Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/87B48E66D0E8EFEF5407A702A78A3F60D5697F71.cer
File:                     87B48E66D0E8EFEF5407A702A78A3F60D5697F71.cer (raw, json)
Hash identifier:          HxhNV3XWAiNMazymlQtC9zKbnw5bbOCBIKNEwpbOpd8=
Subject key identifier:   87:B4:8E:66:D0:E8:EF:EF:54:07:A7:02:A7:8A:3F:60:D5:69:7F:71
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25B6E6BEA249599A0302C3322ABAA71DD9334AA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/87B48E66D0E8EFEF5407A702A78A3F60D5697F71.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 May 2023 15:55:41 +0000
Certificate not after:    Sun 26 May 2024 16:00:41 +0000
Subordinate resources:    AS: 264084
                          IP: 143.202.248.0/22
                          IP: 170.81.184.0/22
                          IP: 2804:2a9c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b6:e6:be:a2:49:59:9a:03:02:c3:32:2a:ba:a7:1d:d9:33:4a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 28 15:55:41 2023 GMT
            Not After : May 26 16:00:41 2024 GMT
        Subject: CN=87B48E66D0E8EFEF5407A702A78A3F60D5697F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:93:93:4b:dc:6e:31:14:db:5b:8b:ab:0b:
                    5b:4e:f8:54:5e:68:42:f5:ad:c0:2f:8c:e6:1f:cc:
                    15:ec:a9:93:d4:d4:c0:17:b6:49:eb:a5:8f:61:4d:
                    48:9a:55:f2:8e:88:7b:07:b6:3a:b8:d7:98:c5:9b:
                    6d:b4:be:57:0e:67:8d:a9:d6:eb:ac:f7:3a:da:79:
                    07:6a:97:26:bd:ad:0c:a4:7a:5e:ab:5c:a0:85:6d:
                    e4:00:35:17:ac:13:b0:c6:d1:fd:fc:f8:ee:25:85:
                    df:0e:45:f3:22:45:76:66:93:78:af:6b:08:8b:88:
                    c1:55:68:e9:7c:3c:dd:52:39:85:a8:85:6d:ec:cf:
                    55:c9:89:43:2b:e4:f2:39:79:56:ca:c0:a3:92:ba:
                    76:03:f0:46:34:89:b8:af:4f:a6:d7:3f:e3:30:ed:
                    97:32:e7:09:35:d0:77:88:12:f6:b7:f6:3f:8b:b6:
                    44:e9:8f:6b:aa:36:e1:30:52:0a:8d:44:87:6a:b3:
                    cc:f1:19:de:e9:e4:49:57:32:43:25:ae:72:21:07:
                    fd:35:6c:22:5e:86:db:a6:36:12:7d:a2:b5:1c:a9:
                    a8:d6:98:03:b5:13:18:d6:cb:f4:c9:4e:0a:7c:22:
                    43:0c:1e:69:7e:d0:c1:49:e2:07:43:2d:23:97:2c:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:B4:8E:66:D0:E8:EF:EF:54:07:A7:02:A7:8A:3F:60:D5:69:7F:71
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/87B48E66D0E8EFEF5407A702A78A3F60D5697F71.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.248.0/22
                  170.81.184.0/22
                IPv6:
                  2804:2a9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264084

    Signature Algorithm: sha256WithRSAEncryption
         86:10:cd:8d:b0:76:c6:8b:33:8b:fb:7e:94:63:8b:06:82:f6:
         f3:31:9b:c6:d7:80:82:ab:59:ee:d2:a9:7b:ec:ef:36:c6:7c:
         c0:a5:2d:96:f1:65:8d:14:11:16:e8:e9:53:28:e3:b4:8d:01:
         ff:27:2f:d9:13:b9:6f:b5:aa:ea:76:41:37:a2:65:5f:06:72:
         db:c2:ef:c4:1b:90:f0:7c:63:5e:ca:68:29:a6:67:b1:67:1d:
         bd:48:eb:d6:a2:5a:9b:ee:7a:2d:76:cf:c9:38:ea:6a:5a:98:
         01:8b:15:f8:93:f9:d4:39:1c:3f:42:3c:e5:5a:ec:9d:29:d5:
         ef:b1:21:01:4d:aa:ea:ff:f1:2c:ac:d6:0e:75:0b:3c:15:f7:
         df:9f:fa:64:cf:e5:f1:83:8a:20:5e:cd:91:a8:70:eb:61:21:
         cd:d5:a3:7e:c4:2b:0b:74:07:d8:79:ec:a9:9f:48:21:ed:86:
         6a:86:7d:61:86:c7:f8:4a:61:4b:1e:5e:c1:89:7b:4a:16:9c:
         03:7e:62:ea:ad:fc:82:13:db:f5:6d:6b:40:79:8b:6e:f0:b1:
         ce:37:57:af:eb:a4:23:6f:d2:20:38:96:0f:e2:98:b3:96:8d:
         f7:67:26:8f:a7:f0:e7:f9:c7:af:ea:3e:8b:95:53:46:c3:a7:
         9c:5b:ec:a4
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUJbbmvqJJWZoDAsMyKrqnHdkzSqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjgxNTU1NDFaFw0yNDA1MjYxNjAwNDFaMDMxMTAvBgNV
BAMTKDg3QjQ4RTY2RDBFOEVGRUY1NDA3QTcwMkE3OEEzRjYwRDU2OTdGNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCplpOTS9xuMRTbW4urC1tO+FRe
aEL1rcAvjOYfzBXsqZPU1MAXtknrpY9hTUiaVfKOiHsHtjq415jFm220vlcOZ42p
1uus9zraeQdqlya9rQykel6rXKCFbeQANResE7DG0f38+O4lhd8ORfMiRXZmk3iv
awiLiMFVaOl8PN1SOYWohW3sz1XJiUMr5PI5eVbKwKOSunYD8EY0ibivT6bXP+Mw
7Zcy5wk10HeIEva39j+LtkTpj2uqNuEwUgqNRIdqs8zxGd7p5ElXMkMlrnIhB/01
bCJehtumNhJ9orUcqajWmAO1ExjWy/TJTgp8IkMMHml+0MFJ4gdDLSOXLN71AgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHtI5m0Ojv71QH
pwKnij9g1Wl/cTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CRzFybXNQYXZZOVJMRVQ4N1FBVFA4TGh6QWIzcmJhSFNE
ZnBrQ2RYUDM0Ri8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQkcxcm1zUGF2WTlSTEVUODdRQVRQOExoekFiM3JiYUhT
RGZwa0NkWFAzNEYvMC84N0I0OEU2NkQwRThFRkVGNTQwN0E3MDJBNzhBM0Y2MEQ1
Njk3RjcxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKPyvgDBAKqUbgwDQQC
AAIwBwMFACgEKpwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAeUMA0GCSqGSIb3
DQEBCwUAA4IBAQCGEM2NsHbGizOL+36UY4sGgvbzMZvG14CCq1nu0ql77O82xnzA
pS2W8WWNFBEW6OlTKOO0jQH/Jy/ZE7lvtarqdkE3omVfBnLbwu/EG5DwfGNeymgp
pmexZx29SOvWolqb7notds/JOOpqWpgBixX4k/nUORw/QjzlWuydKdXvsSEBTarq
//EsrNYOdQs8Ffffn/pkz+Xxg4ogXs2RqHDrYSHN1aN+xCsLdAfYeeypn0gh7YZq
hn1hhsf4SmFLHl7BiXtKFpwDfmLqrfyCE9v1bWtAeYtu8LHON1ev66Qjb9IgOJYP
4pizlo33ZyaPp/Dn+cev6j6LlVNGw6ecW+yk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org