Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.cer
File:                     7587F597C9C1E2232867D6F1F2C2B5703F7150D1.cer (raw, json)
Hash identifier:          JJPMUzrjiggl/wDd+BuodREm2Ysq21+jfBGQLCG1fCg=
Subject key identifier:   75:87:F5:97:C9:C1:E2:23:28:67:D6:F1:F2:C2:B5:70:3F:71:50:D1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4CD31D6AACAF86FEF4F547888EFBA9A229217AA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 22:28:20 +0000
Certificate not after:    Mon 07 Oct 2024 22:33:20 +0000
Subordinate resources:    AS: 269699
                          IP: 45.191.252.0/22
                          IP: 2804:6888::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d3:1d:6a:ac:af:86:fe:f4:f5:47:88:8e:fb:a9:a2:29:21:7a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  9 22:28:20 2023 GMT
            Not After : Oct  7 22:33:20 2024 GMT
        Subject: CN=7587F597C9C1E2232867D6F1F2C2B5703F7150D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:f1:b7:9c:7a:c0:07:33:17:00:dd:ea:18:
                    60:18:9a:a4:66:b9:be:ce:a2:d5:cc:b2:50:c4:da:
                    61:e8:30:47:cc:16:99:ee:62:4e:c2:1b:d4:59:cb:
                    11:fa:76:63:ca:5c:5a:84:f4:d8:04:8d:e4:b8:41:
                    dd:c9:00:4d:8b:15:70:df:bd:f8:d9:57:25:c9:17:
                    e6:9a:e7:da:fa:08:66:6e:1f:54:dd:af:1d:78:b1:
                    3f:d9:88:a1:3c:8e:5c:c9:1c:db:c1:bf:0d:75:97:
                    25:be:4a:c2:d2:0f:20:ff:48:37:ba:7d:f9:35:e9:
                    ac:10:6d:77:ff:7a:eb:92:ec:a6:fa:35:0d:4b:fb:
                    1f:62:b4:fe:08:c1:6b:22:a1:fd:3a:1f:d5:f3:35:
                    80:b5:b2:02:53:7d:67:f1:01:83:e5:cf:94:c0:45:
                    10:fd:94:65:a5:50:96:6f:b9:32:93:85:6e:b7:0c:
                    8d:1d:42:37:a7:72:55:c9:07:ef:c0:16:71:3d:91:
                    42:56:bf:4c:c0:06:76:e0:1a:4c:ff:ae:26:22:5f:
                    a1:ee:fc:32:db:45:7f:ad:f6:ea:ce:63:ee:c4:b9:
                    07:5c:32:46:eb:b4:37:cc:59:bf:4a:73:74:3c:b0:
                    e6:3c:ed:c0:96:7e:b6:d3:2b:43:a5:53:7b:11:40:
                    a1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:87:F5:97:C9:C1:E2:23:28:67:D6:F1:F2:C2:B5:70:3F:71:50:D1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.252.0/22
                IPv6:
                  2804:6888::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269699

    Signature Algorithm: sha256WithRSAEncryption
         7e:4c:a3:0a:af:0d:69:d2:f7:da:70:f8:7e:c2:31:99:c4:aa:
         dd:25:1d:40:7e:2b:6a:dc:70:b2:83:12:5e:9f:5f:d3:96:02:
         22:1b:65:49:db:5e:7e:cf:d6:a2:27:d0:18:93:96:05:2b:6d:
         16:bc:d0:aa:96:51:db:84:4f:97:0c:2b:d2:49:a8:6f:c1:16:
         58:f1:fb:10:30:4b:31:34:ab:01:5b:52:77:00:95:40:08:ee:
         36:c0:fe:d7:8d:d4:77:31:cb:53:ce:bc:84:14:04:dd:e3:a5:
         ef:3d:87:83:40:58:3e:d5:22:9c:b8:4a:d1:8c:2f:09:27:1e:
         8c:7c:1f:64:e6:fa:77:c7:c8:5d:75:80:0a:fb:9f:53:2b:24:
         83:88:0b:d7:34:9f:be:52:55:1d:0d:ae:4d:20:14:a8:c9:54:
         4b:42:c3:50:be:12:ae:5e:d5:14:ea:f7:b3:a2:b5:8e:80:8b:
         0b:8e:ce:f3:37:ee:79:9a:5d:2f:90:41:59:33:36:c6:d6:b5:
         ff:fc:91:bb:58:24:12:19:79:4c:14:af:03:f6:91:9c:61:00:
         e2:27:a1:a2:2b:fe:63:bc:66:f8:b6:41:52:20:54:f6:2c:32:
         de:7c:b1:24:0f:f6:3e:94:47:a5:b6:fd:b6:46:46:61:4b:0a:
         1b:55:db:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org