Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.cer
File:                     59BFA2FF28275A2F301C7FB1117398C02B8E40A3.cer (raw, json)
Hash identifier:          js6pGnYj8Mpx5zcpc1aMUHnapYSr+j+VJ1PEmOTm7vc=
Subject key identifier:   59:BF:A2:FF:28:27:5A:2F:30:1C:7F:B1:11:73:98:C0:2B:8E:40:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01CBF432AE789820C53A6857E5732924F9DC0B85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Nov 2023 14:17:42 +0000
Certificate not after:    Thu 21 Nov 2024 14:22:42 +0000
Subordinate resources:    AS: 270815
                          IP: 200.229.244.0/22
                          IP: 2804:71d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:cb:f4:32:ae:78:98:20:c5:3a:68:57:e5:73:29:24:f9:dc:0b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 23 14:17:42 2023 GMT
            Not After : Nov 21 14:22:42 2024 GMT
        Subject: CN=59BFA2FF28275A2F301C7FB1117398C02B8E40A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:56:4a:eb:4f:d8:8e:64:be:63:9a:d3:8d:
                    8f:a5:6e:9a:1f:44:c1:22:ae:cf:3d:ad:44:87:1f:
                    fc:67:74:34:6a:d5:e0:27:df:af:45:a4:a2:17:c0:
                    3e:3a:05:38:86:57:b9:1f:01:47:b5:59:01:ca:f2:
                    57:2d:03:dd:25:65:96:a0:28:09:7b:50:51:f8:16:
                    df:61:e1:b7:eb:7d:84:f1:84:c5:b5:b1:e5:39:05:
                    ef:56:22:37:74:48:37:84:76:af:d1:5a:29:35:56:
                    41:3d:a9:dd:0d:e7:4f:a4:ec:45:f1:13:dd:92:73:
                    eb:ee:c2:25:f3:ae:8e:d9:85:77:50:f3:c3:b2:91:
                    15:36:6e:a8:46:53:02:6d:a5:e4:51:01:ac:b5:48:
                    7a:d0:ab:0e:e9:01:a7:fc:8d:b6:01:8e:72:e0:ce:
                    fb:a8:74:eb:e3:48:a5:76:af:40:ba:3d:7e:77:69:
                    ba:86:f7:6e:96:42:a8:fc:0f:b9:8f:07:3e:32:d5:
                    0d:ec:99:f8:95:b8:bd:06:6a:66:5c:5c:7d:37:9b:
                    5a:f0:8c:c6:9d:e4:7b:08:d3:53:ee:60:5c:02:16:
                    0c:c1:02:a9:ad:f9:6b:13:3b:25:8b:60:1f:d9:38:
                    37:5d:f6:61:b0:bd:a1:f9:66:b6:13:1a:1e:6d:88:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:BF:A2:FF:28:27:5A:2F:30:1C:7F:B1:11:73:98:C0:2B:8E:40:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.244.0/22
                IPv6:
                  2804:71d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270815

    Signature Algorithm: sha256WithRSAEncryption
         16:6f:14:79:f0:99:fd:f4:e9:9a:13:1e:05:79:e5:b0:51:83:
         6f:fc:2f:a6:39:35:19:d4:81:92:5c:57:53:13:3e:bf:a5:9f:
         05:c0:82:bc:d7:47:14:ab:b1:29:8e:d5:9c:44:57:70:fb:ad:
         20:be:13:bf:f5:d1:35:dc:47:5d:da:3c:49:1d:19:b8:eb:d0:
         3a:10:ea:6c:d4:c6:8b:0c:06:47:22:9c:b3:ed:4b:fc:b9:57:
         0a:01:b1:90:d6:0d:65:a1:25:68:bf:bb:32:ca:6a:14:20:a2:
         5f:ef:41:6e:00:b5:44:01:92:c9:c2:f2:2d:df:12:db:5b:64:
         c1:f6:8a:de:7e:95:64:e0:17:46:bf:00:2a:42:90:08:d2:e6:
         5d:88:d9:14:83:cf:9d:00:d8:23:d6:78:69:73:90:3f:fb:2e:
         2a:c3:1a:75:bd:16:6d:ae:6c:de:33:ac:2a:96:56:ac:bd:50:
         9b:89:dc:c4:a1:9b:7d:b0:dd:f2:47:dc:14:05:ec:78:31:f8:
         10:6b:92:4a:22:e9:d7:13:7b:3d:3f:56:37:98:41:0e:c3:0e:
         42:33:83:6e:6e:51:14:98:3b:53:61:32:7d:6e:f0:7b:8b:4f:
         32:5b:9f:bf:2b:f6:2f:fd:07:95:0b:84:4e:37:58:e0:2d:20:
         08:88:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org