Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D58BDF9714001D4DF114FE00EE6526934B0CD314.cer
File:                     D58BDF9714001D4DF114FE00EE6526934B0CD314.cer (raw, json)
Hash identifier:          MPruqx9Ws7EhpQy9Lm1SboCmliBa6HSJpZP7o287wCY=
Subject key identifier:   D5:8B:DF:97:14:00:1D:4D:F1:14:FE:00:EE:65:26:93:4B:0C:D3:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       63F2EF071D8BBCE7E62773696FBD1A71CC439015
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/D58BDF9714001D4DF114FE00EE6526934B0CD314.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 19:05:56 +0000
Certificate not after:    Tue 23 Jul 2024 19:10:56 +0000
Subordinate resources:    AS: 61726
                          IP: 131.72.96.0/22
                          IP: 2804:1b68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f2:ef:07:1d:8b:bc:e7:e6:27:73:69:6f:bd:1a:71:cc:43:90:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 19:05:56 2023 GMT
            Not After : Jul 23 19:10:56 2024 GMT
        Subject: CN=D58BDF9714001D4DF114FE00EE6526934B0CD314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:86:cb:78:55:bb:b0:ac:87:00:c0:4f:02:e8:
                    50:ee:58:f1:b2:89:2c:3c:fb:c2:20:d2:c8:15:b8:
                    0b:a6:41:5c:cf:f6:6b:a9:31:a8:13:d8:9b:a3:51:
                    09:c5:a8:1e:42:7f:59:88:6f:85:fd:73:65:80:02:
                    ff:87:86:7c:34:d5:ea:ea:75:b7:7c:92:32:ee:87:
                    56:49:65:ba:42:72:a7:ba:83:eb:18:ea:18:01:28:
                    94:d2:9b:f4:35:50:6c:99:2c:49:a4:5f:08:6c:23:
                    1f:a8:1b:0d:6f:98:ad:1a:16:71:7c:91:c1:e8:b1:
                    63:62:b0:17:80:c6:18:4e:c4:c3:69:60:39:4e:9b:
                    4f:3c:3c:ab:b1:3a:3f:6d:cd:77:18:5a:fd:ed:51:
                    72:c6:db:23:b0:8f:ce:96:77:00:d7:c3:15:99:0d:
                    64:77:3b:d4:3c:f2:b9:8c:3f:e1:9b:50:6f:9c:c2:
                    4d:97:aa:71:67:26:71:03:a9:98:0a:4d:d4:89:db:
                    67:7c:dc:d5:a1:6e:42:ab:a7:ff:26:42:a3:4a:aa:
                    93:30:cd:b8:77:77:f1:15:c4:30:cf:96:69:a9:c3:
                    28:a0:28:4c:51:a8:54:a8:06:aa:44:d1:ae:12:cf:
                    56:03:54:2b:e1:d0:74:de:a0:18:da:97:25:78:b4:
                    50:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:8B:DF:97:14:00:1D:4D:F1:14:FE:00:EE:65:26:93:4B:0C:D3:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/D58BDF9714001D4DF114FE00EE6526934B0CD314.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.96.0/22
                IPv6:
                  2804:1b68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61726

    Signature Algorithm: sha256WithRSAEncryption
         5e:26:52:e2:22:fe:16:82:41:ca:1f:7e:e9:07:bc:2f:cc:17:
         b8:0a:e1:31:0d:3e:df:c8:84:26:d7:e3:98:e1:95:ab:5d:bc:
         5c:69:40:8c:66:f6:70:b9:94:e7:91:52:d1:a9:4b:d4:77:eb:
         43:92:9a:1c:9b:c0:93:e8:6c:c4:a4:82:68:e7:a6:3c:6c:87:
         92:fd:be:20:a9:bc:1e:3d:3b:f3:e0:4a:fb:7d:65:eb:9e:0e:
         84:bd:3e:97:33:ca:70:a0:67:77:c4:fc:4d:90:78:63:7b:9e:
         dd:e9:6e:28:7f:90:9e:6d:90:5c:19:b3:82:79:38:05:5f:d1:
         92:e9:06:e0:b7:5c:59:76:31:d2:a5:b2:57:a0:f6:59:10:63:
         60:f8:68:9e:0c:61:d8:14:1c:e7:15:78:67:87:d0:b7:55:59:
         93:e7:15:4d:e8:73:45:49:bc:a6:76:50:0c:c9:5e:f3:a3:ed:
         a7:7a:98:e5:22:1c:69:b5:bb:84:7f:6c:64:a5:f0:b6:ff:f3:
         85:d7:9b:48:b1:40:fc:8f:b7:f1:80:fc:6c:d8:6c:fd:cf:66:
         93:7e:df:2e:df:b0:de:3b:59:a8:01:79:e1:cd:52:2b:f8:2f:
         81:ec:2d:c1:58:c7:07:d5:48:03:0c:dc:83:20:e0:3d:9b:dc:
         e4:e2:4f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org