Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/595D2A81534775DE5D7AA93E9690F79DF03232B1.cer
File:                     595D2A81534775DE5D7AA93E9690F79DF03232B1.cer (raw, json)
Hash identifier:          t8sJDBeqeiql7G2SrAGmPadIQCbQ9Fgk/B81/WK2p4Q=
Subject key identifier:   59:5D:2A:81:53:47:75:DE:5D:7A:A9:3E:96:90:F7:9D:F0:32:32:B1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       583A4420B44BF7F8437B4212AB372673E1E3AD12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/595D2A81534775DE5D7AA93E9690F79DF03232B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 May 2023 15:58:51 +0000
Certificate not after:    Mon 27 May 2024 16:03:51 +0000
Subordinate resources:    AS: 61581
                          IP: 138.94.196.0/22
                          IP: 2804:2398::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3a:44:20:b4:4b:f7:f8:43:7b:42:12:ab:37:26:73:e1:e3:ad:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 29 15:58:51 2023 GMT
            Not After : May 27 16:03:51 2024 GMT
        Subject: CN=595D2A81534775DE5D7AA93E9690F79DF03232B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:1b:f8:dd:28:cb:0d:72:d0:24:f3:48:ca:
                    41:fb:b4:16:5a:f5:eb:ac:39:8e:7c:40:77:b4:64:
                    79:1b:71:5c:b6:80:23:b8:bc:30:a6:f6:71:66:66:
                    0a:ab:ee:b4:f4:7d:1a:56:d8:ca:28:f7:0a:e7:89:
                    a6:6d:a4:cb:c5:fd:2d:b2:94:b5:ec:49:73:a8:5e:
                    59:67:1c:8e:3b:49:3d:b0:24:8c:7b:e0:d0:8b:eb:
                    a3:b3:ae:0f:5d:80:5c:7d:68:0b:96:fb:b6:00:ef:
                    8c:54:bd:38:04:57:ba:f9:22:f5:d4:12:d2:8b:f0:
                    bd:56:f9:72:90:79:74:32:80:50:b3:e3:7c:2d:3a:
                    41:dd:ed:f2:8f:ba:a0:92:9d:22:6e:bc:6d:97:79:
                    d4:64:52:95:ec:1a:92:36:b9:b1:6a:fb:fa:cd:d3:
                    51:76:fa:57:ad:02:c6:87:e1:f7:09:18:8f:b1:2d:
                    0e:b1:5f:5a:57:79:32:9c:23:75:2c:75:3e:72:9f:
                    38:73:1a:33:b7:79:f8:e7:72:ff:22:60:3c:e7:b8:
                    10:43:82:9c:c8:1c:3a:85:2d:9c:5a:8f:0f:9e:84:
                    18:df:c9:82:a4:f7:a4:15:10:a7:b7:b9:6b:23:fc:
                    cd:5c:ae:b6:6f:85:90:06:d5:e5:ba:a9:17:96:02:
                    ac:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:5D:2A:81:53:47:75:DE:5D:7A:A9:3E:96:90:F7:9D:F0:32:32:B1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/595D2A81534775DE5D7AA93E9690F79DF03232B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.196.0/22
                IPv6:
                  2804:2398::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61581

    Signature Algorithm: sha256WithRSAEncryption
         4f:b2:df:8f:34:58:8b:fb:11:1b:b4:0c:87:7b:c4:9b:b2:25:
         12:85:56:75:0b:ce:6f:e0:c8:e6:fa:18:98:57:ec:c6:48:dc:
         2a:f0:f6:42:94:fb:42:48:cc:ba:2f:4a:1b:0c:c2:eb:8a:e6:
         ba:5c:70:c3:b8:c3:49:a0:51:f5:1f:f8:5b:5b:42:2f:60:3b:
         be:52:b1:ba:59:87:02:56:9c:6f:b1:39:20:39:ca:88:3f:73:
         ad:45:c5:23:8a:5c:53:d6:15:cf:e1:2a:42:6c:cb:4b:f6:4c:
         54:e0:20:ff:02:5c:a2:1b:3e:81:9f:61:27:5d:79:89:fd:2a:
         5c:9b:97:dc:e4:6c:da:a5:23:9b:d5:72:b5:8c:34:16:32:b7:
         ad:8d:66:89:d7:f2:4d:cd:f8:9d:59:4f:fb:f6:ce:5f:32:74:
         26:a4:c7:19:b4:48:8a:5b:b2:a3:54:2e:15:a7:da:0c:5b:a4:
         e6:ce:9b:f0:d6:4f:86:5d:6e:5e:ad:50:67:f2:06:d0:9a:b5:
         61:a5:26:49:f0:7f:a8:46:6e:f0:8c:bc:1e:dc:2a:26:04:82:
         4f:08:9a:9f:38:f6:ec:89:49:17:e1:b0:42:a2:43:71:ee:a5:
         4c:f9:c7:90:e1:ab:f6:6a:46:a9:bc:6a:67:5f:be:e7:74:02:
         55:91:13:fc
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUWDpEILRL9/hDe0ISqzcmc+HjrRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjkxNTU4NTFaFw0yNDA1MjcxNjAzNTFaMDMxMTAvBgNV
BAMTKDU5NUQyQTgxNTM0Nzc1REU1RDdBQTkzRTk2OTBGNzlERjAzMjMyQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/Rv43SjLDXLQJPNIykH7tBZa
9eusOY58QHe0ZHkbcVy2gCO4vDCm9nFmZgqr7rT0fRpW2Moo9wrniaZtpMvF/S2y
lLXsSXOoXllnHI47ST2wJIx74NCL66Ozrg9dgFx9aAuW+7YA74xUvTgEV7r5IvXU
EtKL8L1W+XKQeXQygFCz43wtOkHd7fKPuqCSnSJuvG2XedRkUpXsGpI2ubFq+/rN
01F2+letAsaH4fcJGI+xLQ6xX1pXeTKcI3UsdT5ynzhzGjO3efjncv8iYDznuBBD
gpzIHDqFLZxajw+ehBjfyYKk96QVEKe3uWsj/M1crrZvhZAG1eW6qReWAqz5AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZXSqBU0d13l16
qT6WkPed8DIysTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DRE5QenpMUVRFVjI4M3hDdlp4UlM5WnFXSmlnd1J1MW1h
aEpZd1llOUxENi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DRE5QenpMUVRFVjI4M3hDdlp4UlM5WnFXSmlnd1J1MW1h
aEpZd1llOUxENi8wLzU5NUQyQTgxNTM0Nzc1REU1RDdBQTkzRTk2OTBGNzlERjAz
MjMyQjEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAopexDANBAIAAjAHAwUA
KAQjmDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8I0wDQYJKoZIhvcNAQELBQAD
ggEBAE+y3480WIv7ERu0DId7xJuyJRKFVnULzm/gyOb6GJhX7MZI3Crw9kKU+0JI
zLovShsMwuuK5rpccMO4w0mgUfUf+FtbQi9gO75SsbpZhwJWnG+xOSA5yog/c61F
xSOKXFPWFc/hKkJsy0v2TFTgIP8CXKIbPoGfYSddeYn9Klybl9zkbNqlI5vVcrWM
NBYyt62NZonX8k3N+J1ZT/v2zl8ydCakxxm0SIpbsqNULhWn2gxbpObOm/DWT4Zd
bl6tUGfyBtCatWGlJknwf6hGbvCMvB7cKiYEgk8Imp849uyJSRfhsEKiQ3HupUz5
x5Dhq/ZqRqm8amdfvud0AlWRE/w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org