Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/87940368E0E1033E9A6E2EB09AF0257ED36CF825.cer
File:                     87940368E0E1033E9A6E2EB09AF0257ED36CF825.cer (raw, json)
Hash identifier:          C4H2IBcO3T8qB+TKT5cWGgBjsWp689ZvExoO3Zh/ABs=
Subject key identifier:   87:94:03:68:E0:E1:03:3E:9A:6E:2E:B0:9A:F0:25:7E:D3:6C:F8:25
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B0F67F90135D8E453314B193AA21D0D77EA1CAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/87940368E0E1033E9A6E2EB09AF0257ED36CF825.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Aug 2023 15:12:32 +0000
Certificate not after:    Wed 31 Jul 2024 15:17:32 +0000
Subordinate resources:    AS: 266267
                          IP: 45.65.192.0/22
                          IP: 2804:3d50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0f:67:f9:01:35:d8:e4:53:31:4b:19:3a:a2:1d:0d:77:ea:1c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  2 15:12:32 2023 GMT
            Not After : Jul 31 15:17:32 2024 GMT
        Subject: CN=87940368E0E1033E9A6E2EB09AF0257ED36CF825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:da:ee:7f:15:79:50:17:ce:05:7f:ac:e1:
                    da:8f:17:a7:be:53:e8:7b:7c:6c:cc:25:0d:25:7e:
                    05:7b:f2:4f:ee:62:2c:54:90:2f:07:d3:4a:f0:b7:
                    f8:08:51:45:29:eb:df:b2:1f:4e:a5:0e:fa:80:18:
                    ad:5f:19:6a:aa:52:81:c4:a2:db:5e:cd:22:9c:8a:
                    95:2d:d2:1d:3a:fe:b2:2e:6a:60:77:33:13:cc:6b:
                    0e:ac:e7:c1:ab:f5:9f:3a:00:9b:80:89:20:8e:30:
                    61:99:cd:12:1c:e9:7c:98:c8:d3:26:18:94:d1:61:
                    07:58:66:ad:38:24:f2:87:b5:48:a2:8a:57:db:08:
                    f5:1b:4b:e1:c3:4f:21:12:14:61:21:17:53:d0:43:
                    4d:de:34:9d:c0:e3:44:3f:ef:9a:7b:98:81:37:e3:
                    b1:b5:6e:a5:26:87:de:f3:c4:8b:0f:dc:92:7e:25:
                    0b:84:aa:d4:76:f7:e5:c5:60:ab:a9:61:4e:d8:63:
                    66:60:0f:4b:73:bc:23:fb:51:59:37:28:9f:5b:5d:
                    a2:58:ed:0e:8f:40:64:71:23:13:b2:0e:e2:89:eb:
                    8b:89:56:e8:37:78:98:bc:d4:cb:56:fa:d4:b9:33:
                    f5:90:01:dc:cb:f9:0c:44:99:89:c2:0f:b3:f6:39:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:94:03:68:E0:E1:03:3E:9A:6E:2E:B0:9A:F0:25:7E:D3:6C:F8:25
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/87940368E0E1033E9A6E2EB09AF0257ED36CF825.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.192.0/22
                IPv6:
                  2804:3d50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266267

    Signature Algorithm: sha256WithRSAEncryption
         0e:70:f3:27:37:2f:8c:25:cd:a8:83:68:32:f1:d3:7c:fb:92:
         e7:c1:b4:ee:f2:25:7e:59:6d:36:21:9b:ab:3a:20:54:a4:0f:
         fb:8e:99:4d:46:aa:74:c6:26:51:2f:2e:e7:8f:ba:10:7d:4a:
         55:09:6b:b3:32:d6:41:08:2c:0c:f3:b9:38:fc:0b:ce:56:b5:
         da:7a:ef:21:81:87:7c:05:7b:0b:45:84:15:3d:97:77:14:82:
         9e:5f:a0:91:17:c0:56:c0:c2:94:fa:98:d5:5e:f4:bf:d9:40:
         d0:c4:c0:43:69:3b:4f:2d:07:1d:e2:88:c1:ae:3f:a6:62:81:
         06:32:34:a7:33:10:5f:61:68:3e:50:61:1d:5d:74:48:fb:98:
         30:1b:80:06:a7:89:42:3f:ef:86:a8:51:5d:27:a2:ae:af:c9:
         db:f2:94:3d:ad:cb:fa:f4:05:d6:4b:a7:1a:29:9e:5a:c4:3b:
         27:49:33:6b:8a:59:22:cd:be:a1:51:7a:31:ab:ab:67:dd:4c:
         87:8f:ce:2c:e3:6a:f0:34:4d:b0:ce:19:ab:4e:b7:9d:2d:18:
         e2:ec:f3:d1:3b:c3:1f:39:6b:9e:5b:77:3f:90:f9:f4:35:a6:
         58:1c:7b:af:74:4c:3b:ac:87:ad:b8:c8:12:d3:7f:00:3b:90:
         05:f6:6f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org