Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A553F91BEB54E64563C819AD76F33C2D43959733.cer
File:                     A553F91BEB54E64563C819AD76F33C2D43959733.cer (raw, json)
Hash identifier:          T9cqoznvb48BSk8V9Pq4OMkVb9liH8/PALLnMoUw0uc=
Subject key identifier:   A5:53:F9:1B:EB:54:E6:45:63:C8:19:AD:76:F3:3C:2D:43:95:97:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5790E594DA753C4C968BE76B36461C6E920DF2F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/A553F91BEB54E64563C819AD76F33C2D43959733.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Aug 2022 23:50:44 +0000
Certificate not after:    Thu 10 Aug 2023 23:55:44 +0000
Subordinate resources:    AS: 268940
                          IP: 189.39.176.0/22
                          IP: 2804:5cf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:90:e5:94:da:75:3c:4c:96:8b:e7:6b:36:46:1c:6e:92:0d:f2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 11 23:50:44 2022 GMT
            Not After : Aug 10 23:55:44 2023 GMT
        Subject: CN=A553F91BEB54E64563C819AD76F33C2D43959733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:59:a6:db:7b:c0:2c:53:4d:ea:4f:fe:ef:
                    96:8d:a9:81:53:ac:94:1b:90:80:72:bf:7b:f1:32:
                    e9:66:3f:ee:2f:fd:f1:de:24:cc:e4:64:f9:99:f4:
                    b0:11:b0:23:56:a9:73:51:88:5e:a1:0c:f5:61:80:
                    b5:e2:27:19:a4:e1:89:f1:be:74:55:f5:97:08:4b:
                    34:20:57:6b:7a:ee:d5:cc:60:8d:2a:5d:b0:ae:4d:
                    c3:7b:5c:14:dc:12:77:b3:78:40:4f:7b:30:8d:98:
                    90:09:b3:c3:06:bb:93:be:0f:3b:04:fe:24:be:6c:
                    c9:29:a3:57:da:77:42:eb:34:32:ee:1c:80:62:10:
                    3a:18:22:54:09:27:10:55:47:01:b5:67:4f:a8:fe:
                    57:6a:3c:9a:28:c8:57:82:4d:2e:74:dc:94:67:ec:
                    5c:29:54:cb:36:6f:0f:38:ba:fb:a2:f1:e3:fc:07:
                    b3:c4:02:b3:3f:6d:d4:b6:5d:dd:a3:8d:5e:ad:64:
                    89:b2:20:3b:c8:71:1c:92:75:60:67:d2:43:78:41:
                    8c:08:97:fc:8f:a9:19:ac:a7:d2:20:e4:ac:11:5a:
                    23:f4:46:64:72:dc:b0:28:1d:c6:4d:75:a5:ab:a9:
                    d8:ab:da:fc:32:50:51:8a:bd:63:cd:a5:3a:db:10:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:53:F9:1B:EB:54:E6:45:63:C8:19:AD:76:F3:3C:2D:43:95:97:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/A553F91BEB54E64563C819AD76F33C2D43959733.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.176.0/22
                IPv6:
                  2804:5cf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268940

    Signature Algorithm: sha256WithRSAEncryption
         2c:44:f2:3a:2e:d5:0a:e1:d8:44:8f:8a:5f:cb:89:e4:f7:da:
         f6:64:a8:cc:8c:62:9f:bc:85:63:aa:50:81:cd:fb:5e:e6:34:
         97:80:db:1c:7d:e7:d9:fd:05:db:a7:7c:12:0e:ca:52:2a:3e:
         df:73:c3:cb:21:0f:32:65:e2:bf:ad:5e:1e:a2:91:68:42:e8:
         66:77:89:aa:5e:0c:20:0d:53:c4:2b:ba:2a:1f:dc:97:3b:1e:
         40:aa:11:d9:72:0f:32:c5:d2:3c:59:12:c1:df:fb:98:9c:06:
         1b:ac:5c:a5:45:8a:58:6c:15:24:b7:2b:ea:f6:c4:46:c7:80:
         4a:8d:51:10:f3:f5:b3:11:fb:8e:8b:40:0e:28:22:ea:50:c8:
         a7:85:8b:25:3d:22:7d:b3:43:e0:53:47:2e:c8:a2:b2:30:f4:
         06:4a:0f:83:4a:c6:2b:b9:ed:f7:71:d7:30:1d:c3:f3:74:da:
         2f:cc:cc:29:a8:cd:34:5b:59:8d:e9:94:77:f1:f4:c1:31:57:
         72:b0:2e:9b:a8:cf:3b:bb:cf:3f:dd:eb:d2:4a:52:1e:5f:22:
         73:13:3c:f2:3d:f3:07:dd:5a:7d:08:21:ae:02:f2:6a:df:01:
         1b:50:68:5f:11:a7:9e:08:f7:57:6f:fe:a6:12:f5:2e:9d:8b:
         3e:78:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org