Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/587A7060AE39D3889856189D6E56ABF59427459F.cer
File:                     587A7060AE39D3889856189D6E56ABF59427459F.cer (raw, json)
Hash identifier:          QO7RWkvjHIcKTT9gFTdakkZgyBewkYYUDNrZ+xPvGAY=
Subject key identifier:   58:7A:70:60:AE:39:D3:88:98:56:18:9D:6E:56:AB:F5:94:27:45:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       63B213279F6532CFD04F5773107A65CA5ECDD420
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/587A7060AE39D3889856189D6E56ABF59427459F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 14:42:30 +0000
Certificate not after:    Tue 28 May 2024 14:47:30 +0000
Subordinate resources:    AS: 262851
                          IP: 177.10.144.0/21
                          IP: 177.86.144.0/21
                          IP: 191.240.200.0/21
                          IP: 191.242.112.0/20
                          IP: 2804:1270::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b2:13:27:9f:65:32:cf:d0:4f:57:73:10:7a:65:ca:5e:cd:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 14:42:30 2023 GMT
            Not After : May 28 14:47:30 2024 GMT
        Subject: CN=587A7060AE39D3889856189D6E56ABF59427459F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:da:a6:55:fb:e6:8b:84:6f:58:21:1a:a0:d9:
                    71:9f:92:55:da:d8:79:7a:9a:6c:38:16:3a:02:dc:
                    e5:1b:51:cd:19:9b:c0:af:1d:bd:12:92:9b:c0:9a:
                    bc:5b:33:da:19:b0:8e:d2:60:e4:66:f7:7b:32:7d:
                    8b:96:71:57:1f:c2:f0:b0:d5:b1:36:5a:5c:a6:7d:
                    35:79:1a:7a:70:77:34:6a:55:dd:c2:55:26:bf:38:
                    f7:0d:1d:90:f3:42:5f:af:8a:70:c0:82:8c:a1:ec:
                    7f:cc:ba:5d:29:76:a0:89:ff:23:f9:cf:e0:03:0a:
                    51:c8:93:01:c6:ac:8e:99:5a:9e:35:60:a8:92:a1:
                    b0:a6:99:0a:64:0c:17:ba:35:13:e6:aa:d9:c6:9e:
                    6a:b4:fd:b6:3a:d3:f3:fc:56:a7:33:1b:d0:2c:01:
                    3d:fe:df:ac:20:75:e5:ea:70:b1:a8:86:9c:a8:93:
                    b7:03:58:e9:8b:2b:cf:39:d4:ea:0d:72:94:d3:19:
                    dc:3b:0f:df:de:6b:e1:52:97:81:19:7c:62:77:01:
                    f3:8d:56:8a:b5:a1:2e:71:39:f0:55:37:59:f0:2b:
                    94:4b:18:4d:d9:30:4d:b7:a3:19:a0:03:6d:c0:73:
                    73:35:6d:f2:e6:6f:b3:81:d9:de:60:59:20:fe:fd:
                    fa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:7A:70:60:AE:39:D3:88:98:56:18:9D:6E:56:AB:F5:94:27:45:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/587A7060AE39D3889856189D6E56ABF59427459F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.144.0/21
                  177.86.144.0/21
                  191.240.200.0/21
                  191.242.112.0/20
                IPv6:
                  2804:1270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262851

    Signature Algorithm: sha256WithRSAEncryption
         79:d6:c6:43:64:67:f5:1c:f1:28:79:1e:67:b8:26:77:24:c8:
         5c:9d:46:80:67:6d:cb:d3:9b:5c:3e:f4:9a:5b:0a:88:9b:2e:
         de:45:37:87:bf:c6:81:40:7c:a7:4f:5b:a7:ac:65:68:ff:cf:
         93:b3:b9:6d:30:f6:1e:bf:ce:34:ec:91:8b:aa:f6:4b:d7:b3:
         f2:bd:eb:f3:7f:1a:da:b8:ca:12:09:7b:e8:bf:79:b9:e5:a1:
         1f:e3:70:bd:f5:b2:27:f9:08:06:62:c4:79:50:fc:7a:22:17:
         76:d2:79:cc:41:d5:5e:4f:3b:ab:84:9f:57:d2:7e:99:e4:64:
         e4:f7:10:54:f6:ac:33:1d:67:e0:1c:c8:d4:92:6d:16:49:bd:
         84:c7:f4:c6:b0:c1:79:25:f2:38:70:1b:5d:e6:23:3e:07:1f:
         2b:00:ed:8f:3f:be:46:e9:85:38:08:b9:12:65:0a:4b:17:b2:
         a6:63:1f:98:41:48:0f:e7:3a:e0:99:22:d7:de:32:ce:9f:e6:
         15:9f:ca:02:f8:a8:d3:53:ea:c1:ce:51:a3:dd:64:07:1f:e3:
         8f:ca:7d:52:7b:81:a6:c7:fc:7a:84:03:8e:0a:fa:15:49:58:
         96:1d:4d:1b:29:e4:40:d1:fb:64:f4:40:81:b5:06:63:4a:32:
         dd:e6:5e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org