Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/887CE880241074D54C4926F48FD8706CE4C8DC26.cer
File:                     887CE880241074D54C4926F48FD8706CE4C8DC26.cer (raw, json)
Hash identifier:          6E/cbKp+PI4ilftFPI+ftpa3ACAV0gw2+1V6w3CX+PQ=
Subject key identifier:   88:7C:E8:80:24:10:74:D5:4C:49:26:F4:8F:D8:70:6C:E4:C8:DC:26
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       52D0B26D431881C4B56AE6ED73E73A586FC6C693
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/887CE880241074D54C4926F48FD8706CE4C8DC26.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 10:19:09 +0000
Certificate not after:    Wed 04 Dec 2024 10:24:09 +0000
Subordinate resources:    AS: 267077
                          IP: 45.228.104.0/22
                          IP: 2804:47cc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d0:b2:6d:43:18:81:c4:b5:6a:e6:ed:73:e7:3a:58:6f:c6:c6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 10:19:09 2023 GMT
            Not After : Dec  4 10:24:09 2024 GMT
        Subject: CN=887CE880241074D54C4926F48FD8706CE4C8DC26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:cb:10:d2:23:27:91:2e:77:d4:77:f7:b2:
                    90:5c:d9:9e:5a:84:fa:f8:de:1f:66:82:f7:1b:ec:
                    f3:c9:48:2f:3d:a9:c9:36:8e:f3:7b:2b:39:ea:19:
                    5b:33:87:b4:61:2a:4d:23:bb:6f:04:80:86:e2:bf:
                    f5:ed:d2:5c:3a:23:7c:78:21:d5:ff:60:b7:41:ea:
                    6a:c1:e2:7a:d2:2d:21:2c:7a:87:04:a4:2c:47:60:
                    8e:bf:c3:4b:ec:3b:2b:aa:f8:f3:c4:1b:9a:61:00:
                    85:c4:8b:67:dd:16:cf:e1:1a:0c:b8:ef:72:cb:ec:
                    b6:1e:57:67:cb:f6:78:95:92:da:4f:0f:77:4f:82:
                    d6:48:d9:9a:57:4e:63:b1:a3:7b:24:e5:64:a8:42:
                    d0:d5:ce:2a:09:5c:8b:e5:65:15:fb:84:d9:b7:54:
                    b5:2a:13:f9:d6:d6:55:fb:32:d2:1c:bc:59:10:97:
                    b2:67:0d:c7:52:d7:a8:af:b3:ad:dc:83:45:ec:39:
                    32:14:61:18:e7:34:be:27:ef:5e:64:5e:4b:d9:f2:
                    d4:71:fb:42:2d:45:e9:ab:5d:e7:b9:dc:b0:3c:3c:
                    ce:43:93:89:11:09:d8:61:a4:fb:5b:8e:b6:47:d7:
                    cc:c8:2e:6c:cf:d8:10:55:37:b0:e0:a9:d3:b5:fb:
                    4f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:7C:E8:80:24:10:74:D5:4C:49:26:F4:8F:D8:70:6C:E4:C8:DC:26
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/887CE880241074D54C4926F48FD8706CE4C8DC26.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.104.0/22
                IPv6:
                  2804:47cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267077

    Signature Algorithm: sha256WithRSAEncryption
         2d:0b:42:13:c4:0b:60:1e:99:54:e4:0f:6a:18:f4:51:73:7f:
         52:0c:4c:ac:fb:58:0b:8e:bd:d5:58:5e:05:a5:fd:8f:f9:62:
         f9:b6:12:90:63:08:1b:af:b4:75:1a:8d:43:e3:38:af:ef:2c:
         a4:4b:81:2b:90:ae:b2:bd:25:37:fb:a7:5b:fe:07:7c:3a:d2:
         34:0f:0d:e0:b5:0a:10:59:56:88:52:fa:b6:6a:b3:6a:e3:05:
         d1:d6:22:00:f5:3d:df:59:ce:5d:bf:27:a6:67:14:5f:5e:ac:
         76:b7:61:c2:e6:f1:c8:96:ae:56:94:89:36:59:91:a7:b8:09:
         62:ad:8f:d4:3b:b1:6e:ea:2e:19:33:1f:ee:55:a4:b3:d9:58:
         57:42:36:05:96:00:18:c3:3a:46:f5:2b:29:e5:b5:d6:76:e0:
         31:5f:66:cd:06:95:20:95:5c:82:c8:3a:31:3e:f8:94:e9:80:
         79:dc:13:be:0d:1a:82:21:33:54:49:1c:db:19:a4:5d:18:b0:
         37:d9:13:db:5b:73:a3:a5:45:29:d1:0b:58:c5:36:82:ea:f9:
         b3:83:b5:63:39:66:c8:6d:5c:bc:c9:8a:14:96:52:75:15:f4:
         77:99:7b:59:7a:1f:3c:a1:b1:25:d9:ef:77:e9:a5:23:47:40:
         79:c4:9f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:06 2025 by rpki-client