Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.cer
File:                     87EEF4599C8F5E030C03B069ABA7230FD1F342B4.cer (raw, json)
Hash identifier:          9+RncAqXPEQbslImj+O3KwyvkLiO81L2+qMQQJRyHAk=
Subject key identifier:   87:EE:F4:59:9C:8F:5E:03:0C:03:B0:69:AB:A7:23:0F:D1:F3:42:B4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B929C78C64A23535E299E7084A3DCDC91078FB5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 14:09:19 +0000
Certificate not after:    Wed 18 Dec 2024 14:14:19 +0000
Subordinate resources:    AS: 262899
                          IP: 45.165.128.0/22
                          IP: 2804:554c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:92:9c:78:c6:4a:23:53:5e:29:9e:70:84:a3:dc:dc:91:07:8f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 14:09:19 2023 GMT
            Not After : Dec 18 14:14:19 2024 GMT
        Subject: CN=87EEF4599C8F5E030C03B069ABA7230FD1F342B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3d:28:a0:3d:cb:3f:73:a5:f6:49:50:3f:d3:
                    7a:60:fa:d7:76:27:5b:1d:2e:ef:00:e0:f9:00:47:
                    54:6f:4e:e6:be:1c:ec:88:58:28:62:5b:ab:f0:71:
                    b1:74:8c:53:9b:3b:54:ac:71:f1:2e:e1:f7:76:80:
                    7d:ae:46:ad:2b:a3:d4:45:d6:22:06:4b:2f:5e:0c:
                    b1:51:b2:4e:15:d6:10:2a:01:c8:5c:59:29:d9:93:
                    7d:51:88:ea:b7:fc:cb:19:2e:0f:91:ec:7a:94:52:
                    7d:16:96:9f:45:6f:38:97:83:b4:f5:99:1b:fc:a0:
                    69:43:07:ec:13:b6:66:55:ee:73:25:38:84:c5:ba:
                    e8:7b:b1:7e:36:11:60:6c:82:3c:3e:4f:12:16:3d:
                    ee:bb:d2:c2:4d:9b:2f:16:6c:63:a5:5c:b4:35:9d:
                    b2:f0:26:bb:95:8d:9a:08:5f:34:6d:4a:ba:24:f3:
                    d8:13:db:6e:b2:70:be:ff:b1:3e:ae:18:2d:5b:9d:
                    9c:e7:bb:63:5b:4b:51:07:81:59:e8:11:2b:fb:7d:
                    d7:1d:9c:36:85:8d:dc:a5:8c:d9:ae:79:15:54:68:
                    8a:7e:4a:30:77:a4:65:00:48:bd:9b:f5:94:8b:7c:
                    63:34:75:5e:25:8e:82:b8:f5:fd:42:86:a0:58:8b:
                    ad:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:EE:F4:59:9C:8F:5E:03:0C:03:B0:69:AB:A7:23:0F:D1:F3:42:B4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.128.0/22
                IPv6:
                  2804:554c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262899

    Signature Algorithm: sha256WithRSAEncryption
         95:1a:cd:35:4d:30:d2:18:5b:d7:7d:79:07:c9:e0:ee:7e:00:
         96:e5:f3:e7:0c:76:fc:27:5d:bb:8e:b5:77:e1:5b:e2:96:2d:
         47:b7:aa:4b:47:1d:c1:71:14:22:a0:26:c9:d0:33:aa:83:56:
         31:37:2a:25:f9:84:02:ec:b1:03:6f:f2:2c:17:89:40:3b:19:
         b6:c2:67:3f:87:f8:77:13:fb:e6:65:f1:6f:78:f0:63:64:32:
         44:cb:e9:ab:c5:e3:64:1d:34:e7:92:16:48:4c:f6:05:09:0a:
         3b:17:a0:f7:34:e1:97:cf:c7:cf:7c:bc:2b:e7:57:aa:50:7e:
         8c:56:f0:38:d6:52:ab:e4:b6:25:40:28:7e:6a:48:73:fd:04:
         5c:6f:20:2f:ca:c9:86:a6:53:fc:d0:4c:2e:fd:1c:ef:91:99:
         fd:20:81:28:92:fe:56:a0:fc:1f:64:d1:16:59:ed:f6:e5:09:
         0c:eb:b1:24:1e:57:69:24:86:ae:3f:9f:55:f1:be:c7:96:4e:
         3b:3a:01:e6:d2:3a:6b:2b:59:3f:44:5d:34:4d:44:f4:12:ee:
         78:05:f9:72:97:5c:5c:e3:e6:9b:a0:dc:24:3d:ed:7f:69:8d:
         dd:55:0e:6d:2c:04:ae:ae:48:66:09:80:11:e4:d3:d3:9a:fa:
         41:ed:80:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org