Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/53EC7FA5E8E3C4096D5620ADF56F229C7C746DBF.cer
File:                     53EC7FA5E8E3C4096D5620ADF56F229C7C746DBF.cer (raw, json)
Hash identifier:          D1bavnFyb+/i1TQToTZ5JUsINPAqx2PLCvnwjQP/3EQ=
Subject key identifier:   53:EC:7F:A5:E8:E3:C4:09:6D:56:20:AD:F5:6F:22:9C:7C:74:6D:BF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E6A57292D579A53A5C17E0B0CD19E64F15E3C24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/0/53EC7FA5E8E3C4096D5620ADF56F229C7C746DBF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 17:48:18 +0000
Certificate not after:    Mon 16 Sep 2024 17:53:18 +0000
Subordinate resources:    AS: 271023
                          IP: 191.37.168.0/22
                          IP: 2804:7518::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6a:57:29:2d:57:9a:53:a5:c1:7e:0b:0c:d1:9e:64:f1:5e:3c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 17:48:18 2023 GMT
            Not After : Sep 16 17:53:18 2024 GMT
        Subject: CN=53EC7FA5E8E3C4096D5620ADF56F229C7C746DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6a:98:a2:eb:81:f7:09:d9:db:49:24:f7:8e:
                    2c:96:4f:c7:bc:83:b8:06:b0:bb:57:02:4b:74:04:
                    ea:61:74:d8:b1:8d:d5:3a:71:4b:cd:f2:af:f0:fc:
                    c9:e3:eb:15:e8:c1:08:c2:47:0b:94:be:86:0b:60:
                    10:a2:2e:9a:5c:4a:f7:ec:88:dc:80:cf:ae:34:ce:
                    2a:79:05:37:be:67:14:cb:6e:ed:0d:78:1c:22:04:
                    76:9d:be:83:d9:dc:ce:73:a5:35:77:20:a7:3a:78:
                    13:39:86:78:a4:96:d5:12:3e:89:a9:ac:1f:0f:b4:
                    b2:f4:e6:df:dd:f5:b5:9e:c0:59:00:6a:3c:30:c9:
                    88:b7:92:4f:7d:cf:ff:57:80:4f:db:96:73:97:40:
                    8e:fc:0a:6f:b9:cb:96:44:21:33:8d:6b:5e:51:0b:
                    58:37:3f:50:f5:55:35:cb:d5:8f:77:df:67:f0:00:
                    27:06:45:13:33:e8:c4:62:3a:92:ba:67:c7:b0:b0:
                    5f:93:a7:0e:6f:88:89:2c:89:15:8f:8b:92:3e:96:
                    22:f3:ef:25:17:cf:29:cf:c2:f8:1d:11:7a:f0:7a:
                    64:4f:5d:9e:79:f3:57:c2:e4:2e:c0:d2:9a:39:5f:
                    fc:ff:df:51:56:e6:8f:f3:bb:ea:d1:d2:70:d0:09:
                    76:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:EC:7F:A5:E8:E3:C4:09:6D:56:20:AD:F5:6F:22:9C:7C:74:6D:BF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/0/53EC7FA5E8E3C4096D5620ADF56F229C7C746DBF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.168.0/22
                IPv6:
                  2804:7518::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271023

    Signature Algorithm: sha256WithRSAEncryption
         9a:96:7d:02:7f:c3:0c:5a:b9:e3:93:66:24:c9:46:eb:3d:4f:
         0e:08:61:57:cf:1e:21:4e:77:1a:b0:a2:5c:87:0a:60:de:f5:
         15:fb:b3:d4:7c:f6:8d:a3:27:15:2a:60:2a:4c:fc:1d:fc:be:
         f3:27:29:22:65:54:10:3a:33:59:95:d3:ce:7b:24:44:cf:63:
         25:09:ae:67:62:90:cb:95:00:a5:3e:8a:dd:dc:01:f7:5c:30:
         5f:cc:7b:f1:5e:e9:e1:72:3e:51:60:0d:45:62:a3:9c:54:36:
         c0:f6:5f:e9:43:fc:86:ec:2e:d5:82:4c:12:3d:25:53:ce:92:
         83:7a:ea:bd:b1:52:7a:ad:ad:51:37:44:39:a4:a7:91:ca:a4:
         d5:8b:a3:e2:1c:ea:14:9f:5f:10:f6:fc:5c:f7:bb:49:3f:7e:
         9c:ec:1c:bb:45:e1:62:9b:b9:dd:4e:20:f6:9d:89:28:b0:db:
         9e:7b:67:cc:b1:7e:f5:16:a9:8b:26:db:7a:fa:b5:98:ee:6c:
         68:58:f9:b6:53:9a:49:ed:14:18:d1:79:40:64:81:8d:fc:f7:
         5c:30:27:69:61:00:9c:ea:29:09:d6:7e:11:15:53:45:59:4c:
         ae:8d:b3:2c:4a:88:1e:7e:86:d1:bb:47:e6:2e:41:0a:42:2e:
         9c:29:68:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org