Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/58EB51309446697469911D6A209F194B8F572048.cer
File:                     58EB51309446697469911D6A209F194B8F572048.cer (raw, json)
Hash identifier:          ReMuR47oYKuhTYWKKAT5tpY3ZZfvI4uwZeVsLf7wPNo=
Subject key identifier:   58:EB:51:30:94:46:69:74:69:91:1D:6A:20:9F:19:4B:8F:57:20:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B6C8A290DAD48AABA58BD617018CEFB7801A186
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/58EB51309446697469911D6A209F194B8F572048.mft
caRepository:             rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Nov 2023 15:00:59 +0000
Certificate not after:    Wed 06 Nov 2024 15:05:59 +0000
Subordinate resources:    AS: 267511
                          IP: 201.182.100.0/22
                          IP: 2804:4298::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6c:8a:29:0d:ad:48:aa:ba:58:bd:61:70:18:ce:fb:78:01:a1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  8 15:00:59 2023 GMT
            Not After : Nov  6 15:05:59 2024 GMT
        Subject: CN=58EB51309446697469911D6A209F194B8F572048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c9:f7:ae:67:98:d4:69:e0:e4:9a:fb:44:a8:
                    49:a8:2a:1b:b4:58:3a:cf:bf:32:6f:21:b7:89:ef:
                    b0:b1:f6:c8:18:35:07:1a:ae:1a:3f:22:5e:38:fd:
                    a7:b0:3f:04:16:2a:59:d3:81:42:77:73:8c:04:b7:
                    e8:a0:d5:38:de:34:5a:d9:8d:92:1f:c6:0f:8d:94:
                    7c:00:1b:c2:a1:d0:b4:08:62:1f:5a:24:93:84:e3:
                    14:5b:8a:b1:15:25:86:48:80:8e:78:7f:bc:64:ed:
                    f3:dd:cf:73:e2:3f:47:5c:36:ac:ec:f8:92:df:1d:
                    e5:62:d3:08:52:87:f4:48:1b:6c:67:9a:9e:58:4b:
                    75:12:05:f3:e1:b4:60:9f:2e:d1:0c:44:46:3c:e5:
                    88:ac:89:50:c6:1a:c3:62:51:67:39:a0:5d:70:7c:
                    dd:ca:98:68:a5:9f:66:53:eb:08:a2:2c:80:3e:82:
                    63:f8:cf:cf:c5:3d:d1:f7:a8:e3:42:16:e1:a6:ca:
                    d4:17:9e:d0:b5:85:02:7b:63:89:8a:af:d1:14:f2:
                    b9:7a:59:25:90:0f:c1:6c:f6:42:b3:3e:aa:9d:34:
                    38:ab:f1:ac:e7:02:03:17:5b:8f:7e:7f:9a:24:b8:
                    42:4a:a9:ed:bc:3c:87:ca:e5:94:fd:eb:a8:08:7d:
                    0f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:EB:51:30:94:46:69:74:69:91:1D:6A:20:9F:19:4B:8F:57:20:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/58EB51309446697469911D6A209F194B8F572048.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.100.0/22
                IPv6:
                  2804:4298::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267511

    Signature Algorithm: sha256WithRSAEncryption
         1e:c8:bd:76:bd:4d:4c:93:a8:43:6d:9b:eb:94:c9:be:08:e3:
         56:2a:54:8c:1a:92:87:fb:fa:85:86:07:e9:4b:f6:93:d9:1d:
         f1:a6:93:7c:a5:ce:2b:38:28:c2:58:05:93:e0:ec:e0:c0:e0:
         44:d5:ea:8d:1a:57:18:58:b3:15:e0:b7:ed:08:71:f8:fa:9b:
         b8:6b:c0:83:9d:2f:67:4e:73:af:0e:24:c3:43:06:c0:42:54:
         f6:0c:6f:e1:63:4a:9f:4e:6f:9c:7f:25:04:f1:47:a4:5f:ab:
         1c:be:68:02:f6:19:13:46:cc:f7:e9:21:63:a1:6d:ed:18:36:
         b1:88:4d:bf:35:e2:86:27:49:d4:b5:02:9d:31:08:e4:46:4b:
         f6:73:7c:5b:cc:e2:c8:ef:4d:fd:70:0a:7b:73:bd:40:8e:5c:
         32:f9:a5:e7:3e:dd:76:a0:29:31:84:c1:85:34:92:3c:2d:ce:
         17:21:19:f3:8e:10:33:9c:f3:68:67:da:d0:57:98:0f:b3:85:
         ab:68:d2:0f:68:b3:5f:b4:3f:7f:ad:35:17:95:7e:53:8d:37:
         b0:bc:ec:b4:2b:74:71:fb:a1:dc:a9:87:5a:a3:d8:1f:d0:9a:
         0f:2b:e6:26:e2:31:28:2a:d6:b0:cd:ac:19:94:20:49:b5:7e:
         3e:fe:f0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org