Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/59940EEA9FE9603DD16F3A7482A514311A419C07.cer
File:                     59940EEA9FE9603DD16F3A7482A514311A419C07.cer (raw, json)
Hash identifier:          A0Yi6dttdVVwZpVTraimralhazrw3hlQm41unlvzeWg=
Subject key identifier:   59:94:0E:EA:9F:E9:60:3D:D1:6F:3A:74:82:A5:14:31:1A:41:9C:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       03A734803A4784B68C3DD018893A4A2D9C4FEB94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/59940EEA9FE9603DD16F3A7482A514311A419C07.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Nov 2022 19:00:05 +0000
Certificate not after:    Thu 09 Nov 2023 19:05:05 +0000
Subordinate resources:    AS: 263873
                          IP: 138.186.16.0/22
                          IP: 2804:2710::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a7:34:80:3a:47:84:b6:8c:3d:d0:18:89:3a:4a:2d:9c:4f:eb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 19:00:05 2022 GMT
            Not After : Nov  9 19:05:05 2023 GMT
        Subject: CN=59940EEA9FE9603DD16F3A7482A514311A419C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:89:60:b4:12:01:b8:41:99:69:8f:f2:c1:c3:
                    d6:40:a4:25:28:06:e0:db:46:68:d9:41:af:00:19:
                    f5:4d:3f:92:dc:a3:0d:a6:65:3d:21:81:2e:6e:fc:
                    f1:7f:30:7b:70:03:c0:ab:32:31:6c:81:9e:d6:b2:
                    02:5d:a9:1f:4c:e2:03:39:1e:fd:94:57:ce:6e:a6:
                    2d:65:36:bd:2a:60:cc:4a:3f:f9:de:21:d7:d4:d0:
                    9c:5f:1e:92:95:99:fd:d9:4a:c9:19:ea:0d:5e:4e:
                    d7:d7:c6:a5:d4:9c:47:51:47:5a:b9:83:cc:77:43:
                    6b:a0:66:28:18:0b:07:83:30:e1:bb:a5:6e:14:1d:
                    4f:cf:c2:3b:6d:aa:4d:da:d1:cb:ef:67:49:6e:86:
                    2a:b5:b8:ee:58:ad:6a:9e:76:4c:fd:d6:7f:ca:1f:
                    ba:cd:76:0e:54:c2:0e:d0:4f:90:24:ba:25:6c:96:
                    47:72:e3:75:53:cc:35:16:46:76:85:39:e2:8a:79:
                    b3:12:c8:1d:3a:03:08:c4:28:2e:2b:e5:5f:db:43:
                    84:c6:94:11:e6:ad:9e:65:70:7a:71:01:9f:c7:e0:
                    27:b3:3a:fc:1f:5d:8b:d8:8e:ec:bf:62:b7:06:b4:
                    30:9e:15:a8:b9:2a:41:b6:65:9b:b9:42:b3:ae:e1:
                    37:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:94:0E:EA:9F:E9:60:3D:D1:6F:3A:74:82:A5:14:31:1A:41:9C:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/59940EEA9FE9603DD16F3A7482A514311A419C07.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.16.0/22
                IPv6:
                  2804:2710::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263873

    Signature Algorithm: sha256WithRSAEncryption
         3e:68:53:88:e4:07:71:7b:af:f3:d4:f4:29:04:97:3f:24:e9:
         9f:02:eb:f7:fa:54:bd:76:6b:17:04:83:f3:02:e2:91:61:2d:
         95:10:cc:b6:d2:d5:f9:c9:3b:0d:e6:07:28:f8:36:81:08:47:
         56:b5:e5:c2:de:05:0c:99:2b:71:e0:dd:c0:9d:0c:11:c5:16:
         c6:1b:e1:71:fd:48:1d:8d:43:34:c6:6c:4f:40:39:27:da:31:
         52:38:dd:ce:79:0f:2e:d7:74:49:c8:6b:fe:4b:22:f7:f2:48:
         0e:41:47:ec:a5:f8:e4:9f:3d:ec:69:16:c2:fc:64:d7:b8:a6:
         fa:09:55:14:0b:1c:a1:b3:57:b6:ed:1b:86:1f:3e:39:4f:0c:
         b6:a3:2f:1c:01:d1:10:9f:60:57:ee:d6:cc:ba:15:4a:f7:a7:
         19:3a:1d:67:f6:b1:e0:28:00:f4:28:99:71:f1:80:21:6f:44:
         49:e7:10:eb:2d:ae:38:fb:c0:a9:5c:dd:c7:a3:0b:e9:17:9d:
         be:2b:59:93:fc:c5:cf:a9:19:6d:88:f0:51:f0:36:43:81:cc:
         95:02:d2:6e:3c:79:f7:d7:f7:d3:dd:b6:05:f9:14:c5:5d:ff:
         82:4c:03:67:b6:24:dd:1e:19:51:5a:06:42:9b:b5:be:de:61:
         e1:7d:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org