Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D0590692F7D6B1EE39B74477FF54E33A9668696D.cer
File:                     D0590692F7D6B1EE39B74477FF54E33A9668696D.cer (raw, json)
Hash identifier:          PBQ12auKh3MUWM+LNilxolkteKGBowAEOnGU8N/ZaRc=
Subject key identifier:   D0:59:06:92:F7:D6:B1:EE:39:B7:44:77:FF:54:E3:3A:96:68:69:6D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1BC309F0EDFFF61B424383D839E316E0829CE33B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/D0590692F7D6B1EE39B74477FF54E33A9668696D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Jul 2023 23:15:37 +0000
Certificate not after:    Wed 24 Jul 2024 23:20:37 +0000
Subordinate resources:    AS: 61586
                          IP: 45.71.48.0/22
                          IP: 2804:44e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c3:09:f0:ed:ff:f6:1b:42:43:83:d8:39:e3:16:e0:82:9c:e3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 26 23:15:37 2023 GMT
            Not After : Jul 24 23:20:37 2024 GMT
        Subject: CN=D0590692F7D6B1EE39B74477FF54E33A9668696D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:15:20:fb:30:61:be:f0:2e:c9:78:83:c8:93:
                    ee:18:ab:7b:98:28:a9:83:e9:7d:d2:17:f8:ea:52:
                    24:e9:57:eb:99:05:7b:c8:64:48:42:65:a2:cb:79:
                    67:5c:2c:e8:8a:e5:60:05:7f:a7:2c:3c:c7:c9:3b:
                    50:df:e9:68:c0:14:3d:c7:4d:dc:e5:39:01:af:4c:
                    bc:d6:1b:3f:06:d4:d7:a6:bf:e4:83:34:d2:e8:47:
                    06:a6:ea:4f:ad:bb:fd:af:b7:c8:a8:5b:f9:6c:2f:
                    09:8a:87:b7:c6:9d:c5:88:8e:b0:66:06:b0:95:62:
                    fe:96:3a:cf:7f:82:df:68:5f:33:30:8f:af:35:d9:
                    5f:37:f9:c8:6c:1e:35:05:98:ac:38:ec:6a:06:84:
                    18:2c:b3:00:5b:33:f9:e0:a0:9c:4e:6a:29:b5:74:
                    28:0a:c4:e2:5b:ec:bd:bc:4b:e1:6e:4d:80:c6:bd:
                    de:a0:58:e3:4e:0a:a6:79:71:1b:26:31:d1:4d:2e:
                    b1:f5:a0:10:82:fe:13:99:4c:47:f4:83:0a:fe:b4:
                    99:ba:72:d1:02:83:71:c6:e1:e7:61:82:5e:a9:44:
                    be:6d:e4:a5:01:e0:ad:f8:8b:a5:1a:13:5e:f3:79:
                    f9:73:11:74:19:48:83:f4:a9:5b:ff:ce:4b:2c:1a:
                    74:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:59:06:92:F7:D6:B1:EE:39:B7:44:77:FF:54:E3:3A:96:68:69:6D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/D0590692F7D6B1EE39B74477FF54E33A9668696D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.48.0/22
                IPv6:
                  2804:44e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61586

    Signature Algorithm: sha256WithRSAEncryption
         8f:fd:eb:33:ae:1a:1d:15:d8:1d:4f:6a:20:11:f8:30:42:5f:
         ab:ab:ab:88:29:e0:92:cd:0f:15:66:81:90:5f:82:df:af:2c:
         7d:4f:b7:52:97:d6:b5:e6:13:e2:0b:c4:85:57:9f:1e:45:cc:
         fe:90:5b:24:ce:b4:fd:4a:52:98:16:4e:8a:06:44:d8:f7:a5:
         0b:5c:09:a2:a9:6b:d2:c5:b9:0a:f4:1a:dd:55:c5:a2:47:b6:
         1a:1a:fa:49:3a:0f:1e:6a:f7:45:f0:ad:2d:90:7f:b0:df:dc:
         d5:1a:b9:6f:81:6c:d9:6f:15:21:24:df:68:97:92:63:49:21:
         55:1d:fa:dc:55:13:32:b0:6c:d9:bc:c0:64:f3:65:50:0f:d4:
         c1:a4:1f:4b:9a:76:da:c6:fa:25:ad:48:13:27:32:20:f6:e6:
         6e:86:0e:95:df:ae:e8:cc:c3:bd:ac:a5:71:9b:96:12:cb:ba:
         15:1d:c5:3c:35:43:f3:28:20:3e:de:31:31:a6:d1:7c:6b:77:
         62:e0:57:3b:91:a3:a8:7a:ad:ad:02:f8:aa:b4:75:80:a1:d3:
         f1:8c:bd:bd:d6:3e:8f:af:d1:c8:f5:db:22:e1:13:8d:0c:d4:
         c1:c3:0f:0d:19:73:2f:4a:53:c1:52:7f:d1:07:90:1a:0f:ce:
         59:4f:6a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org