Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/587FEAF9EEA666A8975B25C971AEDC6ABAD71C6C.cer
File:                     587FEAF9EEA666A8975B25C971AEDC6ABAD71C6C.cer (raw, json)
Hash identifier:          jmZTXGK6K1Qbid1c/G6n58V0f3xAjDhgKp9NVnynPIA=
Subject key identifier:   58:7F:EA:F9:EE:A6:66:A8:97:5B:25:C9:71:AE:DC:6A:BA:D7:1C:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04785CBF2FF5EC452B43A1BFD72FD5FFD8784EFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/587FEAF9EEA666A8975B25C971AEDC6ABAD71C6C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Mar 2022 18:06:26 +0000
Certificate not after:    Wed 08 Mar 2023 18:11:26 +0000
Subordinate resources:    AS: 28635
                          IP: 201.71.128.0/18
                          IP: 2804:1408::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:78:5c:bf:2f:f5:ec:45:2b:43:a1:bf:d7:2f:d5:ff:d8:78:4e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  9 18:06:26 2022 GMT
            Not After : Mar  8 18:11:26 2023 GMT
        Subject: CN=587FEAF9EEA666A8975B25C971AEDC6ABAD71C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:af:0f:ff:f1:aa:55:5c:3a:f4:7a:d2:00:5c:
                    98:0c:a0:3c:5a:a6:34:fa:ee:a8:4c:56:44:61:a5:
                    88:dc:a0:fe:d6:83:05:71:e7:2e:87:fb:dd:2c:e0:
                    aa:c3:66:6d:d7:61:00:60:83:35:1f:98:15:4f:10:
                    e0:7e:a6:f3:25:08:45:07:bf:79:49:86:6a:1b:06:
                    81:1a:3b:2b:b1:1e:71:7a:65:ac:a2:e0:0e:ab:e0:
                    79:d4:06:3f:4a:33:a6:da:ad:d5:5a:60:6c:09:a5:
                    d2:a6:11:a5:4b:18:10:0d:3f:48:10:fd:81:c5:45:
                    9c:f0:a4:b8:93:c8:d3:33:1a:c0:76:14:53:95:76:
                    89:6b:cd:ee:50:52:55:88:b9:69:75:bf:27:ad:81:
                    0b:c3:14:1a:ee:76:57:c5:61:ad:d1:c7:c7:f4:d2:
                    95:52:0b:50:71:08:6e:ef:90:59:04:14:1d:8e:85:
                    ff:4b:31:e8:5f:30:9d:17:7b:25:16:8e:90:48:b6:
                    79:53:22:a1:56:62:4f:d4:09:b3:3c:7b:d8:96:ec:
                    8b:c9:f4:76:b7:40:46:b2:90:9f:e2:a7:3e:0f:a9:
                    aa:c3:79:c9:ed:9d:a0:48:9a:bc:15:34:04:bb:11:
                    8a:e2:4b:48:d8:bf:9f:40:a9:fc:9a:07:88:94:98:
                    90:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:7F:EA:F9:EE:A6:66:A8:97:5B:25:C9:71:AE:DC:6A:BA:D7:1C:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/587FEAF9EEA666A8975B25C971AEDC6ABAD71C6C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.128.0/18
                IPv6:
                  2804:1408::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28635

    Signature Algorithm: sha256WithRSAEncryption
         92:85:b4:8e:b0:44:5e:fb:ad:0e:b8:12:20:50:a9:3d:90:ec:
         ea:6d:39:25:d1:ef:98:0f:38:f2:9d:15:37:ce:1f:f8:d1:27:
         fb:01:b0:69:90:41:a6:a7:33:f4:ab:c3:6c:83:d8:1a:e0:0f:
         3c:aa:8a:0a:44:f1:40:67:e1:9c:4c:9d:07:ae:e4:75:1f:d2:
         05:f3:51:2d:6f:3d:35:0c:ac:23:0b:7c:8b:93:46:fe:cd:84:
         5a:36:e4:37:c4:3a:18:50:b6:65:db:a3:d3:37:cb:11:42:15:
         eb:d2:2c:5c:22:98:d3:c4:e1:25:a8:ca:b8:0a:ee:90:dc:43:
         50:9c:08:82:0e:2d:0f:7a:5b:18:06:4e:8c:11:e9:5b:ba:35:
         9b:bb:43:c8:6f:b3:9b:f0:6d:37:81:a1:6c:b3:fa:f6:e6:df:
         d1:7c:cb:67:fb:88:62:12:e8:ce:c2:3c:8d:4b:1c:91:60:27:
         31:83:3e:dd:e5:30:63:56:2c:ad:df:33:a8:d8:93:42:15:08:
         60:f0:12:61:12:d5:70:db:6b:e2:5c:b9:6e:d3:96:d8:60:c7:
         bd:b0:30:e0:09:e8:af:83:93:05:7c:87:7a:13:02:24:07:19:
         5c:b7:58:9e:91:f9:dc:a2:0a:93:c4:c9:db:2f:56:00:6c:ce:
         f5:f1:d2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org