Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/18F088BF8F4B34428C017C7D455486C5F6CEC271.cer
File:                     18F088BF8F4B34428C017C7D455486C5F6CEC271.cer (raw, json)
Hash identifier:          K/iPAtC38Xkod13H8M7kUBxIWBrP1BGq4YXKwQWklXo=
Subject key identifier:   18:F0:88:BF:8F:4B:34:42:8C:01:7C:7D:45:54:86:C5:F6:CE:C2:71
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       62463A4C33D8F76CA42E845A243C2858C2623C1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/0/18F088BF8F4B34428C017C7D455486C5F6CEC271.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 15:13:01 +0000
Certificate not after:    Fri 04 Oct 2024 15:18:01 +0000
Subordinate resources:    AS: 271567
                          IP: 181.232.248.0/23
                          IP: 2804:7d88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:46:3a:4c:33:d8:f7:6c:a4:2e:84:5a:24:3c:28:58:c2:62:3c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  6 15:13:01 2023 GMT
            Not After : Oct  4 15:18:01 2024 GMT
        Subject: CN=18F088BF8F4B34428C017C7D455486C5F6CEC271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:90:5b:13:34:a9:cf:0d:29:3f:21:fb:87:67:
                    dd:e5:50:b2:f5:15:0b:22:fc:27:76:f0:2e:c2:86:
                    a0:6f:10:0c:32:53:01:fd:15:77:6b:8b:f1:11:28:
                    30:19:49:6c:ce:48:c1:2c:12:e4:49:34:82:1b:88:
                    05:0c:d7:ed:8e:e4:e9:c8:12:09:45:34:e9:c4:cd:
                    cd:53:e8:ac:06:a5:0d:16:99:07:21:80:0a:30:d1:
                    ac:f9:ef:c1:e8:7f:4b:e5:4f:94:98:fd:6b:7c:1b:
                    8c:fa:07:d3:f7:b9:69:43:87:74:2b:95:ce:7e:2e:
                    f1:11:32:83:6f:fe:7a:88:ab:c9:31:b1:f4:32:6a:
                    ba:e0:9d:f4:d7:a1:7c:c8:48:9c:c2:cf:4c:cd:94:
                    15:5e:0d:0c:90:cb:e4:aa:3e:0d:1e:0e:ff:c5:0b:
                    26:10:c5:ea:b8:c5:9a:74:a4:c0:ff:4d:19:d1:93:
                    ba:63:8b:69:23:5b:e7:f4:c9:9e:9d:7d:54:cd:b3:
                    94:b4:43:65:05:f1:15:16:6d:8b:13:86:c1:57:58:
                    bc:ac:98:c0:eb:46:2c:18:00:39:0e:e3:58:a5:ae:
                    ee:a3:29:8b:f6:91:d7:ef:07:56:62:ec:ca:cd:9d:
                    0f:72:0d:4c:f8:12:3d:81:5b:45:6e:c8:01:2c:78:
                    91:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:F0:88:BF:8F:4B:34:42:8C:01:7C:7D:45:54:86:C5:F6:CE:C2:71
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/0/18F088BF8F4B34428C017C7D455486C5F6CEC271.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.248.0/23
                IPv6:
                  2804:7d88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271567

    Signature Algorithm: sha256WithRSAEncryption
         1f:14:d3:c5:4c:a8:c2:ca:75:f3:c8:d0:51:2e:d2:ba:9e:db:
         7a:87:12:6f:9a:b3:64:5b:13:42:ea:d1:89:17:e9:a4:97:ae:
         a5:4e:71:7b:da:28:90:e4:6a:29:0a:6e:9a:14:d7:7d:49:c5:
         42:e6:5b:8f:8d:78:aa:a2:78:10:e1:4c:3e:7a:8a:c3:be:04:
         11:8b:d4:5a:f4:9e:ea:b3:5e:2e:c3:43:c3:b5:4b:b5:53:f7:
         70:a0:57:67:9f:7b:b4:76:fd:51:ec:94:da:aa:f2:64:bc:f9:
         f4:1b:ae:29:fa:e0:25:6c:70:6e:44:5b:cc:13:a6:ba:13:6c:
         ab:80:a8:3a:b1:7d:47:7f:9b:30:50:9b:11:ec:58:24:53:04:
         7a:0d:88:b8:12:06:7f:48:d4:94:5c:de:1d:1a:b4:5b:5c:2c:
         60:99:05:27:59:6f:b6:1d:18:fb:ef:5a:0b:b3:6c:06:fa:93:
         a0:9d:8d:b6:92:f7:87:63:42:14:95:7e:9e:76:6b:57:27:23:
         1f:4c:f6:02:38:bf:03:89:bd:04:f2:f8:e9:07:84:6f:1e:f0:
         b6:6f:31:bc:6a:71:3a:35:94:5d:c1:14:73:26:b6:6c:67:5d:
         45:f8:9b:02:04:8f:56:40:89:a0:5a:33:f6:b2:bb:3f:25:1f:
         94:64:48:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org