Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/880E36F20E1CF18198A5E42E120A8559F1C6F060.cer
File:                     880E36F20E1CF18198A5E42E120A8559F1C6F060.cer (raw, json)
Hash identifier:          p8Wy0v8P5Y4sCt0n2B5KGp1dhXO8KUbAnuyw7jk4TzU=
Subject key identifier:   88:0E:36:F2:0E:1C:F1:81:98:A5:E4:2E:12:0A:85:59:F1:C6:F0:60
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       217ECE034CE0C4A34E7FB0BC6F95B00F408CB4AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/880E36F20E1CF18198A5E42E120A8559F1C6F060.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 14:25:41 +0000
Certificate not after:    Mon 10 Mar 2025 14:30:41 +0000
Subordinate resources:    AS: 271554
                          IP: 179.63.96.0/22
                          IP: 2804:7d54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7e:ce:03:4c:e0:c4:a3:4e:7f:b0:bc:6f:95:b0:0f:40:8c:b4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 14:25:41 2024 GMT
            Not After : Mar 10 14:30:41 2025 GMT
        Subject: CN=880E36F20E1CF18198A5E42E120A8559F1C6F060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a3:a6:d5:bd:1b:b8:1a:85:78:dc:a6:54:6b:
                    cc:47:4e:d0:2e:c4:61:8e:8c:fc:7c:8e:8f:1c:0e:
                    90:ec:de:da:83:68:30:c3:f8:d9:8d:f7:7a:c3:08:
                    d5:33:98:bf:97:ff:af:84:d1:e5:4b:53:95:01:3f:
                    d6:ea:0c:d9:d8:19:e0:6c:7d:e5:09:9f:8e:e9:8b:
                    2a:b9:c4:d5:08:b9:65:1c:ef:1a:c4:ab:a8:9b:73:
                    ef:af:de:90:d8:91:6e:9b:87:ed:2e:4a:29:f0:bb:
                    9e:f1:35:dd:d9:28:9a:c4:47:fc:59:47:63:ac:34:
                    3e:d8:23:c3:cd:b5:df:6c:e2:d7:ef:4d:cc:ec:db:
                    db:f7:ab:bc:a6:03:4f:f2:a6:43:d1:a4:42:b0:ab:
                    89:21:30:5d:d3:8c:fb:4a:11:04:c8:9b:a9:88:44:
                    56:a4:d8:ed:c4:85:7e:ff:cb:d9:52:cd:c2:d0:f2:
                    36:7f:86:bc:a1:d4:d1:e1:e8:b1:8e:78:47:84:de:
                    05:2f:43:02:b5:d2:03:0d:49:c1:88:eb:5d:c8:fd:
                    6d:a9:ba:d0:f9:a3:fe:6f:a3:d1:ff:58:39:30:38:
                    b8:3f:ed:03:9b:53:82:8d:b1:14:6b:52:ee:3e:56:
                    5c:be:68:18:6a:32:fa:72:0a:b9:60:6a:4d:af:61:
                    81:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:0E:36:F2:0E:1C:F1:81:98:A5:E4:2E:12:0A:85:59:F1:C6:F0:60
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/880E36F20E1CF18198A5E42E120A8559F1C6F060.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.96.0/22
                IPv6:
                  2804:7d54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271554

    Signature Algorithm: sha256WithRSAEncryption
         1d:e8:05:a9:06:7f:35:7f:c1:72:f7:17:23:2e:92:36:1e:1d:
         8c:db:ae:10:c6:09:92:82:a4:ca:bf:1a:ec:76:92:35:9f:0a:
         23:f4:51:a8:76:ee:56:98:13:91:33:ca:58:8b:20:02:eb:be:
         6d:e5:ea:ff:76:b3:43:f1:38:76:1f:f5:be:81:bd:54:9f:03:
         69:b3:4f:ab:ea:fd:ea:6e:49:2a:e4:d1:69:0d:72:db:3f:71:
         c2:46:39:f6:5c:a5:f8:1b:09:68:59:e5:0b:78:03:6f:1b:4e:
         87:b3:bb:36:23:30:56:99:29:71:85:91:6b:45:a1:f2:92:87:
         c7:e5:68:a1:e5:df:ca:58:71:8b:2b:36:e8:6e:82:7d:be:e1:
         d1:2b:7a:d6:32:bf:3b:73:ab:92:36:fa:7d:d2:6c:e0:2d:bd:
         fb:c8:09:4d:68:29:33:b5:af:f1:09:f7:b1:d4:72:4e:ee:0d:
         62:c1:2e:9f:86:e9:a4:32:b2:2b:24:fc:a1:03:de:fe:75:3e:
         b5:21:42:50:15:2e:15:d7:e7:68:5e:f9:f2:24:ca:89:de:d2:
         bb:63:6d:51:53:da:c6:47:31:79:ac:7d:f8:52:f0:55:29:4a:
         bf:5d:c2:18:f5:ee:8c:91:d0:89:0f:06:eb:7d:e6:95:51:67:
         1d:3e:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org