Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/487B20F12620C5E9D730F5695742A51F620AE3FB.cer
File:                     487B20F12620C5E9D730F5695742A51F620AE3FB.cer (raw, json)
Hash identifier:          wrqHqR34efvx3t7a9bScPg2+6Yyf6uq5qFeiBK5cisA=
Subject key identifier:   48:7B:20:F1:26:20:C5:E9:D7:30:F5:69:57:42:A5:1F:62:0A:E3:FB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23F25D6499D92A071A3F5467269C9EA134059B75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/487B20F12620C5E9D730F5695742A51F620AE3FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Nov 2023 14:36:31 +0000
Certificate not after:    Wed 30 Oct 2024 14:41:31 +0000
Subordinate resources:    AS: 262988
                          IP: 168.90.80.0/22
                          IP: 179.125.64.0/19
                          IP: 186.251.8.0/22
                          IP: 2804:1058::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f2:5d:64:99:d9:2a:07:1a:3f:54:67:26:9c:9e:a1:34:05:9b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  1 14:36:31 2023 GMT
            Not After : Oct 30 14:41:31 2024 GMT
        Subject: CN=487B20F12620C5E9D730F5695742A51F620AE3FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:6c:85:07:fc:cd:7e:3c:aa:bf:2a:e3:2b:ef:
                    a9:c2:bf:8f:d6:96:b4:ad:af:f9:de:7b:b6:43:9a:
                    00:87:ae:7e:97:e5:20:76:21:9a:59:87:76:8e:2c:
                    29:0c:46:68:49:9a:00:58:09:7b:5f:0d:cf:ae:09:
                    d4:93:f0:4f:7d:b0:74:72:1b:88:02:a3:41:14:d2:
                    8f:e2:d0:6a:7e:64:75:84:ee:72:d2:3a:8e:87:26:
                    8e:6e:22:99:97:03:f2:3d:c4:db:11:99:db:2e:41:
                    a8:0f:61:ab:8d:20:6d:7d:b3:ea:e2:c9:ac:91:fc:
                    9e:d7:bf:b9:e8:35:df:9e:b3:6d:d3:3f:19:d9:51:
                    44:22:00:f9:aa:38:db:71:9e:95:c9:5c:f1:eb:d2:
                    f4:62:b9:48:42:0e:9e:4c:f0:09:97:d6:9b:0c:bf:
                    4b:bd:8b:f6:36:5c:51:38:6d:11:2a:e2:e6:77:52:
                    40:1e:57:41:dc:f5:30:13:90:db:31:8b:63:20:ef:
                    ac:81:4a:97:9c:6a:79:d9:5f:fe:c7:fe:53:cc:39:
                    30:5a:66:a0:5c:29:62:b3:be:4a:88:d4:f6:17:f3:
                    bc:f8:68:2b:8d:fc:e5:7c:37:4c:7a:51:54:ae:ae:
                    03:ef:79:ab:c6:bd:7d:cf:10:7f:b7:79:ff:cb:a8:
                    66:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:7B:20:F1:26:20:C5:E9:D7:30:F5:69:57:42:A5:1F:62:0A:E3:FB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/487B20F12620C5E9D730F5695742A51F620AE3FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.80.0/22
                  179.125.64.0/19
                  186.251.8.0/22
                IPv6:
                  2804:1058::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262988

    Signature Algorithm: sha256WithRSAEncryption
         a9:39:35:de:92:aa:e0:ac:8c:66:16:fc:bf:1e:7b:56:8b:70:
         02:1c:7d:84:ac:01:e8:4b:4b:e3:3b:20:91:b2:45:94:a7:f4:
         fb:f0:c3:e5:3f:d5:a2:35:d4:ec:59:d2:6e:eb:44:84:c0:a1:
         52:a3:36:e9:39:95:b4:81:7e:c3:3b:7e:33:66:1f:02:6c:b4:
         9b:50:ab:7e:c4:be:9a:c3:c9:ef:af:89:71:b8:27:8c:e4:1c:
         af:a1:f0:12:42:26:89:1f:c1:7f:b2:81:09:ab:2e:4b:bf:ea:
         67:3f:6a:33:10:b9:93:3a:52:01:97:1d:75:28:e1:4a:c5:72:
         80:b0:57:65:97:a7:47:ad:d3:fc:cc:71:0c:1c:b2:47:4b:cc:
         3e:d1:78:05:15:ba:d3:c9:06:c4:5e:0c:88:66:ce:da:9b:30:
         14:8c:ff:b1:7b:1f:5d:08:1a:d1:72:ac:c7:de:05:86:0f:68:
         f2:5b:1a:36:cb:45:82:fc:b2:06:d5:2d:e9:02:63:37:8e:31:
         9a:77:6e:33:0f:fd:41:a6:ec:ab:56:c0:05:d4:19:69:75:3e:
         17:15:ac:39:28:1a:8f:b3:ee:41:26:2d:19:aa:bc:31:01:63:
         85:5d:6f:9b:7d:fe:bb:ff:0c:11:65:18:68:67:73:36:bc:d3:
         b8:a6:eb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org