0/21
                          IP: 177.101.16.0/20
                          IP: 200.39.64.0/19
                          IP: 2801:80:330::/48
                          IP: 2801:80:37a0::/48
                          IP: 2804:1f04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:24:13:8e:3b:57:0a:80:a9:ab:94:9d:9b:e3:a6:39:54:31:79:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 23 19:23:15 2023 GMT
            Not After : Sep 21 19:28:15 2024 GMT
        Subject: CN=53BB4AACFE0205BA1F1E509DF70EDF60BE99246B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:b4:9a:65:16:f6:c9:8f:3b:e5:12:57:16:
                    5a:b3:c4:1c:1e:f0:18:c0:9d:09:72:0e:e3:89:a2:
                    b1:33:92:47:8f:29:de:9e:12:91:91:18:5b:8f:34:
                    b2:33:86:92:56:ba:72:32:22:bb:db:ec:81:15:e5:
                    d4:ca:6e:28:82:dc:92:22:47:d4:4c:2e:5f:f6:62:
                    29:e0:0d:e8:c8:c4:46:01:2b:07:1e:8d:79:3a:e6:
                    20:c6:cd:d5:d1:df:72:b6:29:59:1b:73:72:81:5c:
                    62:77:b5:11:d9:a5:d3:5b:90:dd:fc:55:5a:92:2d:
                    0b:29:9e:e2:88:cd:e1:d8:3e:92:6c:80:ed:57:72:
                    7c:6d:12:2c:c1:3d:80:dc:c2:df:74:1d:38:74:cd:
                    e9:aa:df:ae:69:ca:09:54:45:e9:be:d0:68:bc:43:
                    f6:f9:56:c0:67:da:16:c1:5f:c0:97:a9:e1:e5:4f:
                    e7:02:7e:a4:24:b4:f8:31:84:21:90:c8:0f:c8:e2:
                    24:e9:c2:55:c9:1a:23:01:62:98:9e:90:eb:c2:2e:
                    01:c5:6e:4c:45:3b:f3:2b:1a:12:ed:56:a1:d0:f4:
                    c8:95:b6:f0:6d:8a:45:4b:68:1a:77:f7:38:33:ac:
                    15:34:da:be:e9:af:ec:71:13:73:49:8a:6d:8c:84:
                    cf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:BB:4A:AC:FE:02:05:BA:1F:1E:50:9D:F7:0E:DF:60:BE:99:24:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/53BB4AACFE0205BA1F1E509DF70EDF60BE99246B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.143.0/24
                  143.208.160.0/22
                  177.93.120.0/21
                  177.101.16.0/20
                  200.39.64.0/19
                IPv6:
                  2801:80:330::/48
                  2801:80:37a0::/48
                  2804:1f04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53046
                  61600

    Signature Algorithm: sha256WithRSAEncryption
         27:e2:98:e0:0b:5f:6e:ec:0b:a3:74:8d:93:13:30:37:74:5a:
         38:d3:d1:39:e3:25:a7:db:c5:28:8c:55:4c:fa:fe:01:71:5a:
         1a:bf:5b:3a:91:d9:81:fd:15:5a:b5:08:44:b0:79:84:93:10:
         03:26:75:82:d3:4b:4b:61:f5:ed:b6:00:4d:31:fd:12:7d:ff:
         24:4d:9f:1a:b9:b5:b1:75:96:df:b7:27:89:cc:4f:a2:43:1c:
         04:eb:08:94:c8:89:00:95:e8:31:ea:c6:65:46:e5:98:d6:5b:
         1b:b5:77:4b:af:5c:d5:4c:91:4d:58:a7:44:25:1f:41:ad:91:
         be:59:be:8f:d1:f5:fa:6a:f1:a8:09:d6:4c:db:df:de:8f:86:
         23:c6:b1:17:37:87:56:a9:10:2f:94:5b:63:c2:92:ea:a0:35:
         ef:85:79:bd:4a:73:9e:9f:a8:ca:e4:08:82:76:58:a1:28:16:
         98:b6:c1:5b:8d:63:12:0f:b2:ea:84:5b:53:f6:e0:95:a0:78:
         1a:da:71:07:b6:b5:5a:8b:9b:3f:da:89:59:36:f8:da:ac:60:
         3f:6b:57:ed:4f:23:31:18:3a:1f:76:49:d0:fb:f2:c4:2b:f9:
         b2:fd:98:4d:32:35:19:4e:be:91:ef:3a:13:d1:c1:e3:01:bb:
         67:59:58:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org