Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/881A10ACDBBB3FB024010CB9F560BF2BDDF90A8A.cer
File:                     881A10ACDBBB3FB024010CB9F560BF2BDDF90A8A.cer (raw, json)
Hash identifier:          bt0GR8jKB8TmPVjTX34q6r+2g1joyjHpk7KV3Iq0byo=
Subject key identifier:   88:1A:10:AC:DB:BB:3F:B0:24:01:0C:B9:F5:60:BF:2B:DD:F9:0A:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       055C42DEC355C786E2D8B3EE876903CE465F6230
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/881A10ACDBBB3FB024010CB9F560BF2BDDF90A8A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Apr 2022 13:40:24 +0000
Certificate not after:    Thu 06 Apr 2023 13:45:24 +0000
Subordinate resources:    AS: 270838
                          IP: 189.39.180.0/22
                          IP: 2804:7230::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5c:42:de:c3:55:c7:86:e2:d8:b3:ee:87:69:03:ce:46:5f:62:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  7 13:40:24 2022 GMT
            Not After : Apr  6 13:45:24 2023 GMT
        Subject: CN=881A10ACDBBB3FB024010CB9F560BF2BDDF90A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:7d:0a:56:74:7b:b5:ed:f4:43:45:20:89:
                    6e:28:ba:45:55:15:87:64:48:c3:c7:4d:54:97:55:
                    38:32:74:30:c1:77:32:b6:96:1f:64:b3:69:53:58:
                    57:fe:5a:9e:05:22:01:2f:3d:cd:ac:2c:48:20:b0:
                    cc:aa:1b:fa:9d:42:79:dc:72:c8:af:c8:84:b3:df:
                    e6:d0:58:04:20:61:e3:7f:88:1d:bd:73:c2:c4:c6:
                    ac:a4:10:ff:d3:86:f9:22:2c:2e:9f:8c:c1:a4:77:
                    b5:1e:39:6b:03:a7:56:05:45:13:4e:ba:76:5f:b2:
                    da:a0:5e:5a:d6:58:8a:57:3c:c5:8f:74:be:92:5b:
                    fd:4e:0d:a6:a2:29:0f:41:a8:67:39:1f:19:63:2f:
                    55:0a:80:ec:69:d1:7e:73:55:42:78:07:97:9d:94:
                    0d:b9:6d:e1:09:df:6e:be:97:2b:48:07:59:c1:92:
                    dd:bb:58:ba:a4:b6:ba:26:1e:e0:cf:39:64:c4:6d:
                    d9:79:5f:89:b2:9b:d8:f0:7b:e1:8a:07:d6:b6:fb:
                    56:d7:12:7c:87:0e:f4:3a:7b:c0:b1:c7:7e:8e:1e:
                    be:7b:cf:b7:10:ef:f1:8b:6d:78:8a:b3:57:3a:0f:
                    ed:61:00:37:1d:f3:35:2c:e0:aa:09:a5:3f:9f:e3:
                    4e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:1A:10:AC:DB:BB:3F:B0:24:01:0C:B9:F5:60:BF:2B:DD:F9:0A:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/881A10ACDBBB3FB024010CB9F560BF2BDDF90A8A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.180.0/22
                IPv6:
                  2804:7230::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270838

    Signature Algorithm: sha256WithRSAEncryption
         45:b9:c3:80:29:25:7c:c3:5e:3e:ee:91:87:ab:ef:1f:e0:a9:
         33:43:07:ae:5b:5f:70:54:6e:ce:30:87:20:f4:ae:f4:64:bb:
         57:bc:1f:3a:62:96:08:ed:d0:37:7e:8e:6e:85:a1:1e:d8:c5:
         d0:94:31:27:68:e9:65:68:63:e1:2a:8a:33:f6:f2:1e:c2:dc:
         46:53:7c:a4:26:f8:38:0e:a0:83:a6:7f:ca:7a:7d:d6:b0:5b:
         1f:e3:81:54:ea:c3:e3:6a:9f:af:10:3c:b7:89:34:14:fc:e4:
         6d:cf:61:bd:c9:bd:72:c8:ca:55:86:fe:74:84:cb:0b:d2:d0:
         76:f0:12:94:8d:e7:87:c7:0c:41:5f:73:2d:00:11:37:f3:db:
         2a:0b:86:26:88:b9:53:02:93:70:31:50:27:19:11:60:7f:82:
         48:99:d1:f4:77:79:23:9b:e8:db:02:3e:5c:b8:c8:98:ac:2b:
         b1:48:25:3a:36:71:8c:90:c7:03:f0:6a:d5:b9:8e:a7:4e:f6:
         41:fa:50:bd:1d:7f:11:d1:a3:11:3a:e2:b4:6e:6b:b3:a9:8b:
         fb:d7:31:dd:bd:ff:77:82:b8:51:1b:23:d5:26:13:f9:17:19:
         3f:90:c2:d1:a8:07:2b:13:d3:ae:9a:e3:48:df:3a:a6:c5:59:
         8b:95:f4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org