Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/335F88C590E89975E1564FC6A9335E1A9A3668DE.cer
File:                     335F88C590E89975E1564FC6A9335E1A9A3668DE.cer (raw, json)
Hash identifier:          SR7pUduGH8EhYkATbT6MBnfmPM6ylhOKqcCQbP5L3B8=
Subject key identifier:   33:5F:88:C5:90:E8:99:75:E1:56:4F:C6:A9:33:5E:1A:9A:36:68:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       50B8C7836EEB053C394AC3773CC2B7DDCA03D574
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5AxgcTP5u5KZ7VUs7E8r7npo1CUXXj7C8Y59JEKBuMKV/0/335F88C590E89975E1564FC6A9335E1A9A3668DE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5AxgcTP5u5KZ7VUs7E8r7npo1CUXXj7C8Y59JEKBuMKV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Oct 2023 19:16:00 +0000
Certificate not after:    Thu 03 Oct 2024 19:21:00 +0000
Subordinate resources:    AS: 262526
                          IP: 177.67.192.0/21
                          IP: 177.200.176.0/20
                          IP: 2804:598::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b8:c7:83:6e:eb:05:3c:39:4a:c3:77:3c:c2:b7:dd:ca:03:d5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  5 19:16:00 2023 GMT
            Not After : Oct  3 19:21:00 2024 GMT
        Subject: CN=335F88C590E89975E1564FC6A9335E1A9A3668DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:ef:67:b3:9f:e0:38:28:3b:ec:09:f7:a7:
                    b4:6f:cf:43:10:8c:46:98:16:08:3d:d7:c0:15:e7:
                    cd:5c:2f:0b:2a:12:0b:6b:89:c2:74:53:17:de:76:
                    70:03:ce:79:23:10:4c:7b:7d:de:33:a8:f8:84:29:
                    dd:d9:9d:df:92:24:00:2e:84:2a:be:a0:4d:1f:9f:
                    44:0a:e1:ee:c6:e4:56:95:7e:13:38:3b:45:0d:02:
                    fa:99:4a:fa:eb:00:79:02:08:cc:ed:b2:8a:79:af:
                    b1:7f:a4:38:b1:cd:65:5a:a0:88:bb:f6:8f:74:4d:
                    b2:e6:ca:b2:37:63:8e:6b:71:6d:07:5c:a6:13:c7:
                    3d:69:2e:bb:59:67:76:16:8d:93:41:94:c4:97:95:
                    df:93:82:a6:7a:96:a5:36:49:62:18:d8:03:bd:fd:
                    5f:08:ad:3c:af:c3:aa:28:83:26:27:3a:8c:9e:6d:
                    94:3a:5e:28:00:01:3e:64:35:77:00:3c:17:13:e6:
                    54:34:85:58:3a:4a:d0:95:6f:a8:6d:87:92:33:ac:
                    a3:0e:c7:58:1a:2e:db:de:47:89:4a:36:43:be:a8:
                    61:13:57:f4:c5:2b:80:c8:dd:85:90:8b:85:53:98:
                    a3:f3:a4:2c:90:84:e3:9b:44:32:fd:31:07:b4:64:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:5F:88:C5:90:E8:99:75:E1:56:4F:C6:A9:33:5E:1A:9A:36:68:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5AxgcTP5u5KZ7VUs7E8r7npo1CUXXj7C8Y59JEKBuMKV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5AxgcTP5u5KZ7VUs7E8r7npo1CUXXj7C8Y59JEKBuMKV/0/335F88C590E89975E1564FC6A9335E1A9A3668DE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.192.0/21
                  177.200.176.0/20
                IPv6:
                  2804:598::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262526

    Signature Algorithm: sha256WithRSAEncryption
         44:28:7c:e1:3a:d6:d6:c6:eb:a8:7d:85:10:55:03:65:67:3e:
         27:e9:3b:53:13:a5:e8:bc:3c:d7:2b:8f:d8:26:b2:9a:e9:c9:
         b8:9a:c1:d8:f7:6e:3e:0a:d2:46:57:55:66:e7:d0:f3:e1:64:
         71:76:80:76:cd:e3:7f:61:fe:b5:f2:1b:f2:ab:06:13:fc:9d:
         a5:41:51:4b:10:64:eb:46:a5:68:4d:c9:24:f1:79:32:cb:7b:
         45:41:17:d2:27:ee:0d:53:19:f5:2c:28:60:ed:07:b9:f5:c7:
         32:5e:a7:a3:b3:18:98:cc:6b:78:6b:0c:ff:08:8c:20:5f:f6:
         4b:df:1e:a1:fd:e8:a2:12:ef:a9:6e:91:f4:00:6b:fe:f0:3f:
         5f:9f:6d:7e:3f:42:2d:5b:a9:9b:f8:49:86:e7:ac:69:87:98:
         59:32:51:14:40:95:bc:3b:44:a2:db:0c:54:f7:27:b0:3f:9a:
         40:ce:a9:63:13:2f:d8:73:8e:b7:12:d9:af:46:5e:fa:ab:cf:
         5b:84:b7:6b:4b:ce:49:3f:b3:c5:c5:db:f0:1a:5a:d4:21:e3:
         8b:2e:ea:8b:50:b8:e4:76:ab:f9:7e:af:94:55:9a:54:db:56:
         96:79:01:c3:ab:fa:a7:80:42:13:ab:d7:bc:da:f3:c7:16:46:
         7a:17:ff:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org