Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0589A5E4ABBC18C9A6337305F9D2F438BAE2806C.cer
File:                     0589A5E4ABBC18C9A6337305F9D2F438BAE2806C.cer (raw, json)
Hash identifier:          +2a+/HDiFJsakZpU10xeo+m0MIzZAZtljqn88iYQprI=
Subject key identifier:   05:89:A5:E4:AB:BC:18:C9:A6:33:73:05:F9:D2:F4:38:BA:E2:80:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       15B448BA79A3D33AC4A03C16E3F2BE75E9417D1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/0589A5E4ABBC18C9A6337305F9D2F438BAE2806C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Aug 2023 16:18:54 +0000
Certificate not after:    Fri 09 Aug 2024 16:23:54 +0000
Subordinate resources:    AS: 53132
                          IP: 177.125.144.0/21
                          IP: 179.107.112.0/20
                          IP: 186.192.32.0/20
                          IP: 2804:1668::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b4:48:ba:79:a3:d3:3a:c4:a0:3c:16:e3:f2:be:75:e9:41:7d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 11 16:18:54 2023 GMT
            Not After : Aug  9 16:23:54 2024 GMT
        Subject: CN=0589A5E4ABBC18C9A6337305F9D2F438BAE2806C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:a6:20:95:c0:dd:15:82:55:01:4a:5e:b0:
                    35:3b:63:41:92:aa:83:b8:d3:f1:83:f7:bc:29:a2:
                    81:48:e5:be:69:63:4c:2e:20:9a:30:b2:4a:c2:01:
                    08:03:30:30:00:36:71:a6:d1:5a:d1:6b:4b:58:9a:
                    a7:18:a7:b8:28:fa:48:98:9a:f8:ee:dc:b0:53:ae:
                    cd:2d:b7:ea:9b:e0:cc:6f:1a:9c:ba:2c:b2:21:7c:
                    4a:8f:98:6d:66:c4:84:f6:e1:6f:0e:5a:83:bf:dd:
                    5a:68:7e:6f:c5:c4:fe:e8:a5:48:b6:64:37:a5:e1:
                    b1:45:f9:e7:cf:4a:4a:18:f8:6b:54:46:7c:e7:da:
                    e0:8d:7d:31:7a:5f:96:f7:16:e1:a3:b1:44:a7:cf:
                    25:46:97:72:e5:57:30:ed:a0:17:df:51:1c:a0:6d:
                    02:be:48:ab:a4:a9:2d:65:7f:cb:1d:c9:d5:33:eb:
                    14:ad:d4:60:91:1a:66:6c:d4:0e:5d:79:4f:6b:03:
                    b9:e1:89:cf:f3:14:b3:50:b9:3d:7a:54:ce:7b:97:
                    60:98:83:c7:40:04:a0:55:56:40:7a:d2:f3:c2:84:
                    18:22:c8:a2:c6:bb:0f:2e:3f:72:6b:34:60:56:e2:
                    af:f4:7b:02:ae:58:8f:62:b5:49:9d:a5:8a:c9:a1:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:89:A5:E4:AB:BC:18:C9:A6:33:73:05:F9:D2:F4:38:BA:E2:80:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/0589A5E4ABBC18C9A6337305F9D2F438BAE2806C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.144.0/21
                  179.107.112.0/20
                  186.192.32.0/20
                IPv6:
                  2804:1668::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53132

    Signature Algorithm: sha256WithRSAEncryption
         00:69:88:e1:ae:1d:a3:08:fa:cc:41:69:ba:86:a3:34:77:c4:
         e3:3b:3a:d5:e3:61:52:c3:fd:ab:f7:87:f2:fb:b5:92:94:20:
         ec:5e:ab:a9:65:9c:1d:92:8a:79:2e:93:2c:77:ec:b5:c9:ea:
         82:df:9f:b6:a8:b8:04:7b:ee:ee:ca:96:a6:c5:ef:c0:da:2f:
         b2:ab:f5:d1:17:34:ac:63:66:9a:74:75:db:6e:52:72:85:69:
         0e:58:fa:70:77:f4:4e:15:be:fd:71:f8:bc:01:1a:d2:a6:2d:
         cf:4e:51:4d:4f:a4:8f:6e:e6:41:ea:13:42:d0:1b:e4:1d:b2:
         a3:a0:a8:73:c8:df:e4:eb:37:8e:b6:7e:b7:23:fc:8d:3e:71:
         06:76:bd:27:3e:0b:48:5c:e8:44:19:5a:49:9d:51:db:7f:0c:
         9b:18:3d:ce:5f:d5:39:48:7c:ec:47:44:f8:79:fa:bf:28:35:
         16:58:d4:9f:42:85:f3:80:45:d8:c1:1d:f1:44:b5:ca:a7:f8:
         87:03:e4:c5:88:66:e7:61:a9:9b:5c:e3:1e:f4:1b:b7:b1:e3:
         33:99:de:30:6c:14:56:84:ec:e7:f6:5d:36:9d:d3:13:46:7e:
         70:e2:42:07:2f:e8:73:61:f6:dc:36:ce:56:fc:f5:20:9b:12:
         1e:f3:9e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org