Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EB058BC4599DA18E2DE409D6D276CD29941C7B1A.cer
File:                     EB058BC4599DA18E2DE409D6D276CD29941C7B1A.cer (raw, json)
Hash identifier:          ZzZclRgINVsu9epKfGwOatXU4NXh7xYnlSEY5hcQ4U4=
Subject key identifier:   EB:05:8B:C4:59:9D:A1:8E:2D:E4:09:D6:D2:76:CD:29:94:1C:7B:1A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       665FD42F4C2BE3F4F91EF9D9345B2690FA4CC96C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/EB058BC4599DA18E2DE409D6D276CD29941C7B1A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Jan 2023 13:55:56 +0000
Certificate not after:    Mon 01 Jan 2024 14:00:56 +0000
Subordinate resources:    AS: 52795
                          IP: 177.39.216.0/21
                          IP: 2804:2144::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5f:d4:2f:4c:2b:e3:f4:f9:1e:f9:d9:34:5b:26:90:fa:4c:c9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 13:55:56 2023 GMT
            Not After : Jan  1 14:00:56 2024 GMT
        Subject: CN=EB058BC4599DA18E2DE409D6D276CD29941C7B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:c4:96:31:8f:51:92:fe:2c:d1:52:84:bd:
                    a2:2d:2e:36:7a:d0:8b:65:00:a1:f9:f3:90:fa:2e:
                    80:4f:33:0a:7d:17:6a:3c:84:85:10:d1:3d:7c:0d:
                    46:d0:e9:ad:5e:a6:6f:fd:39:68:78:dc:ab:8c:c0:
                    e1:22:67:51:72:4b:e4:17:de:92:4b:ad:b7:e7:91:
                    25:1c:75:c4:53:57:2b:93:f5:82:aa:3d:11:89:0b:
                    51:f2:21:38:a3:8c:6d:be:6a:75:a9:fa:c2:c4:f2:
                    ec:c3:9b:68:45:f6:cb:b2:49:32:66:ac:61:1d:b4:
                    03:cf:6c:69:3a:67:2d:6f:46:b3:9b:9a:06:dc:4f:
                    d6:a0:fb:39:89:a2:f3:d7:24:9f:73:b8:34:ae:c9:
                    54:51:bd:b4:0e:99:33:b8:b2:0d:b3:ff:7f:a2:47:
                    9c:b2:0c:21:fe:0e:4c:b8:ba:ca:e1:30:f3:ef:d6:
                    68:21:eb:3a:35:7e:e1:6e:6c:36:ca:a1:7d:43:2f:
                    5a:26:99:5c:51:d3:0e:f1:eb:e0:5c:92:28:b2:21:
                    1f:e8:08:1b:6d:6d:b6:7f:a8:09:e6:3a:d4:18:5e:
                    be:d4:72:84:45:07:c0:14:14:d4:00:6d:fc:ca:dd:
                    e8:4f:2f:3f:3e:18:01:80:6c:7f:38:56:d7:e8:8b:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:05:8B:C4:59:9D:A1:8E:2D:E4:09:D6:D2:76:CD:29:94:1C:7B:1A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/EB058BC4599DA18E2DE409D6D276CD29941C7B1A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.216.0/21
                IPv6:
                  2804:2144::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52795

    Signature Algorithm: sha256WithRSAEncryption
         32:a5:73:d9:ae:cc:5d:4c:c7:eb:ae:f0:50:d3:c1:ea:bc:90:
         fa:3a:01:32:e3:c4:95:3f:ba:ae:2f:d2:3e:21:2a:13:8e:2f:
         15:98:d8:b1:67:16:b0:c7:0e:d9:c5:a5:dd:16:73:c6:07:80:
         7c:c2:ad:2a:6f:5d:39:55:f0:da:1d:23:06:a2:59:3f:72:d1:
         1a:b2:04:70:84:84:34:ec:ab:10:a2:7c:df:08:26:ca:6b:1c:
         4b:59:6e:3c:1a:41:02:81:f1:2d:25:0e:c6:20:ba:ed:3a:a6:
         cc:59:07:55:61:ca:50:28:02:eb:c0:78:35:01:89:01:d3:4e:
         c5:e8:c6:1a:48:d8:ea:e4:80:7c:03:17:a5:b8:53:04:fd:6e:
         e8:9c:a4:ff:82:0b:6c:68:5b:8c:47:9f:15:66:d6:06:8e:31:
         24:a3:39:86:3d:86:23:bf:ad:0f:72:b8:be:8b:4f:1b:0e:3a:
         6d:68:f6:bf:ca:d1:fd:2e:bb:a7:bc:21:6d:6b:f3:37:81:fd:
         82:c5:ef:57:2b:40:4e:2a:a2:b8:34:c4:ee:34:e8:e6:ce:d2:
         6d:d2:17:1e:fd:24:6b:36:eb:c2:50:19:26:8b:71:42:14:99:
         7c:25:cf:5b:c7:f3:36:b9:ff:fe:01:84:a3:47:02:36:0b:83:
         e7:f3:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org