Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/87F4FF5C216ACF5746BF34B54ADE14105191CA0E.cer
File:                     87F4FF5C216ACF5746BF34B54ADE14105191CA0E.cer (raw, json)
Hash identifier:          Tzkp65pMNtswwvd52mRNshNyEpmYcm9WUjZC7HT39w4=
Subject key identifier:   87:F4:FF:5C:21:6A:CF:57:46:BF:34:B5:4A:DE:14:10:51:91:CA:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3CA36ECEC32362DF4E751E117000999504FA24DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/87F4FF5C216ACF5746BF34B54ADE14105191CA0E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 May 2023 14:26:55 +0000
Certificate not after:    Mon 13 May 2024 14:31:55 +0000
Subordinate resources:    AS: 263360
                          IP: 191.37.136.0/22
                          IP: 2804:14f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a3:6e:ce:c3:23:62:df:4e:75:1e:11:70:00:99:95:04:fa:24:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 15 14:26:55 2023 GMT
            Not After : May 13 14:31:55 2024 GMT
        Subject: CN=87F4FF5C216ACF5746BF34B54ADE14105191CA0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:21:64:a5:c7:f2:7d:0c:68:d5:19:3a:62:
                    25:b7:fe:4d:d7:27:68:b6:00:f0:08:e5:42:f0:68:
                    9d:ed:98:2b:80:87:a9:94:f2:f1:4e:a1:8f:e3:83:
                    c0:fa:fd:e1:30:65:1d:82:3c:a2:ba:47:a8:6b:db:
                    13:2b:11:b2:96:df:31:f2:ba:a5:44:fb:a3:b3:af:
                    af:5d:7d:bc:d6:af:8a:dc:4a:5f:9b:d5:75:8a:2a:
                    5f:0b:80:81:7a:be:4e:21:6b:c1:4f:2c:76:34:58:
                    f4:59:49:e2:6c:24:31:b3:98:de:2b:f6:e1:d2:dc:
                    11:db:fc:0d:f3:e0:5f:4d:95:1b:d4:ff:51:a7:8d:
                    38:c0:3b:ed:88:c5:23:01:74:2f:5b:89:f6:93:40:
                    6e:44:60:e8:b5:79:ae:fa:36:a1:4a:da:18:fc:42:
                    57:fe:d1:ce:b1:be:2b:97:86:0b:ff:65:a5:35:62:
                    be:83:b4:75:c7:dc:b3:0f:f8:d9:34:7d:f9:fa:94:
                    a8:bc:6c:b7:b8:34:b0:77:3f:dd:42:10:a1:7b:9e:
                    65:1b:d7:2f:93:72:5e:50:da:0e:10:4c:02:ac:d4:
                    e6:32:af:63:c6:fc:f7:91:af:64:05:45:ad:bd:c9:
                    7c:83:2a:2b:ec:1a:74:7a:e2:6d:23:f4:9a:c5:0a:
                    4b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:F4:FF:5C:21:6A:CF:57:46:BF:34:B5:4A:DE:14:10:51:91:CA:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/87F4FF5C216ACF5746BF34B54ADE14105191CA0E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.136.0/22
                IPv6:
                  2804:14f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263360

    Signature Algorithm: sha256WithRSAEncryption
         32:b5:c5:d0:3c:48:16:31:b4:00:73:db:1c:b3:2d:df:82:c0:
         68:20:95:34:5a:06:b5:8c:f0:90:73:59:b7:4e:26:62:2a:12:
         5c:4c:00:41:7a:d3:67:76:d9:f6:a1:ff:7b:12:db:3d:c6:e5:
         56:bb:c2:d5:31:82:b3:6b:90:45:c1:af:20:9b:a8:d0:c0:01:
         4a:11:30:65:2f:b4:34:79:f9:66:25:70:84:6d:ce:36:07:7a:
         9b:69:b8:99:21:f6:99:9d:b7:c8:c6:c5:2c:d7:cd:a0:62:b3:
         49:1f:91:e3:91:01:5f:63:7f:c3:56:08:3c:fa:11:28:b1:7f:
         8b:a5:35:f0:26:ad:d7:02:f7:e0:59:29:a4:ab:d7:d2:89:73:
         c3:ef:38:7b:1b:6b:a9:74:b8:a4:c3:7f:07:f4:47:b9:84:8e:
         17:46:64:0a:80:e6:25:f2:6e:1e:e1:97:18:ee:08:40:d9:a8:
         1f:44:55:ea:3f:19:df:bd:6e:50:86:74:be:8c:16:e8:60:07:
         7a:77:d3:ae:65:3a:7e:f4:58:ff:7e:4b:74:f5:2d:72:e0:dd:
         1f:85:8a:b5:62:28:8d:ff:3a:0d:10:1b:70:76:18:c7:75:47:
         91:7a:15:55:9b:8f:1d:5f:0b:51:a7:06:71:89:8f:2b:a0:ad:
         5b:77:b4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org