Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer
File:                     87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer (raw, json)
Hash identifier:          wiWZrlLNY2drVk5zc/RWmLJZbGtrBF7maKPh6dQJGiU=
Subject key identifier:   87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       36F803F6CAA463B8980BCC069BB5416C81747F66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 17:14:02 +0000
Certificate not after:    Mon 23 Sep 2024 17:19:02 +0000
Subordinate resources:    AS: 270880
                          IP: 131.161.8.0/22
                          IP: 2804:72dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f8:03:f6:ca:a4:63:b8:98:0b:cc:06:9b:b5:41:6c:81:74:7f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 17:14:02 2023 GMT
            Not After : Sep 23 17:19:02 2024 GMT
        Subject: CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:99:9d:4d:d0:98:e4:6f:89:67:c9:57:7d:
                    ae:d2:7f:ba:69:66:9e:34:59:f7:0d:4e:a9:7d:82:
                    0f:63:42:18:e6:29:e2:7f:c1:fb:ce:55:0f:13:0c:
                    6b:c5:42:0a:12:5d:5b:d7:ae:62:91:25:48:c9:62:
                    e0:25:e5:e6:27:b7:df:c2:f4:ad:9c:7f:a0:cc:b6:
                    e0:35:b4:eb:05:99:64:62:f3:09:53:69:95:d5:d4:
                    29:17:a4:57:c2:57:7c:9c:dd:26:ca:2a:dd:8a:35:
                    be:ca:08:0d:ef:e8:37:f4:1d:c9:83:92:df:dd:f6:
                    33:2c:d6:4b:af:d4:f3:b0:90:82:40:cb:1c:e9:7c:
                    5d:af:6c:7a:83:f2:95:93:d9:c4:84:bb:17:43:a1:
                    d5:26:c0:a1:e4:df:18:50:76:54:e4:f3:f6:38:ef:
                    6a:7a:a8:d1:22:02:c1:0d:61:9c:e8:0a:60:c5:94:
                    44:26:64:54:6b:b5:83:29:df:2f:3c:dd:f0:5a:d2:
                    de:45:41:6e:e6:72:98:ba:6c:2a:76:97:67:be:6c:
                    85:c9:da:98:6d:b4:39:0e:d5:1c:af:16:7b:28:db:
                    18:77:75:18:04:f3:18:61:63:32:50:07:76:72:6e:
                    94:8c:96:86:ee:ef:6c:9a:05:f8:16:a0:f4:8d:db:
                    69:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.8.0/22
                IPv6:
                  2804:72dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270880

    Signature Algorithm: sha256WithRSAEncryption
         96:0a:96:88:b0:c7:a6:53:39:28:98:8f:94:c0:ba:f2:b0:3b:
         1c:62:29:f1:2c:52:51:1d:96:dc:8e:d0:e4:92:39:4c:d5:b9:
         c8:63:1d:17:c9:4f:1b:21:db:2b:73:09:93:63:f4:64:b0:f7:
         8f:b9:ef:0a:0f:86:14:1d:8c:d9:76:3c:67:3f:fb:10:85:3a:
         83:1e:ef:bd:cd:32:21:7a:08:45:f8:1c:6a:c7:8a:2a:42:6e:
         e9:38:20:5d:17:d1:cc:92:db:a6:74:f4:78:7f:5d:5b:ac:ca:
         64:1b:2d:ff:ce:a5:24:4a:ea:38:fe:29:2b:03:e7:9d:3e:b7:
         7a:aa:e9:d7:05:00:85:b6:5f:df:ce:76:53:3a:f7:46:8f:c7:
         d5:8e:ea:26:fb:e8:87:24:b3:db:e5:ec:99:5b:af:54:50:00:
         f8:a5:02:c2:73:b8:bf:a7:2b:09:7b:93:fd:7b:80:31:21:ed:
         42:22:5e:64:75:43:38:e3:87:38:12:01:f3:1d:5d:da:d2:44:
         9a:71:98:6a:80:7d:4e:85:06:25:ff:e2:91:bf:22:8d:7a:22:
         63:f2:1d:e5:2c:31:fc:d2:69:b9:52:6b:b0:b2:ff:c9:5e:db:
         68:00:9a:93:79:c4:d1:0f:b5:a7:88:2f:75:3f:dc:b6:a4:64:
         da:22:75:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org