Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B58987A5DDAC06DAB91FB60D2D599C391C27D774.cer
File:                     B58987A5DDAC06DAB91FB60D2D599C391C27D774.cer (raw, json)
Hash identifier:          bK3w0DQJGbqCLrnGHCvWyE3jpAdnNNB9yV6uywgNnYs=
Subject key identifier:   B5:89:87:A5:DD:AC:06:DA:B9:1F:B6:0D:2D:59:9C:39:1C:27:D7:74
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1FBDE193DFCB5899BD253ECA251F4B5368AA3560
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/B58987A5DDAC06DAB91FB60D2D599C391C27D774.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 13:06:29 +0000
Certificate not after:    Tue 03 Sep 2024 13:11:29 +0000
Subordinate resources:    AS: 272677
                          IP: 179.63.84.0/22
                          IP: 2804:86f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bd:e1:93:df:cb:58:99:bd:25:3e:ca:25:1f:4b:53:68:aa:35:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 13:06:29 2023 GMT
            Not After : Sep  3 13:11:29 2024 GMT
        Subject: CN=B58987A5DDAC06DAB91FB60D2D599C391C27D774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:99:72:d4:ee:a7:5a:5d:75:0e:a3:fd:ff:
                    1c:59:de:47:46:bd:02:2f:ba:27:ba:d7:15:ce:a6:
                    60:c9:59:78:1d:ac:6d:35:7e:21:07:63:fd:88:91:
                    cd:29:f9:22:0a:e6:51:09:24:0d:3d:dd:f9:18:a4:
                    b2:6c:38:56:a3:28:87:a0:07:5d:94:5b:8d:4b:59:
                    7e:53:97:46:7f:4a:03:9b:a7:7f:c0:ee:87:b4:a9:
                    4c:13:89:80:b5:56:b5:72:39:4d:af:ab:a9:5b:6e:
                    db:81:ac:e9:f9:46:b2:65:94:ef:e0:b4:8f:d9:68:
                    47:ea:c1:cf:ad:c6:74:1a:cf:6f:49:0a:67:a0:1b:
                    9e:05:c2:d9:78:62:9f:f9:76:47:8c:b2:22:ee:2b:
                    12:5e:98:26:1d:a0:67:11:50:72:41:81:89:5e:fb:
                    54:ae:2b:29:d2:5f:9c:c1:24:16:82:b4:68:b1:ea:
                    83:88:22:a8:6c:eb:40:7b:8a:04:ca:ce:eb:bf:2d:
                    d3:be:3b:09:71:3c:03:97:52:32:c8:36:40:f0:21:
                    ca:e9:2d:c4:c5:5c:65:2f:e7:db:d9:6b:c2:12:af:
                    18:0d:94:fb:37:16:13:2a:e7:b4:9e:68:e7:07:d7:
                    47:55:7d:36:1f:61:3c:d0:96:89:29:f2:6e:4e:34:
                    20:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:89:87:A5:DD:AC:06:DA:B9:1F:B6:0D:2D:59:9C:39:1C:27:D7:74
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/B58987A5DDAC06DAB91FB60D2D599C391C27D774.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.84.0/22
                IPv6:
                  2804:86f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272677

    Signature Algorithm: sha256WithRSAEncryption
         31:31:df:13:ad:54:c3:0c:5d:98:93:fa:ea:0b:77:a1:2e:4a:
         0a:3d:37:75:82:68:aa:9c:97:ff:75:e3:a1:d4:46:3b:4e:0b:
         b5:8c:4d:2e:05:e8:2e:43:e8:fe:8e:97:7f:b0:98:3c:8a:c8:
         82:5f:52:8c:15:ea:7b:60:4d:a6:1e:ca:d2:02:54:d6:a7:43:
         b8:a7:81:17:14:f1:d1:3f:21:8b:de:3d:50:da:5a:e7:5b:ee:
         d6:dc:63:e1:60:4c:79:99:c1:d6:29:ed:ce:0d:9e:5a:31:49:
         fb:1c:b4:b6:eb:d2:6a:35:f5:33:4a:76:75:64:5f:96:14:39:
         23:d6:fd:68:be:22:6d:0a:53:f8:5f:9e:f0:f0:97:d2:25:59:
         15:10:62:f7:d4:c0:b6:e0:4c:79:89:9a:43:85:7a:44:8f:de:
         d2:a8:b9:e2:b9:41:d3:2a:59:8b:64:c9:7c:0a:1d:ed:d9:d8:
         a2:71:27:b2:fc:a6:91:2b:5c:48:f7:68:f3:10:f2:d9:19:31:
         d7:0d:41:aa:b4:56:89:ab:91:f1:48:be:7d:16:14:cb:90:54:
         16:24:20:41:83:ca:39:9e:0d:66:6d:4a:e4:3e:0c:f8:dd:33:
         30:b2:f0:73:c0:2c:58:55:cc:b0:46:15:ad:44:46:e9:11:0d:
         27:c5:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org