Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/86583D9A31D3723213394256457C31364D9C4338.cer
File:                     86583D9A31D3723213394256457C31364D9C4338.cer (raw, json)
Hash identifier:          jYyXDpY+rEVouY2ajQWutvgZ1junkbc2VvbhqLN6mEU=
Subject key identifier:   86:58:3D:9A:31:D3:72:32:13:39:42:56:45:7C:31:36:4D:9C:43:38
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F07B981955F57BE1E2755460ED65FDE67D49514
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/0/86583D9A31D3723213394256457C31364D9C4338.mft
caRepository:             rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 17:52:15 +0000
Certificate not after:    Mon 20 May 2024 17:57:15 +0000
Subordinate resources:    AS: 270618
                          IP: 190.8.160.0/22
                          IP: 2804:6ec8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:07:b9:81:95:5f:57:be:1e:27:55:46:0e:d6:5f:de:67:d4:95:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 22 17:52:15 2023 GMT
            Not After : May 20 17:57:15 2024 GMT
        Subject: CN=86583D9A31D3723213394256457C31364D9C4338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f2:20:1d:ea:5f:f0:e2:70:71:a0:df:07:a8:
                    50:c7:3d:c9:83:03:aa:ca:08:3b:19:f2:5d:a2:62:
                    0a:19:38:08:10:4d:49:c2:c2:0f:c8:29:d2:f6:1e:
                    54:eb:8f:ce:dd:11:b2:b9:84:b1:03:76:20:7c:b2:
                    8b:18:e2:71:f9:c6:88:04:19:da:95:25:66:7d:85:
                    09:4a:4d:5b:00:ea:7d:a9:d2:3c:3f:f5:12:ab:16:
                    e4:bb:a2:0d:06:f0:e0:c5:46:29:23:b9:13:76:69:
                    ac:56:bc:15:65:40:04:0d:d6:e0:6e:7a:31:fe:87:
                    40:47:e2:c4:0a:43:88:53:14:01:88:c1:1a:94:99:
                    37:11:4b:a3:0e:8f:ed:43:de:ac:41:5c:bb:ce:5b:
                    ca:45:63:7f:92:6a:c6:92:cb:3e:06:98:af:d3:8d:
                    3e:4f:96:bb:be:17:05:24:e4:12:68:3b:e4:45:a9:
                    61:f8:ee:6c:29:64:4b:41:50:41:2f:fb:46:cf:c7:
                    07:ac:21:45:76:a3:3b:91:93:f6:d6:67:04:b1:21:
                    42:ef:fa:2b:b7:3c:b8:1b:7c:a8:19:e5:d8:04:bc:
                    87:3d:e1:b7:8d:14:ff:bf:06:f1:c5:3e:fd:10:c6:
                    60:66:c7:54:45:85:73:46:f5:1b:58:0b:d2:83:dc:
                    8e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:58:3D:9A:31:D3:72:32:13:39:42:56:45:7C:31:36:4D:9C:43:38
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/0/86583D9A31D3723213394256457C31364D9C4338.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.160.0/22
                IPv6:
                  2804:6ec8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270618

    Signature Algorithm: sha256WithRSAEncryption
         1a:76:86:97:32:c8:8a:a4:28:fb:d9:3a:14:6d:e5:17:b1:e4:
         2d:52:65:37:94:54:89:ed:e8:d2:4c:5c:6b:2e:32:55:b9:92:
         ed:88:14:db:0d:44:d2:72:59:f6:a8:4d:cc:36:27:3c:68:2f:
         84:86:ea:0d:f7:79:f1:a5:02:70:88:b8:1a:ce:e0:61:d3:ad:
         28:5b:d8:3f:9b:d4:cb:47:42:5f:20:7a:73:72:c4:08:c8:e7:
         47:5b:5e:dc:67:0f:ad:b0:68:d5:a9:97:bf:66:59:09:b3:9e:
         2a:de:23:df:e0:d4:ee:ba:24:ed:d0:cc:95:6f:8a:23:f3:86:
         a9:79:d3:2c:8f:0e:0a:d5:82:a9:d3:a0:b6:fa:98:8d:87:d4:
         90:3b:08:a6:8f:81:b4:30:77:27:d0:f3:74:8c:06:a8:c2:a7:
         f8:85:d2:8b:87:ab:a1:ad:a0:93:90:9c:99:48:d5:5b:d0:99:
         a4:18:4e:42:f8:52:fa:04:d7:87:bf:0f:bc:ce:a3:c7:01:d6:
         d6:03:4d:4b:1c:a7:4a:d0:da:bc:57:a5:11:ec:bd:d8:a5:76:
         60:ba:ab:99:dc:71:f3:4b:43:1e:70:e2:6c:66:ea:93:36:43:
         7b:f3:af:f0:c7:71:6f:13:68:eb:57:64:5b:69:61:2a:5e:72:
         79:ff:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org