Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/594CB2FC4D9A9B058DBDD288F800FFF32B19B64A.cer
File:                     594CB2FC4D9A9B058DBDD288F800FFF32B19B64A.cer (raw, json)
Hash identifier:          R2YSRsWoVDEgapJuECtRohRqqADxfOzaYyH4E9MVyJU=
Subject key identifier:   59:4C:B2:FC:4D:9A:9B:05:8D:BD:D2:88:F8:00:FF:F3:2B:19:B6:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       095EDAF9F2AF66E1D1D1F752CC0EB339E0BFCD55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/594CB2FC4D9A9B058DBDD288F800FFF32B19B64A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 17:04:15 +0000
Certificate not after:    Tue 16 Apr 2024 17:09:15 +0000
Subordinate resources:    AS: 266114
                          IP: 45.5.156.0/22
                          IP: 2804:3adc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5e:da:f9:f2:af:66:e1:d1:d1:f7:52:cc:0e:b3:39:e0:bf:cd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 18 17:04:15 2023 GMT
            Not After : Apr 16 17:09:15 2024 GMT
        Subject: CN=594CB2FC4D9A9B058DBDD288F800FFF32B19B64A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:e4:8b:a4:f9:c3:fa:a0:60:85:5a:79:ae:
                    42:df:33:ae:65:f2:a2:38:dc:17:c5:7f:96:78:97:
                    16:5d:14:5b:5a:d2:76:90:9a:05:b8:4f:18:7f:0f:
                    04:81:7c:23:0b:6e:fd:df:ea:57:6e:d5:ae:31:50:
                    bb:0c:71:a9:a3:0a:d3:73:cb:f0:82:3a:52:05:f9:
                    44:00:3c:13:de:ab:ab:7c:a3:00:83:20:78:21:bd:
                    76:8e:0c:8c:46:6e:cd:28:40:f2:60:bc:5d:78:f5:
                    69:0e:e3:19:41:db:57:c5:b5:2f:43:49:4d:bc:4e:
                    2e:44:05:a3:6c:10:fe:25:bd:95:bd:f2:18:fc:46:
                    57:38:43:20:e4:04:b1:b4:24:47:08:19:80:4c:95:
                    d8:99:8c:c9:d1:0e:64:d4:47:ef:25:87:5a:43:5e:
                    49:90:8d:41:f8:da:95:92:12:a3:23:7b:87:0e:d0:
                    57:20:bd:93:7b:44:95:dc:ca:c3:1a:a0:a8:45:a9:
                    93:70:7d:01:63:1d:44:f4:fa:42:53:c4:5f:a0:4a:
                    ee:5c:d9:fe:87:e2:24:69:92:4d:42:aa:c2:d8:9b:
                    dd:1a:0a:42:7f:03:d0:d4:0a:f8:52:4e:24:0e:3a:
                    36:f4:1d:71:fe:77:87:e9:86:69:8c:91:e7:8e:1f:
                    be:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:4C:B2:FC:4D:9A:9B:05:8D:BD:D2:88:F8:00:FF:F3:2B:19:B6:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/594CB2FC4D9A9B058DBDD288F800FFF32B19B64A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.156.0/22
                IPv6:
                  2804:3adc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266114

    Signature Algorithm: sha256WithRSAEncryption
         66:19:d3:a7:45:48:51:85:8d:b7:e2:99:09:0e:be:bf:51:f5:
         6f:47:15:d7:f3:5b:6b:b5:b8:ef:cd:39:ae:5c:66:29:8e:cf:
         b1:3e:38:b3:e6:13:1c:e7:f4:99:b6:1e:9c:02:7b:e1:94:29:
         43:50:be:11:e0:5f:99:6d:8f:28:60:c0:df:34:e2:45:62:83:
         70:47:95:8c:c8:ef:dd:f5:f5:5b:53:4f:93:68:34:f9:f1:44:
         57:7e:16:3a:23:57:b2:30:a9:30:7d:5f:0f:98:0a:03:1e:3e:
         c7:f5:b6:21:03:3d:e7:55:75:5a:bd:49:f7:b1:17:c0:c5:50:
         04:2c:51:fb:21:a1:d4:50:05:e2:ed:7a:ce:3f:0e:57:de:50:
         25:78:b4:58:6b:d3:03:ea:de:b7:da:0c:6f:98:7c:86:d7:60:
         66:aa:41:12:3d:4e:57:c6:8e:3d:13:77:5d:4c:61:ee:82:1b:
         fd:cb:cf:30:3f:b7:ea:0d:2d:0c:16:16:1a:df:11:e0:9a:7b:
         a9:01:9a:61:f7:69:37:9b:25:ac:c4:07:8f:02:03:bd:1d:e9:
         0f:90:60:b8:13:2e:50:6e:c3:25:9c:a0:67:cc:13:72:ea:38:
         87:fe:04:2d:85:ef:86:52:8b:ea:4d:56:71:cd:0f:a8:04:82:
         85:aa:a7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org