Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.cer
File:                     580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.cer (raw, json)
Hash identifier:          KZykInowHnb1l6yXa3gnSSMpPviARPNRVcbVnerqQnc=
Subject key identifier:   58:0A:F0:46:1B:33:6C:9A:8C:2D:F4:7A:3B:A8:1F:DE:F5:4D:80:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5194815DA176C2C42304B8FF5EB51545EE86EE26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 17:15:06 +0000
Certificate not after:    Tue 27 Aug 2024 17:20:06 +0000
Subordinate resources:    AS: 270725
                          IP: 189.51.40.0/22
                          IP: 2804:7068::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:94:81:5d:a1:76:c2:c4:23:04:b8:ff:5e:b5:15:45:ee:86:ee:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 29 17:15:06 2023 GMT
            Not After : Aug 27 17:20:06 2024 GMT
        Subject: CN=580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:99:64:75:91:31:be:65:fe:80:8a:26:44:0d:
                    25:9a:5d:1e:0d:16:a2:9a:05:23:8a:4e:61:84:ae:
                    20:3e:c8:5c:9b:d6:e3:76:6f:e7:85:44:8a:e0:ea:
                    85:50:0c:bd:3d:b6:9d:32:4b:0f:e0:78:86:45:d6:
                    3d:02:c4:55:70:e7:94:70:83:9f:2e:de:c8:d5:f3:
                    94:84:21:f0:19:8f:69:63:28:cd:5e:e2:9d:e1:20:
                    28:dc:e5:99:78:df:84:ec:00:aa:76:fa:cf:ca:4d:
                    3c:a0:43:fb:59:3b:80:fe:c1:63:e7:43:79:9e:72:
                    08:c1:96:a9:02:ed:4e:1f:fe:fb:44:9f:11:2e:65:
                    46:9c:69:f9:0d:52:c7:98:19:7f:f6:1e:76:fa:32:
                    91:6a:a4:0b:c0:fa:ae:5c:13:df:10:e7:18:ef:e6:
                    cc:16:8a:ed:3d:3d:53:9b:b9:b5:a5:b2:c3:0d:41:
                    6b:a8:52:13:cc:32:8b:00:a0:b9:ad:9f:9a:5b:fe:
                    5c:d2:9d:53:53:6f:5d:fc:60:60:84:fd:74:a5:02:
                    55:5b:d9:26:b1:cd:fb:29:c7:d8:62:6d:ec:1a:b7:
                    05:ae:ff:28:f6:b7:12:30:db:ef:31:d2:4b:6e:06:
                    cb:69:16:75:a9:0a:75:ae:91:2f:86:35:fa:5f:3a:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:0A:F0:46:1B:33:6C:9A:8C:2D:F4:7A:3B:A8:1F:DE:F5:4D:80:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.40.0/22
                IPv6:
                  2804:7068::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270725

    Signature Algorithm: sha256WithRSAEncryption
         6c:36:e6:f4:5f:14:77:40:04:4d:d1:48:55:1e:ef:66:83:89:
         27:8b:f8:2d:87:e5:e0:db:03:21:d1:c9:20:e0:8c:b1:cd:ba:
         2e:b2:3c:69:36:8d:ee:81:eb:f4:f0:27:cb:25:55:54:8f:f2:
         ec:18:a3:f6:25:ba:c1:ea:60:f7:b3:25:3b:78:50:24:1b:31:
         11:7c:47:56:a7:00:38:b6:52:89:e7:54:ac:00:07:b8:9a:ce:
         f5:99:48:23:69:0f:95:16:d3:e5:5e:46:39:03:e4:65:d0:c3:
         ae:ae:f0:09:8f:2a:2d:33:1c:33:ad:14:58:91:a1:1d:c9:7b:
         20:44:87:f5:e4:29:77:4c:f0:7d:13:04:f9:50:f7:95:60:24:
         fc:39:f9:2d:93:bc:d3:9a:d5:d7:2c:3a:64:1d:d8:17:d2:6c:
         62:17:f4:1c:6c:e7:30:6c:5f:8e:87:a4:92:a1:14:bc:d6:f7:
         bf:1b:a7:87:3e:79:6a:f1:6a:ea:7a:f4:ad:a7:22:7e:1f:b0:
         08:31:71:44:51:30:f1:e7:dd:f1:f2:a4:07:d8:14:48:2f:b2:
         12:86:24:43:ac:17:ac:fb:24:6d:d8:c1:7e:88:8d:1c:fe:55:
         33:04:79:39:13:94:fb:00:2c:f1:4a:a0:97:e3:03:b4:4c:74:
         0b:62:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org