Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/78588D531B2F637866CA4E230867722DEA2BE617.cer
File:                     78588D531B2F637866CA4E230867722DEA2BE617.cer (raw, json)
Hash identifier:          T4dds7mtU3nLUADtLplYkwYQNp6Ks3pdc0Eoz1ESusM=
Subject key identifier:   78:58:8D:53:1B:2F:63:78:66:CA:4E:23:08:67:72:2D:EA:2B:E6:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34F8FA4A991828FA2C6AB4CAA42ACC2DD76E159E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/78588D531B2F637866CA4E230867722DEA2BE617.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 17 Feb 2024 03:10:08 +0000
Certificate not after:    Sat 15 Feb 2025 03:15:08 +0000
Subordinate resources:    AS: 52587
                          IP: 177.87.200.0/22
                          IP: 2804:8ec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f8:fa:4a:99:18:28:fa:2c:6a:b4:ca:a4:2a:cc:2d:d7:6e:15:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 17 03:10:08 2024 GMT
            Not After : Feb 15 03:15:08 2025 GMT
        Subject: CN=78588D531B2F637866CA4E230867722DEA2BE617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:95:1c:6a:9a:a6:92:b6:ea:14:4e:9e:bd:
                    19:7d:f9:4a:7c:f7:8a:fb:08:a2:b4:53:fa:bd:31:
                    71:2d:36:af:53:31:93:f1:48:d6:e3:0d:8b:2a:0f:
                    7c:26:76:2e:08:f9:0d:26:75:27:f5:87:8c:c1:e3:
                    cf:a7:0e:78:b6:09:9c:de:11:f4:8e:6f:f3:c4:8c:
                    0b:ab:01:2e:dc:56:f2:1e:0a:59:c6:4b:f7:41:09:
                    09:fc:43:31:8a:5a:05:4f:08:50:1e:24:c0:7e:ba:
                    76:87:bb:b6:c2:2c:9f:9a:a6:d7:5b:8d:b3:7f:ed:
                    86:9e:87:52:5a:02:2a:10:e1:4c:a8:f8:fa:cf:15:
                    ed:5e:c6:bc:89:35:d8:0a:e6:c4:a9:f5:d2:6f:b3:
                    38:81:f5:f3:48:0d:28:fa:50:79:4d:2d:8f:fc:8c:
                    57:cd:6c:e7:b2:19:f7:48:51:91:81:47:1a:df:c2:
                    31:5e:81:75:c9:39:e9:36:6b:a8:a9:fe:86:e7:56:
                    11:e0:f2:c1:7c:2d:9b:f2:15:c1:50:4a:4a:4c:1d:
                    12:53:90:6a:9e:7c:ed:f1:4d:0b:84:9a:4a:c8:f0:
                    48:95:60:01:e6:2c:8f:99:4e:5a:65:e6:ac:d5:80:
                    27:f1:9a:9e:af:eb:e0:43:0c:d5:7a:3e:ec:1b:0a:
                    f1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:58:8D:53:1B:2F:63:78:66:CA:4E:23:08:67:72:2D:EA:2B:E6:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/78588D531B2F637866CA4E230867722DEA2BE617.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.200.0/22
                IPv6:
                  2804:8ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52587

    Signature Algorithm: sha256WithRSAEncryption
         53:d0:e8:11:85:d7:25:16:41:84:ed:02:37:94:7a:4d:d9:b8:
         a4:33:61:ca:9d:54:74:c7:59:75:d9:a1:c9:9b:92:b6:b3:72:
         f7:35:71:bb:e1:6f:14:1d:b3:da:1e:38:c5:40:21:bd:76:79:
         8b:5e:b6:aa:43:c9:af:81:cf:71:0c:58:08:19:86:d7:f0:d3:
         71:02:b9:ed:0d:97:59:ad:c7:04:a8:6f:e3:43:71:41:33:90:
         68:cb:9d:a7:08:41:11:00:35:d2:22:11:32:21:ab:7f:bd:8e:
         10:3c:77:b3:b6:3a:30:b5:18:0b:5d:c7:07:ab:74:78:41:bf:
         d2:09:66:fc:b7:66:ea:63:6b:63:40:09:12:ec:63:47:f8:1b:
         b5:25:ed:e3:66:50:05:ba:4c:ed:69:d3:7f:3e:66:ef:39:eb:
         c4:11:f3:e3:34:ce:28:4d:81:61:68:82:31:bf:08:ef:bd:f8:
         97:93:6f:73:e7:69:91:64:fd:0a:e6:99:be:df:39:83:64:69:
         c5:21:89:4a:3c:46:07:86:e0:3c:6a:48:06:7f:d3:19:cb:07:
         5f:b5:6f:ca:00:07:0c:9c:30:06:64:77:d1:69:d6:eb:27:30:
         3b:72:ee:a8:ab:48:d6:4f:95:a0:4f:92:45:7a:ca:6a:ea:05:
         b7:9e:10:60
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUNPj6SpkYKPosarTKpCrMLdduFZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTcwMzEwMDhaFw0yNTAyMTUwMzE1MDhaMDMxMTAvBgNV
BAMTKDc4NTg4RDUzMUIyRjYzNzg2NkNBNEUyMzA4Njc3MjJERUEyQkU2MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcZUcapqmkrbqFE6evRl9+Up8
94r7CKK0U/q9MXEtNq9TMZPxSNbjDYsqD3wmdi4I+Q0mdSf1h4zB48+nDni2CZze
EfSOb/PEjAurAS7cVvIeClnGS/dBCQn8QzGKWgVPCFAeJMB+unaHu7bCLJ+aptdb
jbN/7Yaeh1JaAioQ4Uyo+PrPFe1exryJNdgK5sSp9dJvsziB9fNIDSj6UHlNLY/8
jFfNbOeyGfdIUZGBRxrfwjFegXXJOek2a6ip/obnVhHg8sF8LZvyFcFQSkpMHRJT
kGqefO3xTQuEmkrI8EiVYAHmLI+ZTlpl5qzVgCfxmp6v6+BDDNV6PuwbCvHRAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR4WI1TGy9jeGbK
TiMIZ3It6ivmFzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85ckF5dHFaSDF0aUVUV2FtajhZODFWTW5SOUNVcHlXczdT
WjVzRlp3Z1NrTS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOXJBeXRxWkgxdGlFVFdhbWo4WTgxVk1uUjlDVXB5V3M3
U1o1c0Zad2dTa00vMC83ODU4OEQ1MzFCMkY2Mzc4NjZDQTRFMjMwODY3NzIyREVB
MkJFNjE3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKxV8gwDQQCAAIwBwMF
ACgEjsAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM1rMA0GCSqGSIb3DQEBCwUA
A4IBAQBT0OgRhdclFkGE7QI3lHpN2bikM2HKnVR0x1l12aHJm5K2s3L3NXG74W8U
HbPaHjjFQCG9dnmLXraqQ8mvgc9xDFgIGYbX8NNxArntDZdZrccEqG/jQ3FBM5Bo
y52nCEERADXSIhEyIat/vY4QPHeztjowtRgLXccHq3R4Qb/SCWb8t2bqY2tjQAkS
7GNH+Bu1Je3jZlAFukztadN/PmbvOevEEfPjNM4oTYFhaIIxvwjvvfiXk29z52mR
ZP0K5pm+3zmDZGnFIYlKPEYHhuA8akgGf9MZywdftW/KAAcMnDAGZHfRadbrJzA7
cu6oq0jWT5WgT5JFespq6gW3nhBg
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org