Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/87A3930CA799EBD4726EE8F14B458B2382064161.cer
File:                     87A3930CA799EBD4726EE8F14B458B2382064161.cer (raw, json)
Hash identifier:          dflLXCGyi0hoK5CgZCcPvF2R0b3CvvsnYxdxije2Q58=
Subject key identifier:   87:A3:93:0C:A7:99:EB:D4:72:6E:E8:F1:4B:45:8B:23:82:06:41:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1AAA4789505B295347F924FD906D93F8225837B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/87A3930CA799EBD4726EE8F14B458B2382064161.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 09 Oct 2022 16:41:56 +0000
Certificate not after:    Sun 08 Oct 2023 16:46:56 +0000
Subordinate resources:    AS: 268097
                          IP: 45.169.44.0/22
                          IP: 2804:57f4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:aa:47:89:50:5b:29:53:47:f9:24:fd:90:6d:93:f8:22:58:37:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  9 16:41:56 2022 GMT
            Not After : Oct  8 16:46:56 2023 GMT
        Subject: CN=87A3930CA799EBD4726EE8F14B458B2382064161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:1d:35:d9:4c:73:36:12:e1:3b:d7:a7:3b:
                    fb:0f:57:8f:92:68:a3:65:76:27:65:48:6a:1e:65:
                    fe:f9:7d:d0:6c:06:f5:fd:98:66:6b:d2:e1:a0:d9:
                    c2:14:8c:68:f7:bc:20:0e:f9:fd:46:e0:52:49:b1:
                    06:3d:bd:f8:a1:ec:87:ef:75:b5:c4:5b:c5:39:44:
                    6b:34:39:c4:54:dd:ac:57:6c:2f:8f:9f:b3:97:a0:
                    71:d1:37:49:93:07:cf:bf:6d:e3:cf:ac:8c:93:a6:
                    f5:c6:3a:64:52:67:b6:1f:84:4e:46:31:9d:e6:e4:
                    35:1d:87:87:bc:ec:3c:ac:48:3f:86:f1:9d:e3:ba:
                    af:ef:f2:55:17:c2:d3:b6:57:b3:6f:fb:ee:91:63:
                    cb:1b:7b:62:5b:b6:d2:d9:ed:45:20:cd:a3:a7:b4:
                    ee:0e:bc:ee:31:be:ca:04:8d:c0:45:ac:e7:50:fe:
                    53:77:a8:78:de:bc:a2:80:6b:27:54:86:03:a8:e1:
                    b1:e7:d8:e7:8b:28:6c:ec:27:57:f1:69:43:ae:11:
                    20:40:3c:e5:50:78:e0:94:13:88:97:e7:37:03:d3:
                    a6:e2:23:c0:32:f3:12:99:87:a2:0d:da:9c:75:d8:
                    a3:6c:77:43:78:ea:f0:67:53:bd:7a:2b:1f:2e:ec:
                    94:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:A3:93:0C:A7:99:EB:D4:72:6E:E8:F1:4B:45:8B:23:82:06:41:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/87A3930CA799EBD4726EE8F14B458B2382064161.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.44.0/22
                IPv6:
                  2804:57f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268097

    Signature Algorithm: sha256WithRSAEncryption
         30:f5:5a:e2:4e:67:21:c9:62:35:9b:d5:14:1a:1a:b5:9b:6a:
         59:f3:8b:0e:b0:33:c6:15:df:a3:e9:dc:ce:5f:2f:b2:fa:c2:
         84:cc:c5:7b:da:62:e6:d3:9d:33:70:b4:5f:ef:c1:de:64:51:
         a6:6b:65:cd:95:61:11:fa:bf:73:ef:d1:56:2a:63:7d:66:06:
         4d:ab:15:04:33:01:1c:7b:74:d2:3c:02:ab:9d:09:c1:5a:8c:
         b5:6f:02:ba:78:66:b2:38:e4:8b:ac:50:2c:3f:7c:50:c6:cc:
         8e:8c:72:15:4a:cd:d1:fc:5e:e7:11:33:e8:c9:8e:78:e7:a9:
         f5:00:95:d1:87:6e:77:ae:ee:17:72:63:84:9f:f2:ee:31:ce:
         6c:63:8e:f5:7d:ef:3e:f2:43:7f:89:1d:4a:f5:13:62:a6:ad:
         d1:62:25:79:c8:0f:0d:7b:d2:e9:dd:3a:ab:19:7e:35:5f:65:
         16:31:d9:74:d0:9d:79:d9:75:aa:11:c3:9b:cb:20:bb:92:62:
         05:39:bf:60:62:b2:89:ce:5d:3a:95:eb:54:4a:d2:7d:a4:eb:
         53:df:68:df:26:a2:75:e1:37:0c:7f:93:d8:d5:20:4a:36:68:
         6e:27:7f:e7:f2:2c:c5:19:3e:48:4f:72:a0:24:e0:84:eb:b7:
         a3:39:4f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 13:47:52 2025 by rpki-client