Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/58CD9BC32FE3F64CFB46F76579005174DFBB8A8A.cer
File:                     58CD9BC32FE3F64CFB46F76579005174DFBB8A8A.cer (raw, json)
Hash identifier:          8DwJx2wIr3q8HALnPAKttRb8j4T4s4QG1HTfVOPqKNI=
Subject key identifier:   58:CD:9B:C3:2F:E3:F6:4C:FB:46:F7:65:79:00:51:74:DF:BB:8A:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7460437A14367FC7F65AE121084F0441360BCE19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/0/58CD9BC32FE3F64CFB46F76579005174DFBB8A8A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 17:50:00 +0000
Certificate not after:    Tue 05 Nov 2024 17:55:00 +0000
Subordinate resources:    AS: 267934
                          IP: 45.165.252.0/22
                          IP: 2804:556c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:60:43:7a:14:36:7f:c7:f6:5a:e1:21:08:4f:04:41:36:0b:ce:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 17:50:00 2023 GMT
            Not After : Nov  5 17:55:00 2024 GMT
        Subject: CN=58CD9BC32FE3F64CFB46F76579005174DFBB8A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:63:2f:0e:61:05:25:c3:d4:88:36:dd:8d:d6:
                    26:50:cd:64:40:f0:54:30:cc:86:07:c6:e5:fd:5a:
                    c6:ab:f1:51:6b:b5:30:eb:f3:78:8c:00:33:9e:d8:
                    d3:be:6a:fa:13:82:76:1f:3d:28:1d:77:a3:27:a6:
                    72:5c:23:2f:60:97:0a:83:70:fd:c9:bc:2c:d2:08:
                    6f:20:8d:af:63:f4:8a:55:09:3f:ce:82:e7:7b:72:
                    d0:40:cc:aa:cf:b4:cb:ea:2b:2f:e9:3b:26:b9:90:
                    28:de:dd:63:8e:b9:3b:b2:a3:7d:03:89:ee:9c:1d:
                    d1:20:7a:dc:97:2e:68:c4:f5:cf:78:fa:63:16:be:
                    f8:5b:d6:af:36:ea:d7:9b:c3:bd:e3:95:70:3f:f3:
                    88:7c:9e:38:87:07:86:d4:ea:66:aa:88:51:60:c0:
                    a0:9e:53:cd:95:8f:9e:9a:24:73:28:70:cb:c6:3c:
                    27:aa:78:6b:59:3f:bf:20:e5:ee:ef:9e:cd:56:b0:
                    11:39:e3:50:b9:1d:32:d5:ac:af:ca:d4:aa:84:e4:
                    16:c5:c2:0c:a1:ab:55:af:c9:a7:39:b9:11:27:10:
                    95:2f:15:ff:ab:cf:b6:09:a9:2e:3d:f2:08:6b:d8:
                    24:4d:dc:8f:71:3e:cc:c6:61:e6:53:34:5b:61:09:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:CD:9B:C3:2F:E3:F6:4C:FB:46:F7:65:79:00:51:74:DF:BB:8A:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/0/58CD9BC32FE3F64CFB46F76579005174DFBB8A8A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.252.0/22
                IPv6:
                  2804:556c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267934

    Signature Algorithm: sha256WithRSAEncryption
         90:8c:8c:cb:f8:a0:74:bd:7a:72:1a:63:78:79:2a:35:16:e4:
         34:c2:8a:be:a5:88:14:2c:8b:88:69:a2:c5:bc:5f:a5:98:27:
         eb:00:2d:bc:90:bb:ad:bc:be:c2:4f:90:b5:10:1c:62:09:9f:
         10:fb:98:53:52:2e:f1:25:95:82:40:cb:8c:ae:26:bb:31:20:
         99:8a:5b:7f:16:1c:59:a8:be:41:5e:76:26:51:fb:0d:d7:a5:
         25:73:98:4a:e4:3e:28:56:72:5b:fe:12:39:d5:43:04:ff:b2:
         a3:fd:63:f4:23:34:01:76:d7:7f:59:bb:7e:e7:f7:32:7a:38:
         b9:b1:8e:23:84:4e:18:b2:f8:63:65:9f:a9:4c:f8:96:3d:b0:
         b6:7a:e6:dc:4d:a2:7f:bc:21:dc:24:c1:7e:11:92:42:8d:5c:
         7d:4a:88:13:9f:4a:a2:4a:43:ff:da:dd:98:0b:7e:20:ac:21:
         45:ba:1e:e5:c0:e6:ee:61:3b:c2:a7:d1:5d:c4:7b:85:58:ab:
         2d:8a:aa:5f:db:b7:b3:53:9f:ea:39:fd:59:42:ff:6e:2f:0b:
         aa:15:c2:06:ce:a7:f1:47:c2:64:f3:6e:5e:74:11:56:13:30:
         4c:23:28:db:58:65:45:9a:6b:d4:66:7b:c2:9e:87:37:ec:26:
         1b:cb:c9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org