Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/88179750490F69D6815265DC81CD97BB402D9A2B.cer
File:                     88179750490F69D6815265DC81CD97BB402D9A2B.cer (raw, json)
Hash identifier:          YJ7CX9F0ZmKNuDMRhkBKzEBLPNoo9YhOphD/oogDr4M=
Subject key identifier:   88:17:97:50:49:0F:69:D6:81:52:65:DC:81:CD:97:BB:40:2D:9A:2B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59FC38347F93BF93DBAD98333DB0FC125C30F7E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/1/88179750490F69D6815265DC81CD97BB402D9A2B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Aug 2023 17:06:29 +0000
Certificate not after:    Mon 19 Aug 2024 17:11:29 +0000
Subordinate resources:    AS: 262582
                          IP: 138.99.32.0/22
                          IP: 177.84.96.0/21
                          IP: 177.93.88.0/21
                          IP: 2804:664::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fc:38:34:7f:93:bf:93:db:ad:98:33:3d:b0:fc:12:5c:30:f7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 21 17:06:29 2023 GMT
            Not After : Aug 19 17:11:29 2024 GMT
        Subject: CN=88179750490F69D6815265DC81CD97BB402D9A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:11:d5:d7:ca:4b:a2:38:b3:56:b4:69:40:
                    3e:f4:11:56:2c:55:65:c9:44:eb:fa:12:e8:11:ff:
                    a1:a8:6c:90:00:f7:1d:d2:1b:e8:8a:b1:63:b2:db:
                    de:73:cc:35:17:a9:d8:d6:42:15:15:70:0a:9b:ec:
                    61:70:15:49:9b:46:8f:64:fa:bf:2c:35:a0:c7:ae:
                    24:99:da:bc:f3:9b:e8:2e:d4:20:83:5a:f4:92:54:
                    d7:c2:d2:d9:db:f2:2f:d2:9a:60:00:ef:24:bb:eb:
                    29:8e:8a:b2:8f:76:b4:46:66:9f:90:f9:ed:46:31:
                    a1:85:d1:18:63:4f:ef:f9:e1:3a:8a:0a:16:88:b9:
                    45:1c:c6:ab:8a:58:b6:19:ee:56:02:b0:b4:c1:50:
                    87:17:d0:72:a4:23:61:c7:10:d0:0a:5b:e6:cc:ca:
                    57:cd:83:5a:4e:77:9b:eb:ea:8c:cf:a4:1d:51:9d:
                    6e:6a:e1:fc:09:5f:54:04:44:8e:02:31:9b:f6:54:
                    e0:a0:95:24:e4:c0:e2:6c:5c:0d:75:8c:46:d5:b2:
                    a7:2d:46:f0:2a:8f:9e:3e:3b:95:7e:0d:c9:57:c1:
                    2e:6b:6d:63:80:24:70:c0:db:75:db:64:a6:d5:3d:
                    46:af:07:5b:8c:79:4a:36:0d:8b:6a:56:64:3a:fa:
                    db:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:17:97:50:49:0F:69:D6:81:52:65:DC:81:CD:97:BB:40:2D:9A:2B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/1/88179750490F69D6815265DC81CD97BB402D9A2B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.32.0/22
                  177.84.96.0/21
                  177.93.88.0/21
                IPv6:
                  2804:664::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262582

    Signature Algorithm: sha256WithRSAEncryption
         a2:85:57:a1:41:43:b9:78:54:8a:3d:fc:0e:b7:36:1d:28:01:
         da:a3:cd:da:4d:51:bf:fc:e7:aa:61:73:55:b4:22:74:86:c4:
         36:a2:54:7d:ec:c3:27:6d:7c:bf:10:e4:3b:84:db:1e:e4:47:
         5f:af:7c:b5:c9:9c:b6:e9:cf:03:6b:33:e5:6f:c0:ed:b2:5b:
         bb:9e:87:36:f3:57:f8:39:36:8e:aa:55:13:ed:8d:59:75:1b:
         4f:a8:4c:c8:c7:46:f1:84:3a:4c:a1:d4:9d:96:93:b9:ed:20:
         80:f5:26:de:d1:dd:7c:b9:32:9d:91:50:99:71:9f:79:ce:d6:
         40:0c:83:9d:dd:8a:98:b6:f9:c3:4b:35:b8:c7:bf:82:f8:b0:
         72:08:02:ad:77:21:e3:ff:d8:9e:ee:fb:44:59:6f:e1:58:75:
         96:bc:f7:37:c0:e5:23:cc:7c:c0:63:98:d6:20:31:6b:83:a7:
         7b:70:fc:5c:f2:da:aa:dc:b3:60:f6:37:19:02:c7:cc:4c:e7:
         aa:b4:03:77:0e:3c:5e:6f:ac:80:3b:ab:b1:09:bd:9b:23:4a:
         9c:40:c0:d9:06:cd:49:1b:f4:65:3e:3b:d9:e9:99:24:57:1b:
         de:5f:ed:64:ea:56:84:a1:f1:d2:21:74:eb:9a:49:a8:32:40:
         cb:5b:78:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org