Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.cer
File:                     A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.cer (raw, json)
Hash identifier:          vHpyIlV6uavfL+QbbjGPKDpxbJo6oFjeDd1a65oh24c=
Subject key identifier:   A5:9A:BE:7B:06:BA:78:CB:C1:B5:62:CF:C8:A8:90:C3:9B:BA:C8:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4CB86C9C920F340939E3C4D7A4AC1AEC14AEF4F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 23:03:47 +0000
Certificate not after:    Thu 23 May 2024 23:08:47 +0000
Subordinate resources:    AS: 52594
                          IP: 177.87.108.0/22
                          IP: 2804:8a04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b8:6c:9c:92:0f:34:09:39:e3:c4:d7:a4:ac:1a:ec:14:ae:f4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 23:03:47 2023 GMT
            Not After : May 23 23:08:47 2024 GMT
        Subject: CN=A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:23:0f:aa:94:6a:a3:9c:26:8d:f6:fa:23:a1:
                    b7:e4:b0:dc:8d:3b:2b:89:cf:70:38:60:72:61:df:
                    fc:a9:48:5e:39:2e:64:74:92:e0:9a:f9:c1:df:b5:
                    ac:d4:ab:be:a7:e9:cc:1d:d6:11:28:41:71:74:dd:
                    4d:a9:7c:31:b3:92:66:02:b9:d3:fd:60:d0:c9:78:
                    5c:02:a4:3a:72:3d:69:64:aa:84:3f:66:b8:14:29:
                    82:64:c9:6c:c9:9f:de:1d:75:d2:12:3b:37:6e:fa:
                    6e:fa:a3:b3:77:06:99:a2:a0:15:26:f9:4b:1e:2d:
                    d1:f7:00:8b:ce:52:54:af:bb:4d:05:6d:c9:7c:7b:
                    88:af:d5:7c:e9:ea:ac:1c:96:94:8a:67:06:03:ad:
                    61:1e:90:aa:8d:22:ce:9a:32:d4:55:50:f3:95:ac:
                    d1:f5:2a:b6:0b:e8:22:5c:13:67:5c:89:d0:10:03:
                    51:c9:10:71:cc:e1:eb:f2:8f:11:ed:a4:61:1e:8c:
                    91:88:47:2b:77:1e:d1:26:bf:2a:43:7f:d4:0e:29:
                    39:52:6e:cb:de:5e:14:cb:dc:54:28:64:64:e1:9c:
                    9b:6c:34:0b:0c:2e:49:78:b7:63:4f:67:aa:8a:b3:
                    a3:f5:d3:b1:22:2c:f1:31:15:79:38:47:37:fd:2a:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:9A:BE:7B:06:BA:78:CB:C1:B5:62:CF:C8:A8:90:C3:9B:BA:C8:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.108.0/22
                IPv6:
                  2804:8a04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52594

    Signature Algorithm: sha256WithRSAEncryption
         10:2c:a0:8c:84:ea:7c:e9:7c:45:a5:2f:08:2d:08:35:34:b8:
         c0:bc:d0:f6:35:1f:c3:a4:88:28:ce:2b:25:80:8b:53:c6:a6:
         ee:b6:8e:67:f7:27:e0:48:5f:7b:11:61:97:6b:05:6a:e6:21:
         67:0b:37:db:d1:5c:b5:7d:51:c0:36:b1:6c:cb:b7:52:21:d7:
         83:77:cf:aa:07:11:84:80:ee:19:9c:28:a8:91:9f:8f:e0:75:
         74:1c:bc:0c:81:6d:8e:b7:73:a7:db:90:c4:fe:9d:bd:5d:03:
         e9:9d:df:8f:c1:f3:76:88:af:bf:8f:c8:21:ee:10:44:82:39:
         a0:0a:cd:96:89:af:51:9e:32:43:9d:30:f1:94:4b:42:29:3a:
         2d:47:58:ed:c1:c2:40:2f:cb:48:9a:e6:68:34:32:63:11:4f:
         17:36:c6:df:31:70:c3:6c:1a:98:22:c3:06:90:aa:c5:8e:53:
         b2:0a:01:7e:10:90:91:73:9a:f3:9d:80:6f:63:df:b7:25:59:
         28:bd:b5:56:79:55:ec:e8:df:90:63:1b:61:cb:c8:20:b1:8c:
         3e:e6:64:c9:f7:1d:05:43:9f:18:8e:6e:ef:a6:6e:3c:dd:31:
         7c:1c:01:6d:89:b6:2b:10:10:d7:c8:41:23:bc:61:cb:df:fc:
         29:c9:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org