Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/158AEF27B3C63D34A7E29654EDFCAF891E750A77.cer
File:                     158AEF27B3C63D34A7E29654EDFCAF891E750A77.cer (raw, json)
Hash identifier:          64u1BpOmhTN44XU087GsB2CrbS62lIuwBG9wStP6TQs=
Subject key identifier:   15:8A:EF:27:B3:C6:3D:34:A7:E2:96:54:ED:FC:AF:89:1E:75:0A:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68A7794FBD8F05BD525C76A864E0A7AF43089979
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/158AEF27B3C63D34A7E29654EDFCAF891E750A77.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Aug 2023 03:30:37 +0000
Certificate not after:    Fri 02 Aug 2024 03:35:37 +0000
Subordinate resources:    AS: 270588
                          IP: 177.129.36.0/22
                          IP: 2804:6e50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a7:79:4f:bd:8f:05:bd:52:5c:76:a8:64:e0:a7:af:43:08:99:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  4 03:30:37 2023 GMT
            Not After : Aug  2 03:35:37 2024 GMT
        Subject: CN=158AEF27B3C63D34A7E29654EDFCAF891E750A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b1:19:d5:5f:41:8a:3c:c0:b7:1c:70:59:2d:
                    06:36:71:7a:e8:70:ec:5a:f1:51:14:ab:1d:6a:1f:
                    80:68:25:69:9e:95:eb:4a:53:70:4d:6e:ca:27:7d:
                    51:df:df:8d:4c:34:dc:f6:81:39:35:3c:6f:6f:f0:
                    63:8a:6d:71:d1:e1:07:52:6a:8c:d9:71:b4:46:83:
                    ce:f4:ae:90:14:c7:fb:48:91:9c:28:36:4e:ce:97:
                    ed:11:f8:d0:a5:db:bf:51:7b:de:19:53:5b:90:aa:
                    cc:2a:63:19:28:3c:92:15:82:b8:bf:8c:5d:a5:85:
                    2f:cf:18:16:7d:76:16:75:f2:a2:5d:8e:54:b7:70:
                    35:b8:7d:0f:ab:f6:17:89:09:66:29:0d:a1:60:81:
                    21:90:d9:c6:40:88:8e:a8:1b:cf:fc:2e:37:ff:d9:
                    ef:b8:7e:48:78:10:7f:79:15:2d:00:e5:64:da:54:
                    07:17:e1:28:e2:4d:f8:b5:ee:87:9d:be:7d:1b:9a:
                    48:38:f7:ed:c4:46:d4:99:e2:67:41:78:5e:ea:e6:
                    59:8d:17:c1:00:cf:f7:70:27:8d:eb:24:80:a2:76:
                    da:1a:1b:7c:6f:68:e3:3a:34:ba:f8:7b:1e:5e:6d:
                    34:09:e3:44:be:5d:2f:87:ad:c2:9b:95:93:02:53:
                    00:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:8A:EF:27:B3:C6:3D:34:A7:E2:96:54:ED:FC:AF:89:1E:75:0A:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/158AEF27B3C63D34A7E29654EDFCAF891E750A77.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.36.0/22
                IPv6:
                  2804:6e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270588

    Signature Algorithm: sha256WithRSAEncryption
         60:03:41:e2:fc:94:41:b6:b3:01:e6:7e:85:c2:b0:97:75:3e:
         a5:1c:cc:bc:af:d9:64:91:c7:64:ea:62:9e:0f:2c:ec:5b:b1:
         3f:8d:e8:02:74:2e:7d:ab:fd:34:24:91:85:36:10:2f:1d:1a:
         fc:e0:98:5d:9c:d3:e2:d4:25:f8:c2:b6:78:03:1d:83:19:98:
         b9:7f:9d:e2:0a:98:7f:62:e4:d5:8a:96:f3:bc:61:9b:cf:47:
         2b:78:1a:20:bd:42:82:26:77:35:bf:31:09:7a:c7:f9:02:fa:
         e9:97:65:04:c7:49:d6:93:76:0d:93:5d:a3:12:98:57:30:7b:
         bf:be:56:93:28:62:54:3e:3a:90:0d:50:94:07:9e:52:d5:73:
         ae:2b:c7:f7:c2:da:72:a6:a1:7d:c4:70:51:65:d7:01:f1:86:
         e5:39:98:5b:e7:07:b3:e9:4b:c9:8c:89:22:e8:e1:2c:6f:41:
         10:9a:9b:65:54:fd:29:e6:1e:43:41:2d:ad:66:94:5b:34:69:
         81:44:63:f3:47:d9:e9:d6:bf:1b:b2:f5:03:eb:3e:40:17:de:
         a5:4a:1a:ae:d4:5d:25:47:80:41:00:26:4e:9b:8a:2a:b6:5a:
         30:c5:86:a8:a0:86:3e:30:82:19:8e:e0:99:75:ad:3a:e8:e9:
         8b:0f:c4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org