Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/958B23AED034E35819DFAAB009EAECD7356EFCA9.cer
File:                     958B23AED034E35819DFAAB009EAECD7356EFCA9.cer (raw, json)
Hash identifier:          jVdTggW2FH7mzouVmTwMwknVmrkWA+A5xc3LaYBwCXA=
Subject key identifier:   95:8B:23:AE:D0:34:E3:58:19:DF:AA:B0:09:EA:EC:D7:35:6E:FC:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6BFA10895BC8EBEC9B0FC493A71901440C7957A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/958B23AED034E35819DFAAB009EAECD7356EFCA9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Mar 2023 16:45:10 +0000
Certificate not after:    Mon 18 Mar 2024 16:50:10 +0000
Subordinate resources:    AS: 28260
                          IP: 177.130.0.0/20
                          IP: 186.193.240.0/20
                          IP: 187.16.240.0/20
                          IP: 187.95.32.0/20
                          IP: 2804:28e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fa:10:89:5b:c8:eb:ec:9b:0f:c4:93:a7:19:01:44:0c:79:57:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 16:45:10 2023 GMT
            Not After : Mar 18 16:50:10 2024 GMT
        Subject: CN=958B23AED034E35819DFAAB009EAECD7356EFCA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:d8:ec:2c:0f:62:64:40:ac:76:aa:fa:0a:
                    45:a2:6f:a1:30:a1:df:ec:b3:f8:38:b3:98:06:e2:
                    15:f7:7c:90:f5:90:6b:31:04:43:dc:0e:7f:19:c2:
                    31:37:1a:d8:26:33:fa:dd:3f:34:64:3b:f6:4a:1c:
                    44:a0:b3:eb:8e:42:a9:9f:c4:80:5e:b7:b7:67:19:
                    3f:60:f5:f9:aa:2f:76:8b:b5:47:0d:8c:fb:83:f6:
                    ca:86:2d:8e:62:04:8c:e4:b4:91:90:34:e7:9c:c4:
                    88:b8:61:06:51:66:a7:ee:e7:57:ab:cb:7f:14:1d:
                    e8:b5:a0:45:ba:7f:6f:97:4f:c9:05:82:be:69:a9:
                    23:f7:0b:96:28:7d:be:0f:68:f7:df:7b:9d:92:9d:
                    29:f5:cd:6c:f5:24:2d:85:3a:0d:fd:cb:f1:5b:b8:
                    13:45:2c:f7:a5:40:12:86:c7:8d:65:9e:5e:fb:6f:
                    fd:52:ce:d8:43:0d:c9:3e:cf:63:83:93:43:d9:60:
                    f7:63:f4:9c:53:bb:b4:b3:e6:22:d5:ed:6a:10:f9:
                    eb:30:e1:f0:74:62:ce:cf:62:51:f6:e9:ae:17:ae:
                    01:af:9c:88:d7:3f:fa:d8:f0:19:eb:8d:14:9a:c4:
                    89:26:09:ed:05:19:4f:5b:cb:ee:7b:5e:ed:3e:95:
                    a1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:8B:23:AE:D0:34:E3:58:19:DF:AA:B0:09:EA:EC:D7:35:6E:FC:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/958B23AED034E35819DFAAB009EAECD7356EFCA9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.0.0/20
                  186.193.240.0/20
                  187.16.240.0/20
                  187.95.32.0/20
                IPv6:
                  2804:28e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28260

    Signature Algorithm: sha256WithRSAEncryption
         6d:88:46:a8:be:26:65:81:5f:f8:97:0c:ae:1e:f6:62:5d:30:
         c3:bf:f2:42:08:4d:9c:97:3a:32:70:79:d2:aa:8a:e2:42:3b:
         17:0a:87:54:c7:ab:c4:1d:bb:d3:32:0d:78:eb:21:8b:b6:57:
         a2:0b:ee:d6:48:98:91:fe:56:77:fb:78:3f:b4:1b:81:a6:22:
         76:17:ae:07:fb:d4:a9:59:ba:dc:ac:dc:18:e2:1b:d5:ff:5c:
         87:65:ae:b7:5c:d2:20:ba:ed:d9:1d:16:24:a1:b6:44:18:af:
         80:36:7f:bb:f1:a9:1c:7f:7c:c2:d5:de:40:13:8c:01:2f:0e:
         a4:0a:23:a3:e2:b0:8a:9b:0a:06:90:42:e9:56:22:41:d4:9f:
         ce:09:e5:85:65:af:9e:4a:ba:de:86:6d:3b:75:a1:89:f2:34:
         9a:c7:08:4d:1b:38:39:cb:a3:44:4c:5b:19:7d:d3:d0:67:bc:
         e6:a9:e5:c6:cc:6c:1f:2b:fd:82:9f:ce:36:92:cd:e8:c3:a6:
         c5:86:e0:d8:22:43:3f:38:9c:13:76:55:7c:5c:e9:3b:13:1d:
         68:86:82:95:07:4b:3a:12:c5:04:42:b2:17:ff:7e:0c:1e:2b:
         21:be:d2:ac:1b:87:0c:78:f5:18:6e:14:4c:c0:64:96:57:c9:
         5b:ec:c6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org