Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/088F189D0C73ADF77B005E95BF5583276C57D174.cer
File:                     088F189D0C73ADF77B005E95BF5583276C57D174.cer (raw, json)
Hash identifier:          K3XDAmA2deVhmECDm3DXutCL5Um+Ex1Dm1MWpNVpxzI=
Subject key identifier:   08:8F:18:9D:0C:73:AD:F7:7B:00:5E:95:BF:55:83:27:6C:57:D1:74
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27CF9F46B1F023E1A3B60EE4AD8BB67B52E009B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/088F189D0C73ADF77B005E95BF5583276C57D174.mft
caRepository:             rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Dec 2023 22:25:10 +0000
Certificate not after:    Fri 13 Dec 2024 22:30:10 +0000
Subordinate resources:    AS: 265379
                          IP: 168.194.64.0/22
                          IP: 2804:332c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cf:9f:46:b1:f0:23:e1:a3:b6:0e:e4:ad:8b:b6:7b:52:e0:09:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 22:25:10 2023 GMT
            Not After : Dec 13 22:30:10 2024 GMT
        Subject: CN=088F189D0C73ADF77B005E95BF5583276C57D174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:96:a3:a2:3b:e3:ad:1f:dd:ba:c7:7a:65:
                    3d:77:1f:4e:bb:48:eb:7b:d5:6b:e4:c4:f6:cb:92:
                    a7:e6:fe:a9:b3:78:d8:e6:72:28:37:10:68:71:62:
                    ad:18:69:27:d2:bc:d6:1d:8e:5f:1d:1a:bf:fb:31:
                    10:d3:3a:d5:99:5e:b6:8b:04:b5:17:f6:e3:3e:2d:
                    40:9b:f4:0d:bb:28:97:94:5e:2d:87:b6:1a:d1:fa:
                    ae:e5:45:0b:ad:65:7d:d4:19:3c:6a:6d:a6:27:e9:
                    bc:5f:48:2b:d8:52:db:01:21:53:f6:4b:22:75:5c:
                    28:2e:cc:d1:62:8e:5c:b7:9c:e1:38:33:6f:3a:3b:
                    5c:f8:9b:13:86:14:4e:03:c2:c6:b9:9e:76:35:5c:
                    a0:ed:84:e2:12:12:3a:2b:e2:c2:38:1a:ef:f4:d4:
                    37:b7:19:f4:3c:f1:5d:8b:65:2a:c6:18:3c:d6:bd:
                    df:47:b8:00:ee:f2:45:55:d7:da:2e:21:47:03:a5:
                    00:cb:90:97:1a:da:69:66:d5:20:f1:b2:ff:0a:02:
                    50:19:18:56:7a:4f:e3:d6:51:a2:9f:97:92:41:1a:
                    d0:fd:80:10:bc:ec:e9:a2:dd:cb:f8:16:eb:55:fc:
                    68:17:0c:f0:0a:85:58:b7:13:9e:f0:4b:cb:8c:68:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:8F:18:9D:0C:73:AD:F7:7B:00:5E:95:BF:55:83:27:6C:57:D1:74
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/088F189D0C73ADF77B005E95BF5583276C57D174.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.64.0/22
                IPv6:
                  2804:332c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265379

    Signature Algorithm: sha256WithRSAEncryption
         b6:f0:a0:1f:22:36:a3:93:6b:64:d2:c7:77:5b:ce:a1:b4:37:
         a2:7e:93:65:f7:a8:18:b2:85:8d:01:a6:17:2b:cb:ba:c6:95:
         d3:c2:b2:bd:1c:33:47:75:fe:c4:84:c0:11:c0:ec:c4:b5:db:
         db:3a:92:ca:dc:a1:31:f9:38:6e:09:db:6d:ec:35:86:40:7f:
         27:68:43:c3:1f:61:e5:23:a8:17:90:00:e1:a6:12:e6:ca:79:
         03:e7:20:23:51:c3:93:b5:9d:4b:8e:86:50:53:4e:0d:ac:06:
         b2:84:95:fe:67:11:20:c7:90:3d:26:3b:18:e9:7d:5f:a2:0d:
         23:75:6e:b4:48:18:24:53:de:98:d9:6c:b8:90:64:6b:97:4b:
         87:02:11:d1:f0:62:0c:03:3c:05:38:e7:19:fa:72:05:b2:ac:
         d7:af:88:b1:f8:a7:8c:3c:93:22:84:e3:2b:a5:b4:9b:90:94:
         9e:2b:dd:9b:14:5c:e1:ed:15:14:6e:f9:a2:69:4b:4e:c6:ee:
         77:b6:eb:5b:03:51:db:05:2d:a1:e0:91:e4:ce:ee:f0:9f:48:
         d2:17:55:81:43:00:a5:09:8e:5f:7a:e8:5c:15:8f:9b:5d:f2:
         dd:e1:1c:aa:85:ad:2c:a3:c1:0b:6c:35:d1:7f:eb:d9:05:a6:
         31:47:e8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org