Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/54D7204FD91ECE7C2602426B24DF0B354DC87328.cer
File:                     54D7204FD91ECE7C2602426B24DF0B354DC87328.cer (raw, json)
Hash identifier:          tlKs5JobYSHYq+vDPlvPDgCKhdvFZAjb7RiX3rTo2l8=
Subject key identifier:   54:D7:20:4F:D9:1E:CE:7C:26:02:42:6B:24:DF:0B:35:4D:C8:73:28
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D2150B84DFD7EE4CCFA5794CD6661DB5647B3D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/54D7204FD91ECE7C2602426B24DF0B354DC87328.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Sep 2022 13:34:48 +0000
Certificate not after:    Tue 12 Sep 2023 13:39:48 +0000
Subordinate resources:    AS: 28225
                          IP: 189.126.64.0/20
                          IP: 2804:620c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:21:50:b8:4d:fd:7e:e4:cc:fa:57:94:cd:66:61:db:56:47:b3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 13 13:34:48 2022 GMT
            Not After : Sep 12 13:39:48 2023 GMT
        Subject: CN=54D7204FD91ECE7C2602426B24DF0B354DC87328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:15:b0:ed:f0:77:4b:5e:ac:aa:4e:55:21:
                    e4:f8:85:31:b1:a9:81:02:92:74:e1:25:94:08:86:
                    6a:cb:15:6c:e3:74:89:82:ac:09:47:f2:3a:45:23:
                    4e:46:a8:39:58:aa:77:23:ab:47:aa:87:05:0f:4d:
                    de:c7:1c:17:c8:78:d7:62:ee:97:e3:f9:60:22:54:
                    ab:f9:7c:6c:31:aa:9a:b8:f6:c9:a8:e5:01:b0:c7:
                    3d:21:fe:a8:e1:b7:76:2f:e9:27:b4:c9:4f:c3:59:
                    7d:d6:e6:45:02:77:f1:78:3c:a6:d5:01:d5:ef:6f:
                    35:14:5a:e4:78:1b:59:a3:99:c0:e4:39:dc:fd:83:
                    2d:80:25:39:bf:ac:a8:c2:16:c1:40:06:c5:53:c4:
                    ea:63:db:4b:26:f6:e8:c3:ea:69:2a:6c:91:6c:61:
                    d8:c0:40:45:2f:15:7c:33:ce:57:fa:f2:9d:6a:00:
                    eb:4f:f5:28:58:c9:23:cb:ac:53:d6:bf:da:aa:80:
                    e3:8d:da:0f:f8:85:0a:94:48:35:ce:9b:e1:41:bb:
                    44:2c:43:11:f6:20:34:a9:f7:01:35:52:b2:c3:4f:
                    1d:e1:c4:e2:5f:31:0c:25:9e:bd:aa:70:33:1f:89:
                    bb:77:03:3f:df:73:5c:72:3e:05:3f:12:0b:4b:03:
                    96:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:D7:20:4F:D9:1E:CE:7C:26:02:42:6B:24:DF:0B:35:4D:C8:73:28
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/54D7204FD91ECE7C2602426B24DF0B354DC87328.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.64.0/20
                IPv6:
                  2804:620c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28225

    Signature Algorithm: sha256WithRSAEncryption
         79:e3:68:b4:a9:5e:17:25:b8:c0:24:bb:96:a1:26:aa:a3:60:
         6e:3d:d2:94:61:b4:02:87:2b:ea:61:7a:17:78:58:a0:4f:96:
         75:35:2c:8a:dc:b1:fd:07:31:6a:ad:a0:b6:81:83:a6:26:f6:
         6c:f6:99:d2:dd:04:f4:fd:08:94:76:51:db:8f:f9:b5:fb:b6:
         2f:89:8d:22:f9:f3:0e:b0:b8:28:fb:99:ff:cc:8d:bc:a7:4e:
         6f:18:b5:35:2e:6b:98:da:3d:d7:9c:94:8a:38:b2:ff:99:3b:
         1e:90:5a:66:93:8e:48:45:20:f1:7d:ee:d5:ec:d7:59:7b:b0:
         0f:89:8b:35:03:bc:2f:e6:4e:a7:e2:6f:6c:4e:c5:24:7a:91:
         ba:17:9f:ee:71:4c:da:7e:50:00:89:9c:2c:45:08:5f:0a:57:
         04:ab:2d:c1:7d:f2:b3:4b:32:4a:cb:8d:53:ce:ec:ea:b9:f5:
         94:2d:77:95:42:62:a5:9f:ce:a0:0a:df:07:55:c9:66:a0:32:
         17:42:3e:11:fd:5b:90:c2:c8:63:41:f6:bb:35:b3:a0:6c:a6:
         fd:7f:e2:47:76:e5:99:9f:84:b3:59:08:78:43:e9:68:a3:a8:
         1b:6a:86:74:52:f5:59:99:fe:e2:00:b5:ee:43:2f:50:83:82:
         9a:58:ac:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org