Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/59CE7786D98BBD657E6949FFE8332B5753CFD970.cer
File:                     59CE7786D98BBD657E6949FFE8332B5753CFD970.cer (raw, json)
Hash identifier:          Z00uJJRJq2Z1ZFCj65R2ooHfyXVOgDBHo3lGGe8vSTQ=
Subject key identifier:   59:CE:77:86:D9:8B:BD:65:7E:69:49:FF:E8:33:2B:57:53:CF:D9:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A5C3A4C99CECD840EE025308AB8D61C969722EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/59CE7786D98BBD657E6949FFE8332B5753CFD970.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Aug 2023 18:09:22 +0000
Certificate not after:    Wed 28 Aug 2024 18:14:22 +0000
Subordinate resources:    AS: 271350
                          IP: 181.189.64.0/22
                          IP: 2804:7a24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:5c:3a:4c:99:ce:cd:84:0e:e0:25:30:8a:b8:d6:1c:96:97:22:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 30 18:09:22 2023 GMT
            Not After : Aug 28 18:14:22 2024 GMT
        Subject: CN=59CE7786D98BBD657E6949FFE8332B5753CFD970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4e:9d:f5:d3:55:59:82:4c:5d:f7:8c:80:c9:
                    1a:18:32:9f:72:85:99:cd:8d:35:03:86:ae:13:ae:
                    fa:67:6d:b9:d9:76:f7:bc:dc:c8:64:ee:61:dc:27:
                    c8:4b:57:26:34:53:bd:a9:8a:50:a4:13:c4:0f:ee:
                    b7:13:7d:c4:01:5b:77:00:10:9b:90:b5:03:af:b7:
                    f9:04:12:3d:e2:73:a0:dd:b6:a2:4d:09:da:57:53:
                    49:09:d7:e9:7c:bd:ac:47:7b:7b:1f:bb:4d:83:76:
                    55:2a:9f:05:5d:87:35:c7:76:f1:5b:69:d1:fa:9a:
                    9a:e6:2b:26:32:e4:2e:18:48:96:24:13:b0:0d:9d:
                    94:d4:02:2c:62:1c:52:a2:f4:f9:e3:04:30:63:be:
                    04:71:9d:23:9c:8f:5e:f9:37:24:16:9f:5a:fb:e2:
                    10:6e:3f:35:79:97:25:15:68:59:70:ab:ea:5d:a9:
                    0b:b4:bf:06:a8:00:77:63:81:4d:d2:95:93:f2:12:
                    c1:e7:cb:a4:9c:54:21:dd:26:10:93:50:65:a2:c2:
                    0d:1b:ba:5b:e2:3e:6b:ca:3d:48:88:af:0d:27:d7:
                    80:52:be:f3:1c:a4:de:8b:d6:ac:91:10:9c:e0:81:
                    dc:9d:91:3f:b4:0d:e0:8a:15:c5:86:61:92:43:91:
                    4b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:CE:77:86:D9:8B:BD:65:7E:69:49:FF:E8:33:2B:57:53:CF:D9:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/59CE7786D98BBD657E6949FFE8332B5753CFD970.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.64.0/22
                IPv6:
                  2804:7a24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271350

    Signature Algorithm: sha256WithRSAEncryption
         a4:25:1f:47:af:7a:fe:e0:58:5f:97:2b:55:fd:ba:0f:a7:d3:
         33:66:13:49:78:b4:fe:a8:7b:37:d6:74:91:5c:b4:32:7b:c4:
         12:e9:d3:a3:2f:c5:ee:18:d6:4f:d1:a0:64:07:7d:fb:cd:06:
         96:54:94:a3:82:4c:7d:6c:c8:06:0c:52:f4:85:72:c8:27:7c:
         81:40:24:1b:6b:f4:59:03:86:ef:ca:34:a8:2c:37:15:b4:fd:
         d6:53:a2:a3:53:ca:ff:ac:9c:5a:97:cb:e0:37:04:8d:8a:9c:
         e7:05:1f:8d:66:32:6a:fc:8c:d0:c1:b6:8b:2f:90:2a:ab:3e:
         03:c9:25:b8:1a:73:bb:7f:01:4a:31:ee:ba:86:aa:cd:9c:b0:
         d8:55:d4:2f:42:dd:4d:d7:c6:c5:d5:a8:14:67:61:9e:e0:a6:
         22:31:c1:67:37:27:41:68:07:9c:44:95:70:e8:d4:5b:0d:fd:
         e5:69:6a:a6:0a:a0:39:28:a3:62:f3:43:76:62:e2:5a:64:f2:
         69:39:e3:35:1d:7c:35:61:41:31:ff:db:e6:ab:b0:b1:50:35:
         29:ed:bc:eb:0c:94:6d:4f:fa:c2:22:85:d3:05:6c:81:cc:fe:
         18:47:f6:fd:ea:8b:48:96:24:20:37:cd:ed:6f:47:a9:e0:c7:
         4c:50:f0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org