Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.cer
File:                     D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.cer (raw, json)
Hash identifier:          ItbTGNvcNN5R6VMMVcMdM45ePIB4vZWCE7o1f4ZCmJM=
Subject key identifier:   D5:98:63:A4:37:B6:DA:DA:51:B3:A9:C3:1D:5A:AC:9D:81:47:8A:BF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       090C1F49123E3B29E0DA3B2053C06AA83A0D7C47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2024 21:03:49 +0000
Certificate not after:    Wed 05 Mar 2025 21:08:49 +0000
Subordinate resources:    AS: 28606
                          IP: 138.59.112.0/22
                          IP: 201.20.160.0/20
                          IP: 2804:44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0c:1f:49:12:3e:3b:29:e0:da:3b:20:53:c0:6a:a8:3a:0d:7c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  6 21:03:49 2024 GMT
            Not After : Mar  5 21:08:49 2025 GMT
        Subject: CN=D59863A437B6DADA51B3A9C31D5AAC9D81478ABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c9:7c:b2:27:62:42:e7:9d:90:26:f0:d1:b6:
                    e8:d4:27:9f:ed:e0:15:83:63:3e:e7:0d:bc:f2:ab:
                    5c:d4:93:f1:2b:19:ef:aa:df:cb:13:06:4c:20:34:
                    a1:73:f1:5c:86:d5:02:6e:7b:59:3a:63:cc:59:2b:
                    7f:1b:1e:05:89:7d:67:52:8c:6d:f5:84:df:2e:fd:
                    7c:ba:75:21:61:ac:0a:95:9a:20:a1:4b:00:04:60:
                    be:5d:8d:5e:96:a8:c9:4f:0c:b6:9e:ce:a1:38:5f:
                    99:1a:de:05:94:b6:c4:53:1e:f8:75:ee:de:77:41:
                    c5:b3:a3:d0:b4:8d:20:09:34:34:0f:eb:b4:c2:26:
                    a7:15:56:ef:4c:78:19:6a:7f:d1:70:4f:20:ed:ee:
                    bb:b0:12:4d:43:1a:33:68:57:70:1c:40:e3:5c:e2:
                    0d:60:b5:b7:89:b0:0d:03:01:cf:00:12:90:b0:76:
                    03:f3:48:87:65:26:73:07:dc:ba:cd:4d:4b:04:2c:
                    02:cd:1d:1b:03:36:7a:0d:77:95:f8:55:37:36:72:
                    f9:81:de:83:19:b0:8b:bb:54:27:5c:00:2a:a5:fb:
                    89:89:6f:01:fe:e8:4e:40:13:d1:dd:20:58:c3:ab:
                    2b:fb:34:f2:df:11:6b:d3:07:08:41:5c:e7:74:a2:
                    d4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:98:63:A4:37:B6:DA:DA:51:B3:A9:C3:1D:5A:AC:9D:81:47:8A:BF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.112.0/22
                  201.20.160.0/20
                IPv6:
                  2804:44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28606

    Signature Algorithm: sha256WithRSAEncryption
         6a:19:88:7e:2a:e2:40:a0:8b:c4:47:d9:7a:44:e2:33:42:c2:
         27:e0:dd:b6:15:8d:1f:53:34:61:f4:fa:9b:77:c2:17:ee:e3:
         53:61:25:11:53:d0:c8:69:92:f0:32:a3:be:69:95:c7:3e:00:
         c2:29:9e:d2:88:6e:59:2c:7d:24:4f:31:48:0b:d5:a2:ec:db:
         7a:26:ca:78:f5:7f:94:70:37:ec:10:ba:7d:2d:d6:10:20:91:
         5b:d9:35:95:7f:c1:0b:dc:98:e4:7d:da:0d:2f:19:4c:04:f7:
         56:37:c7:a5:49:77:de:2a:ce:f2:90:04:2c:f2:a5:3b:d0:13:
         46:f3:6b:8d:18:7b:d5:50:19:be:c2:5e:d9:56:5d:19:ab:f9:
         f7:bd:b6:2b:63:04:8c:f0:b9:92:ce:c6:2b:1e:c8:19:08:df:
         06:3f:bf:1d:02:4d:bb:8d:95:32:4e:74:20:3a:ca:c1:ca:2c:
         ec:b4:a4:4d:72:c7:67:9b:d6:49:4f:5d:9e:4e:59:b9:e0:a5:
         2e:fe:67:20:84:0b:d9:ff:24:3b:cf:07:9a:8a:d4:9d:e2:ec:
         1a:e7:70:73:3d:9c:f1:63:86:a3:91:7f:23:b4:93:2a:62:90:
         9b:fb:64:d2:c8:1c:bc:94:75:8d:fe:ca:d9:ba:69:e8:aa:2d:
         81:45:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org