Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EC58A09B773A24544D7ADAF64AB34D06020C8E67.cer
File:                     EC58A09B773A24544D7ADAF64AB34D06020C8E67.cer (raw, json)
Hash identifier:          dYKDnNA5xaDS6OdOKpJlfTWgh02hB3AnonjSn/rjvoM=
Subject key identifier:   EC:58:A0:9B:77:3A:24:54:4D:7A:DA:F6:4A:B3:4D:06:02:0C:8E:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1481605D5F87C7D85FDA976E2E729FC847CDED2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/EC58A09B773A24544D7ADAF64AB34D06020C8E67.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 21:22:25 +0000
Certificate not after:    Tue 23 Jul 2024 21:27:25 +0000
Subordinate resources:    AS: 271068
                          IP: 179.48.72.0/22
                          IP: 2804:75c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:81:60:5d:5f:87:c7:d8:5f:da:97:6e:2e:72:9f:c8:47:cd:ed:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 21:22:25 2023 GMT
            Not After : Jul 23 21:27:25 2024 GMT
        Subject: CN=EC58A09B773A24544D7ADAF64AB34D06020C8E67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:be:d8:c1:05:3d:b1:cb:21:46:18:c8:96:d9:
                    62:0e:24:62:31:43:cb:75:61:d6:54:c8:d4:b2:07:
                    82:3c:a4:3f:4a:42:bf:d7:b8:eb:a6:b4:7a:e3:69:
                    03:09:b0:bf:b2:70:a4:53:af:12:f8:7d:14:bb:1d:
                    c5:da:4a:23:cd:09:a0:02:39:e1:0e:62:61:97:69:
                    c8:95:f7:34:f5:19:d5:bd:97:0f:02:f6:fd:d4:fd:
                    db:02:9d:d6:13:70:77:a7:c5:df:39:45:bb:12:e7:
                    67:f5:71:6f:cf:74:9d:8d:a1:ee:9d:10:0c:3b:69:
                    36:82:5b:07:f5:77:63:29:d0:67:25:ec:4b:3e:aa:
                    5e:47:19:dd:e9:13:88:fe:29:9b:c6:8c:33:37:36:
                    95:15:95:7a:df:60:3b:96:c3:33:fb:15:45:76:d5:
                    ba:51:ac:81:98:ba:70:a2:47:de:cc:b5:ea:f0:46:
                    69:de:ce:dc:a4:01:8f:7e:5e:40:30:86:66:b8:b0:
                    d4:9c:81:4d:25:45:78:9c:e3:3b:a3:87:dc:41:75:
                    0b:4a:f7:7b:95:19:03:b6:e1:2c:8c:91:3f:11:7a:
                    9d:ad:fa:76:b6:ab:7a:24:87:33:76:ac:3b:7c:69:
                    f9:b5:d6:bb:e2:a4:bf:c9:34:91:7c:cd:01:99:52:
                    7e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:58:A0:9B:77:3A:24:54:4D:7A:DA:F6:4A:B3:4D:06:02:0C:8E:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/EC58A09B773A24544D7ADAF64AB34D06020C8E67.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.72.0/22
                IPv6:
                  2804:75c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271068

    Signature Algorithm: sha256WithRSAEncryption
         99:15:a6:2b:ac:11:2c:af:ec:84:34:2e:de:4a:cb:7d:0c:68:
         63:be:c3:65:1e:c3:46:99:a5:2d:4f:e0:77:96:97:00:0e:5f:
         9a:3e:66:c2:1f:c4:c1:e0:51:9f:97:8c:30:65:dd:05:bf:5d:
         47:28:b3:11:89:a5:af:e0:2b:81:2e:79:8e:e0:a3:3e:45:2e:
         87:51:13:7d:2a:be:01:46:36:69:f2:78:60:e9:da:80:90:b4:
         b2:65:70:1d:dd:98:60:f2:ea:ea:a4:32:0e:33:66:8d:b3:6e:
         3e:f4:26:a2:84:72:ff:6e:fb:c6:a3:74:ac:78:29:c9:47:b8:
         78:1a:b1:37:68:c7:91:41:f4:e6:29:2d:f7:0f:7f:d8:88:5f:
         55:ec:db:86:bf:48:3f:d1:4f:95:e3:48:c2:f1:ba:a0:e6:27:
         89:d6:79:ba:0a:7c:3d:55:32:cc:08:71:8d:e5:c6:9e:56:8d:
         2a:75:d2:82:9c:1d:d6:5a:ed:9f:7b:a3:e8:81:7d:33:e9:00:
         9c:7f:5d:1d:30:3f:f2:6d:1e:57:77:44:cc:ff:69:a8:bd:dd:
         9c:c7:b0:c6:87:be:15:49:06:5b:b2:d3:db:9e:56:ed:11:2e:
         33:b4:11:6e:27:3a:56:df:6e:bf:fe:56:3d:e8:91:bb:2d:cc:
         5f:c1:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org