Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.cer
File:                     E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.cer (raw, json)
Hash identifier:          PuutUgSc/IrTr9HFnUxwxcNuv+8/LHg5gqnjcW/i1WM=
Subject key identifier:   E5:3B:5D:AC:54:E1:A9:74:B5:77:13:FD:FF:FE:CC:15:53:BC:3C:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       24937F740237CEA6B98BFA0D2C5E75D43D88717C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 21:09:08 +0000
Certificate not after:    Tue 31 Dec 2024 21:14:08 +0000
Subordinate resources:    AS: 266029
                          IP: 170.246.60.0/22
                          IP: 2804:3968::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:93:7f:74:02:37:ce:a6:b9:8b:fa:0d:2c:5e:75:d4:3d:88:71:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 21:09:08 2024 GMT
            Not After : Dec 31 21:14:08 2024 GMT
        Subject: CN=E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:57:8c:1a:30:01:14:9a:ee:f7:35:f6:11:
                    68:e1:07:76:cc:d4:67:0d:c4:b5:db:5e:f5:2d:28:
                    0d:c6:ed:63:4f:4b:91:97:a5:53:da:31:38:f9:6f:
                    c0:43:4a:c8:52:b2:51:4b:83:0f:67:fd:c3:62:55:
                    25:b1:02:cf:f3:74:de:5c:77:49:43:93:53:3b:9e:
                    f8:17:f2:a0:b4:40:5c:6d:5b:b6:47:67:6a:3e:38:
                    76:21:80:1d:1f:eb:82:ff:ac:d9:f0:84:b6:36:f5:
                    cd:0a:dc:4a:08:33:5a:93:ce:55:81:30:8e:15:17:
                    a4:57:fd:fb:91:67:e1:a4:d2:67:bc:bd:c6:00:88:
                    d2:32:c7:48:33:e2:8a:97:cc:34:fe:30:9d:ec:f9:
                    e7:cf:9a:39:26:d5:cc:a8:22:d1:8c:19:a2:29:17:
                    ae:33:38:83:4a:23:fc:02:d3:91:31:2d:ea:49:a2:
                    21:65:e6:1a:d7:93:18:c0:c6:95:bf:37:ea:ed:90:
                    a4:32:89:cd:f3:1b:ad:1f:e6:3d:74:2e:51:c3:5b:
                    16:a2:3b:8b:56:6f:84:bd:7c:f5:a1:e9:2a:4e:90:
                    d2:1a:96:38:f6:c4:21:9f:76:1a:3e:e0:ca:f4:45:
                    01:7a:3f:1c:a1:74:3c:b0:f9:5b:eb:41:80:f5:38:
                    c1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:3B:5D:AC:54:E1:A9:74:B5:77:13:FD:FF:FE:CC:15:53:BC:3C:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.60.0/22
                IPv6:
                  2804:3968::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266029

    Signature Algorithm: sha256WithRSAEncryption
         06:49:3b:c5:75:2c:75:e1:83:d4:44:72:af:dc:89:e0:46:c0:
         2b:71:4d:4a:d2:db:0c:2c:94:ae:77:33:a1:6a:a9:a8:cf:e8:
         be:ac:a9:71:56:bd:b4:dc:e6:fc:af:e8:7e:72:dc:4d:e8:06:
         fa:55:8f:8c:12:51:e1:20:b5:6a:b8:97:44:51:9d:35:2e:ef:
         bd:80:13:7a:de:97:61:ed:73:9c:34:1b:e9:b8:34:6b:2c:11:
         1d:fe:cb:65:2c:fb:21:d9:3a:30:dc:72:cb:d8:ce:8c:19:02:
         f1:87:46:d3:9a:c8:fa:71:a3:c3:7d:af:4a:86:22:08:72:52:
         0b:97:54:61:05:d6:70:26:f8:79:63:5c:6c:50:16:07:21:c9:
         73:cb:38:48:56:5b:0f:e4:44:55:29:45:cc:ee:8a:ff:6d:04:
         cd:29:c1:5c:53:f7:d4:c6:d7:cc:20:6e:27:c2:b6:27:6e:98:
         5c:82:ce:63:45:a6:52:f9:9e:65:3b:47:28:7b:4c:67:4d:a8:
         66:46:56:98:cf:70:d4:ed:75:f9:75:82:94:4d:fb:5a:9d:fb:
         bf:ef:48:b2:a4:ae:5d:86:64:ca:36:4b:0c:b7:67:ec:16:87:
         bb:88:e5:7d:97:da:0a:38:68:e6:22:6c:18:0b:16:b0:a3:a3:
         25:56:f5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org