Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/87FAEEAC57A774E51C582291B9B253EF7E0ACD80.cer
File:                     87FAEEAC57A774E51C582291B9B253EF7E0ACD80.cer (raw, json)
Hash identifier:          LIfNVpZo/BQj9XAUZd2gNQryCL6bOLviW+i22TOZV10=
Subject key identifier:   87:FA:EE:AC:57:A7:74:E5:1C:58:22:91:B9:B2:53:EF:7E:0A:CD:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51F6003FC26976567CB89F6E4AFAB63AB02822E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/87FAEEAC57A774E51C582291B9B253EF7E0ACD80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 19:12:00 +0000
Certificate not after:    Tue 03 Dec 2024 19:17:00 +0000
Subordinate resources:    AS: 268308
                          IP: 45.238.4.0/22
                          IP: 2804:4f28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f6:00:3f:c2:69:76:56:7c:b8:9f:6e:4a:fa:b6:3a:b0:28:22:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 19:12:00 2023 GMT
            Not After : Dec  3 19:17:00 2024 GMT
        Subject: CN=87FAEEAC57A774E51C582291B9B253EF7E0ACD80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:81:f9:d5:9d:dd:29:e7:b2:01:37:bd:d6:
                    99:2c:bf:48:d7:23:f0:ca:1b:b7:80:99:df:0a:6c:
                    6a:80:b4:9d:56:3b:16:00:f7:41:de:2d:59:f6:9f:
                    b7:c1:c8:60:8b:4f:a0:f1:a4:49:92:3f:88:87:ef:
                    f9:c4:84:f5:6a:c9:fb:ea:ae:36:57:4c:da:0e:d5:
                    6c:60:bb:01:10:0e:2b:d6:a6:f3:7c:3b:43:bc:14:
                    68:61:75:1b:6a:50:f9:4e:76:b0:dc:8c:da:84:27:
                    8d:e9:ee:32:bf:dd:dd:6b:d7:bb:ae:7e:45:ed:a9:
                    3f:88:ae:a3:a5:fe:26:93:c3:c4:41:74:2d:e6:e0:
                    ed:e9:07:3e:c6:4d:9d:52:d8:00:63:96:8c:80:14:
                    b5:c8:64:e5:5f:87:20:22:1f:87:dd:00:ab:9b:65:
                    bb:5c:f1:cf:2e:84:0f:66:13:08:64:2b:27:68:50:
                    ad:8b:6e:32:20:f8:4f:b1:5f:5a:48:35:13:26:63:
                    1b:35:73:6f:13:8f:79:10:7b:bf:29:fd:66:c3:c8:
                    a8:e7:a5:06:e5:5f:c0:59:6f:0f:62:22:b9:11:bd:
                    d9:2a:4d:40:55:88:5c:dd:31:7e:f6:de:de:93:df:
                    ca:ea:d9:bc:88:8f:cd:c4:ff:17:27:8e:fe:42:a9:
                    6d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:FA:EE:AC:57:A7:74:E5:1C:58:22:91:B9:B2:53:EF:7E:0A:CD:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/87FAEEAC57A774E51C582291B9B253EF7E0ACD80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.4.0/22
                IPv6:
                  2804:4f28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268308

    Signature Algorithm: sha256WithRSAEncryption
         b3:ba:43:4d:7d:43:61:5d:3c:5e:07:8d:dd:52:02:5f:b1:9b:
         a2:8e:1a:c7:06:f3:37:d2:21:56:69:51:34:10:e3:2b:b6:5a:
         5c:97:92:c6:88:cf:a4:ed:73:c3:4b:4f:57:85:78:f8:3a:01:
         3d:54:7d:ee:d3:13:d7:31:97:1a:12:e2:c7:18:e7:f1:92:cc:
         92:16:6c:df:30:67:50:01:21:85:bb:72:49:f7:14:bf:41:87:
         4e:9c:aa:ca:8a:cc:96:8a:3a:1a:7b:3d:da:b1:c8:98:a5:8c:
         f2:38:23:c9:d4:b1:62:dc:74:62:ba:e2:80:f8:4b:50:d7:2d:
         29:e1:52:bc:07:e5:2e:c9:88:9b:ca:67:fc:85:57:50:30:51:
         09:3b:24:7e:d3:9d:69:b2:c3:41:5d:91:76:a9:db:ba:bb:26:
         06:94:cd:a4:c8:63:80:73:24:39:03:ba:29:a1:aa:39:4a:d4:
         80:0b:20:59:e6:09:35:d6:7f:05:2c:de:9a:96:c3:67:eb:85:
         16:ed:72:07:cb:3a:31:0d:0a:da:b1:4e:fc:66:da:41:26:b2:
         20:ac:12:c1:b0:fd:ae:a3:40:c1:40:b9:2e:ca:58:8d:47:b1:
         07:af:96:68:bb:39:43:9a:ab:c2:56:22:22:32:2a:35:c0:64:
         e7:5d:57:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org