Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/87C5C5B7438AF465A595B8E480DEBC028EFF578E.cer
File:                     87C5C5B7438AF465A595B8E480DEBC028EFF578E.cer (raw, json)
Hash identifier:          hNI1de6mbncwb/uztX22VuIsBmYsnme9Jr4r1yrEsw4=
Subject key identifier:   87:C5:C5:B7:43:8A:F4:65:A5:95:B8:E4:80:DE:BC:02:8E:FF:57:8E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3D32CD74894302F3A5C5EAD3571373BAD85CB3A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/87C5C5B7438AF465A595B8E480DEBC028EFF578E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 18:18:34 +0000
Certificate not after:    Mon 21 Oct 2024 18:23:34 +0000
Subordinate resources:    AS: 264241
                          IP: 138.118.4.0/22
                          IP: 168.196.8.0/22
                          IP: 2804:24c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:32:cd:74:89:43:02:f3:a5:c5:ea:d3:57:13:73:ba:d8:5c:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 18:18:34 2023 GMT
            Not After : Oct 21 18:23:34 2024 GMT
        Subject: CN=87C5C5B7438AF465A595B8E480DEBC028EFF578E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:1d:2c:15:66:4c:48:6f:98:a8:bb:3e:fb:
                    28:45:27:21:df:d1:3a:41:11:bf:4d:54:63:d2:9f:
                    68:d6:01:de:2b:5d:5e:65:28:4c:21:99:f5:6a:2b:
                    15:7a:ff:52:76:27:19:e2:4d:b0:e5:c0:85:ee:c8:
                    88:81:86:db:93:67:af:c4:9e:32:88:29:64:f1:1c:
                    c7:2e:ff:88:c0:34:fc:6c:07:af:2c:14:c2:6d:fe:
                    e9:30:0f:0a:38:5c:e7:7d:af:36:5e:2a:a1:26:25:
                    8e:1c:16:12:f3:7f:e0:ee:5a:73:c9:16:10:13:63:
                    23:6b:90:7b:bc:ae:12:68:84:2f:0d:1f:98:68:99:
                    c5:14:9f:3e:aa:08:aa:5e:2c:40:cf:ac:65:fa:00:
                    66:41:15:f8:ae:34:21:e5:cc:c6:1c:cf:5d:e2:c6:
                    5c:a8:23:fd:36:16:2a:a3:55:5d:04:4b:79:07:92:
                    af:14:56:03:ee:33:0a:98:56:2e:d1:f0:f3:f1:01:
                    27:b8:22:f6:8e:ec:d6:8b:fb:1d:44:12:e5:b6:60:
                    a5:5c:59:7f:c4:13:a4:e2:f0:42:f0:b3:f9:2e:66:
                    68:5b:de:35:66:86:c0:25:8e:3b:80:45:b6:9d:e7:
                    a2:fb:61:e6:ca:c1:52:1f:b3:cc:22:6c:cf:b4:9e:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:C5:C5:B7:43:8A:F4:65:A5:95:B8:E4:80:DE:BC:02:8E:FF:57:8E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/87C5C5B7438AF465A595B8E480DEBC028EFF578E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.4.0/22
                  168.196.8.0/22
                IPv6:
                  2804:24c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264241

    Signature Algorithm: sha256WithRSAEncryption
         a3:76:66:2c:7e:43:77:40:a2:23:ab:9d:d7:f7:c3:ba:2c:f6:
         41:85:45:cd:8b:4c:2b:d4:97:ee:3e:63:20:c7:60:ca:43:0b:
         f8:c9:8d:42:4c:4a:d1:07:e9:05:cd:25:42:88:1e:e9:f0:6e:
         cb:9f:40:7f:ca:11:1f:85:02:2f:d0:f8:a2:df:42:19:44:6b:
         34:63:a8:6e:18:27:bb:fb:a7:8f:8f:43:fb:db:cc:b4:5d:71:
         3a:db:a2:31:eb:47:34:18:26:11:26:ad:47:24:ac:d7:8d:b0:
         79:b7:e2:04:c9:40:c8:44:f5:ec:f1:ea:d0:ee:83:1f:12:a0:
         43:fe:5b:7a:aa:79:3c:bf:d4:88:ad:9f:43:0b:f3:36:97:f9:
         a1:7a:05:41:5b:b4:ec:d1:dd:2d:7f:2a:d4:f5:44:fd:8c:59:
         f1:05:52:da:c1:93:67:9a:3c:62:cd:27:03:b3:a5:77:50:01:
         f8:8b:90:ec:0b:fb:c0:d2:d0:f7:91:87:b9:c8:c4:ba:51:f2:
         d9:cd:77:6d:0a:8a:ab:60:fa:d0:96:d8:12:6a:a3:17:33:f4:
         ed:0d:ec:bd:d0:9f:94:2d:f7:03:dd:41:9c:b2:88:e1:91:08:
         64:26:fe:02:6d:52:5a:75:c8:29:96:79:b9:27:9a:a5:8e:36:
         f9:68:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org