Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F153A07A7EFD17B6BA606CA309C9575303F9D421.cer
File:                     F153A07A7EFD17B6BA606CA309C9575303F9D421.cer (raw, json)
Hash identifier:          HP8nopCLNsuFDfeFTKDfWGva15RPSONJ6g9UQAD2qX4=
Subject key identifier:   F1:53:A0:7A:7E:FD:17:B6:BA:60:6C:A3:09:C9:57:53:03:F9:D4:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67E006ACC7F5A86F5AF34C7261CF63B4636A0381
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/F153A07A7EFD17B6BA606CA309C9575303F9D421.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 23:03:48 +0000
Certificate not after:    Thu 23 May 2024 23:08:48 +0000
Subordinate resources:    AS: 264285
                          IP: 138.121.56.0/22
                          IP: 2804:2584::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e0:06:ac:c7:f5:a8:6f:5a:f3:4c:72:61:cf:63:b4:63:6a:03:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 23:03:48 2023 GMT
            Not After : May 23 23:08:48 2024 GMT
        Subject: CN=F153A07A7EFD17B6BA606CA309C9575303F9D421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:00:5d:83:e9:df:5f:9c:b3:0b:57:a2:11:c4:
                    70:c3:2b:71:d1:80:5a:f8:2f:62:85:fd:15:8e:75:
                    bf:16:f3:2a:2b:86:97:4b:a3:4f:f3:6c:27:dc:2e:
                    c6:72:f9:e0:f9:19:5c:d9:4a:92:2e:54:51:48:00:
                    d5:da:a5:25:a6:ff:c8:04:4c:d6:0b:b4:7f:3a:8c:
                    58:d7:32:4b:fb:75:c8:f0:a2:ba:5f:76:ef:7a:32:
                    22:c4:cf:9a:1e:57:24:b6:34:5a:a8:dd:c8:8c:1e:
                    e2:13:cc:24:55:39:df:f7:8d:42:66:45:ed:ac:e7:
                    dd:5e:ef:1f:69:1e:e7:6f:ce:9a:c6:44:e1:b6:88:
                    3d:75:9c:11:c5:6f:99:23:ee:a6:c9:55:2b:f1:90:
                    bc:03:8d:e2:f9:b8:46:d1:28:71:24:38:87:44:3a:
                    dd:70:13:3a:15:28:72:6c:dd:d6:e5:4e:65:1d:55:
                    86:7e:02:44:74:d0:70:d7:b8:a1:79:3d:0b:55:34:
                    a5:15:a1:e8:39:3e:2d:d6:af:bc:51:d1:1e:23:c1:
                    f7:96:25:91:62:d0:c9:60:c2:f4:22:50:38:f6:68:
                    36:ad:3c:0f:09:db:bb:ad:1f:f9:76:f5:cf:b2:99:
                    34:2d:e2:83:bd:5c:86:b2:93:b1:b4:cc:12:74:44:
                    10:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:53:A0:7A:7E:FD:17:B6:BA:60:6C:A3:09:C9:57:53:03:F9:D4:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/F153A07A7EFD17B6BA606CA309C9575303F9D421.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.56.0/22
                IPv6:
                  2804:2584::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264285

    Signature Algorithm: sha256WithRSAEncryption
         15:e0:94:24:2a:b6:34:68:75:10:f3:d2:8b:b9:8b:d8:63:30:
         18:0a:a9:f7:f0:7d:f2:a0:a0:15:41:73:8a:29:a4:e6:a0:78:
         8f:10:b9:1f:e7:8a:94:61:0c:f7:e2:fa:c9:ab:02:bb:4b:67:
         37:0e:18:36:16:5c:7c:bf:4c:eb:3d:73:5f:4c:0f:6f:4f:aa:
         42:45:e5:a3:26:03:4c:5b:70:1b:2d:22:96:34:de:54:31:e3:
         d3:ba:63:a6:c6:d9:ed:58:94:ca:7b:20:fc:70:35:0a:35:5d:
         36:9d:8e:5f:bb:c5:7c:62:47:79:d1:96:2b:58:da:a8:87:ec:
         c6:13:75:2d:38:9e:96:48:f5:53:76:63:35:e2:6c:3f:76:bf:
         6f:f5:a0:c9:4a:6f:3a:69:a6:5a:e6:36:df:6e:a9:49:68:4b:
         e2:6f:fc:29:4e:23:93:93:b4:62:ab:ad:99:54:85:d8:4d:69:
         2f:81:7e:2f:58:6a:0a:47:2a:a7:71:94:e7:cc:cd:5f:87:98:
         d2:76:9c:5c:50:75:56:65:d9:05:31:92:0f:b8:dc:33:49:6d:
         fb:fc:8f:a7:87:67:b2:7f:9f:7a:a2:f6:14:6d:60:5a:4a:83:
         72:cc:b4:d1:9a:41:f6:d5:71:d3:1f:46:99:19:d4:a0:73:4a:
         d9:e7:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org