Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/53FC1B105548B7D210AC403F9E9CDE8AEDB774E5.cer
File:                     53FC1B105548B7D210AC403F9E9CDE8AEDB774E5.cer (raw, json)
Hash identifier:          AKsvKqmx1zNOA/NA5GJN4M/fbhgui2BTxfJ28pgJ0dQ=
Subject key identifier:   53:FC:1B:10:55:48:B7:D2:10:AC:40:3F:9E:9C:DE:8A:ED:B7:74:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10B8C72F54B97187A0310DE64563D769A19F58EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/53FC1B105548B7D210AC403F9E9CDE8AEDB774E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 20:42:10 +0000
Certificate not after:    Mon 17 Mar 2025 20:47:10 +0000
Subordinate resources:    AS: 262789
                          IP: 177.221.120.0/21
                          IP: 186.233.128.0/21
                          IP: 2804:208::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b8:c7:2f:54:b9:71:87:a0:31:0d:e6:45:63:d7:69:a1:9f:58:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 20:42:10 2024 GMT
            Not After : Mar 17 20:47:10 2025 GMT
        Subject: CN=53FC1B105548B7D210AC403F9E9CDE8AEDB774E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:09:f9:03:11:7b:e7:86:8c:bf:bf:80:52:
                    1d:5d:47:3b:1e:7d:29:b7:54:0a:c4:13:ba:5b:bf:
                    28:bf:bf:fc:cb:db:10:84:52:05:8a:15:e5:ad:d2:
                    f2:c4:0b:1b:5e:3d:13:e7:3e:fb:bd:cd:73:be:59:
                    23:f9:81:dc:2f:63:53:b9:4b:f8:33:0c:53:29:6a:
                    f2:be:c6:44:8f:2e:4d:da:b0:65:7e:9f:aa:fd:45:
                    c9:74:14:c2:af:5d:91:c8:b2:5b:ae:40:5a:c2:74:
                    9b:ed:68:af:a4:74:66:7d:1b:83:17:09:3d:8f:d0:
                    3e:56:29:80:79:9e:fa:3b:96:82:b6:a8:7f:fc:07:
                    d4:7a:d9:97:6d:1b:fd:2e:28:51:c2:1c:52:25:a3:
                    f6:40:95:4c:1e:e7:d1:2a:3b:05:44:2d:b5:f2:d3:
                    bc:25:02:d6:ee:15:2d:1f:5e:85:c0:8f:3c:fe:d6:
                    b2:27:a1:d0:38:0e:20:b2:90:9b:ab:cb:a2:dd:0d:
                    84:a9:d7:29:5f:4b:98:4f:99:1e:32:da:aa:35:c8:
                    16:06:14:93:5d:d6:06:03:02:cf:93:18:20:29:3f:
                    7c:8b:ab:08:7c:a5:dc:ed:3c:43:91:e0:1f:50:f2:
                    05:ff:ea:b4:f4:76:2f:61:8f:bf:7c:11:97:5a:6b:
                    05:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:FC:1B:10:55:48:B7:D2:10:AC:40:3F:9E:9C:DE:8A:ED:B7:74:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/53FC1B105548B7D210AC403F9E9CDE8AEDB774E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.120.0/21
                  186.233.128.0/21
                IPv6:
                  2804:208::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262789

    Signature Algorithm: sha256WithRSAEncryption
         81:6d:32:8b:6a:4a:06:73:5b:b1:c4:f4:1e:66:9f:42:03:41:
         a6:17:ae:cb:fd:0c:36:04:ac:45:96:0c:70:8d:9c:36:66:91:
         32:d0:43:c3:40:03:6d:4b:9a:5d:4e:2b:0c:51:b4:cc:ab:3d:
         ee:88:45:85:a5:71:6d:c2:fb:00:dd:f9:58:50:51:ad:89:0f:
         5f:c0:e3:e8:c6:e8:a0:1a:48:fb:92:c7:23:0d:e8:bc:d2:51:
         8b:0a:c1:cc:c9:8c:5f:ad:7f:55:45:41:62:df:93:3b:ec:dc:
         0b:aa:a8:30:c3:69:65:a6:fb:9b:3f:e5:10:6e:e8:50:5d:f7:
         cc:ea:46:b5:2b:d4:47:60:0e:6d:42:ab:c6:c2:42:04:9c:d4:
         d0:79:81:d9:2f:44:50:2a:1e:9f:25:3f:21:ca:82:f2:50:3b:
         05:e2:e6:41:7d:33:d4:c2:47:81:83:29:9e:06:83:28:d2:50:
         7f:18:f0:f6:30:66:75:c2:fe:6e:50:d2:1f:28:67:c6:2a:0c:
         09:34:5a:a9:9e:69:b7:77:d6:9d:d1:3d:a3:00:1b:0e:ef:fc:
         04:3b:75:d5:9f:54:96:63:5a:b3:b5:6d:a3:f0:38:36:a4:35:
         c8:e3:21:b0:e3:14:67:ce:e3:2f:42:24:b9:c6:ae:ad:f8:24:
         77:32:2d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----