Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CA558C51089618956B90BDD9D82B777E7C1FF52A.cer
File:                     CA558C51089618956B90BDD9D82B777E7C1FF52A.cer (raw, json)
Hash identifier:          +u5E38X6MCysGehcFbqqCP3lkVUIT4wBNS61nj3SRJc=
Subject key identifier:   CA:55:8C:51:08:96:18:95:6B:90:BD:D9:D8:2B:77:7E:7C:1F:F5:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6366736D1FCF9A4A61B63C61135561B48891F144
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CA558C51089618956B90BDD9D82B777E7C1FF52A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 15:35:22 +0000
Certificate not after:    Mon 21 Oct 2024 15:40:22 +0000
Subordinate resources:    AS: 264900
                          IP: 168.228.8.0/22
                          IP: 170.80.236.0/22
                          IP: 2804:2f94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:66:73:6d:1f:cf:9a:4a:61:b6:3c:61:13:55:61:b4:88:91:f1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 15:35:22 2023 GMT
            Not After : Oct 21 15:40:22 2024 GMT
        Subject: CN=CA558C51089618956B90BDD9D82B777E7C1FF52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:28:44:ed:41:a0:35:6c:d0:2d:4f:cc:88:
                    bd:cd:65:3d:7a:70:72:da:62:1c:01:1b:37:74:7e:
                    73:ea:a5:63:a8:b5:7f:91:00:4d:28:04:e1:4f:bc:
                    bf:6c:59:dd:f5:2d:1f:35:83:59:9d:94:8a:5a:62:
                    3f:4d:1b:6d:73:cf:85:b1:a3:c1:08:6d:1b:e6:1a:
                    5b:02:05:04:a6:3f:66:a2:9b:44:e8:d7:02:08:6e:
                    54:70:f7:cb:ff:bd:4a:2a:56:94:47:e6:55:62:7e:
                    04:5e:bc:50:f0:0b:39:73:69:b7:2a:80:07:02:bb:
                    bb:c4:83:32:f4:58:ea:c5:3e:06:1d:5a:b3:10:3d:
                    6c:58:f1:84:a6:85:66:89:15:43:a0:e4:73:b5:3f:
                    d6:11:2e:a7:5b:0e:a9:b8:bb:d6:00:dd:e0:de:3c:
                    6a:d0:74:d7:f4:c5:e6:d4:cb:63:7b:cd:ba:04:07:
                    2c:21:38:d5:ec:41:27:d1:f2:82:0d:20:f1:27:c8:
                    40:84:74:2d:25:df:07:e1:8b:0e:ee:cc:3a:db:cd:
                    a2:da:f3:49:4b:fb:fb:5e:de:89:cb:76:e5:bd:c4:
                    58:78:f7:97:40:44:60:04:8c:69:52:49:13:29:68:
                    a6:62:4a:70:97:5a:46:c2:e6:04:e3:30:53:13:8c:
                    fe:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:55:8C:51:08:96:18:95:6B:90:BD:D9:D8:2B:77:7E:7C:1F:F5:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CA558C51089618956B90BDD9D82B777E7C1FF52A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.8.0/22
                  170.80.236.0/22
                IPv6:
                  2804:2f94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264900

    Signature Algorithm: sha256WithRSAEncryption
         88:33:1d:10:20:10:1e:42:d2:23:63:dc:73:d8:85:d2:78:6f:
         e2:17:e2:51:dd:6e:45:e3:cd:2a:eb:1a:dd:06:83:e2:3d:31:
         42:7f:83:c7:27:81:3b:eb:34:15:78:ee:c2:7f:38:a0:f1:f3:
         88:61:f8:29:96:8c:c3:ca:31:29:b2:c8:91:8e:00:f0:96:3e:
         26:ca:23:93:66:03:56:06:b0:d8:7a:aa:29:4a:20:ac:c9:07:
         43:29:ff:f2:46:43:95:91:3b:1c:3f:a1:b2:6f:f7:f3:47:8c:
         d0:96:7d:ca:33:5c:a5:63:23:73:ab:e9:1b:a3:c1:c0:19:e8:
         26:73:24:e1:61:43:0f:0a:39:2a:e7:62:6d:e4:2a:f6:83:db:
         be:9d:36:ab:41:54:2e:e4:60:fd:b1:78:d8:bd:82:4f:7e:dc:
         8f:7f:7d:9f:57:93:6a:b9:94:3f:01:2c:e6:b8:bc:46:30:21:
         f5:d4:fa:09:3a:26:c9:cf:5f:12:0b:7f:2d:cb:e3:25:9d:4b:
         e0:a7:f5:0e:f0:a3:8b:08:64:22:79:30:1a:b3:36:0d:bf:82:
         ad:f3:98:48:50:a9:9a:32:f3:a7:c1:85:e0:27:19:0c:6f:fb:
         ec:98:4b:ee:a3:0d:f7:9a:80:e5:e8:82:3f:3f:44:87:32:27:
         75:df:9c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org