Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/53DBD8550574BFB1767083FAD3A327CD5351750E.cer
File:                     53DBD8550574BFB1767083FAD3A327CD5351750E.cer (raw, json)
Hash identifier:          kLDZvZIjeAoPHF6ZtYwBWgSmkjpsoi7xYKyYGnJ8ZOw=
Subject key identifier:   53:DB:D8:55:05:74:BF:B1:76:70:83:FA:D3:A3:27:CD:53:51:75:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       608C545E133F7AC0527196FBD8962CFB8AF63862
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/53DBD8550574BFB1767083FAD3A327CD5351750E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Sep 2023 02:58:41 +0000
Certificate not after:    Sat 21 Sep 2024 03:03:41 +0000
Subordinate resources:    AS: 263919
                          IP: 138.185.236.0/22
                          IP: 170.0.208.0/22
                          IP: 2804:27bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8c:54:5e:13:3f:7a:c0:52:71:96:fb:d8:96:2c:fb:8a:f6:38:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 23 02:58:41 2023 GMT
            Not After : Sep 21 03:03:41 2024 GMT
        Subject: CN=53DBD8550574BFB1767083FAD3A327CD5351750E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:e8:fb:52:61:e5:55:e1:1c:f2:6e:bf:55:
                    c7:db:b0:7b:40:ba:3a:70:4f:a4:3d:22:9f:d6:ef:
                    15:e5:d0:f8:2b:ce:23:0b:0b:a7:db:25:d9:2e:8d:
                    48:5e:c7:78:d4:20:a1:69:78:a3:9e:b1:78:86:b1:
                    93:4c:f2:30:80:11:10:93:f0:52:0b:ed:91:9f:c2:
                    0f:c4:bd:7f:c6:15:ef:6e:4e:83:eb:02:3d:75:40:
                    47:cf:53:9e:56:47:f8:50:a8:55:ee:e3:2c:a3:08:
                    8b:e9:44:78:ef:e2:72:54:f4:73:06:fd:79:54:d5:
                    0c:12:26:3f:2d:f4:a8:3c:86:a9:68:3c:a4:a3:e3:
                    0a:d3:68:bc:d8:c2:b1:ca:1d:65:14:77:dc:df:87:
                    7f:4e:a8:58:b6:12:2c:ff:4c:8e:d1:0d:a2:c9:1e:
                    4e:26:62:51:21:79:ac:97:a8:a0:5e:35:13:ef:ca:
                    d4:fd:ec:42:b5:67:dc:5d:b7:6d:50:be:c6:06:fa:
                    78:f6:76:80:45:15:55:56:ae:a7:9e:9c:5b:98:f6:
                    4c:09:50:bb:89:c0:2c:49:0a:2d:bf:13:9b:a4:9a:
                    37:39:b6:f4:e2:da:f2:a8:eb:0a:c7:c0:19:02:f5:
                    1f:fc:c2:43:74:c8:44:a0:39:c4:76:bb:55:b7:25:
                    2f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:DB:D8:55:05:74:BF:B1:76:70:83:FA:D3:A3:27:CD:53:51:75:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/53DBD8550574BFB1767083FAD3A327CD5351750E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.236.0/22
                  170.0.208.0/22
                IPv6:
                  2804:27bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263919

    Signature Algorithm: sha256WithRSAEncryption
         82:ef:4d:7e:50:01:67:00:e9:d4:b3:97:01:0d:95:49:5f:dd:
         92:bc:d4:72:d5:c9:fd:b0:53:1c:76:21:29:c7:3c:fb:ca:72:
         8c:13:91:2d:73:f5:22:3f:55:0a:63:42:3b:f7:82:0d:2b:cc:
         f1:b7:2a:fa:59:4e:4f:af:b9:5a:63:e2:06:42:7a:26:66:6b:
         89:63:19:0e:da:01:84:ce:0a:19:c6:15:41:86:ac:7c:66:62:
         57:cc:5f:cc:dd:54:76:08:09:2a:be:30:9d:f7:38:74:ca:4d:
         31:af:85:a4:93:a2:a5:56:0a:6a:93:46:d4:a1:69:aa:bd:bf:
         76:6d:fc:14:23:37:ff:cb:c1:e1:c8:99:a8:32:0c:57:5a:6d:
         46:d5:3f:c6:76:2e:f6:35:d0:70:0a:d4:b5:22:58:c3:78:b4:
         7c:7f:ce:48:34:84:6e:3c:56:98:e6:00:5c:e4:8d:a9:df:c3:
         28:ee:bc:48:65:6f:94:04:13:08:87:1a:e3:7a:06:12:4d:40:
         0d:eb:3b:ba:e5:00:f0:ca:17:e8:13:b3:33:30:87:b7:43:ad:
         c5:03:5d:e9:e0:d9:80:d6:27:c8:f2:58:f9:a9:22:4e:fe:05:
         b5:bf:62:ff:01:40:85:17:a8:62:66:6a:58:85:da:85:de:f4:
         8b:e3:6a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----