Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/88A110BAEEFCE574AF84A77CD4B79086F14DD89B.cer
File:                     88A110BAEEFCE574AF84A77CD4B79086F14DD89B.cer (raw, json)
Hash identifier:          iYgMxOLqXcbqqLJ4q+D3FoCBsHYp1QtFIg9Lnw/XoFI=
Subject key identifier:   88:A1:10:BA:EE:FC:E5:74:AF:84:A7:7C:D4:B7:90:86:F1:4D:D8:9B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       09CDD8F65258DF1A56C167A6F777C5E0F0DA7475
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1/88A110BAEEFCE574AF84A77CD4B79086F14DD89B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Nov 2022 13:33:08 +0000
Certificate not after:    Wed 08 Nov 2023 13:38:08 +0000
Subordinate resources:    AS: 271592
                          IP: 190.9.120.0/22
                          IP: 2804:7df0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:cd:d8:f6:52:58:df:1a:56:c1:67:a6:f7:77:c5:e0:f0:da:74:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 13:33:08 2022 GMT
            Not After : Nov  8 13:38:08 2023 GMT
        Subject: CN=88A110BAEEFCE574AF84A77CD4B79086F14DD89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:ef:c7:8f:e8:c5:b7:a8:84:6f:37:ff:48:
                    4e:65:95:f1:cb:17:ac:4a:1c:f8:d8:cc:6c:a9:08:
                    b9:90:62:60:bd:07:8c:a6:68:9a:59:2c:75:79:6c:
                    60:8e:a3:0e:df:be:7d:87:0f:8b:c2:e3:03:02:07:
                    b6:6f:41:a3:18:63:56:ca:c4:cc:45:d1:bf:1d:d3:
                    47:83:d0:77:a2:36:27:53:a8:37:84:06:c0:45:d4:
                    bf:fb:71:8f:cc:6d:91:55:77:ed:0e:4d:87:d4:b4:
                    3c:44:91:e6:17:d0:7f:2c:76:c2:5b:69:4b:c4:a8:
                    ee:bf:1d:e5:5e:3f:40:c2:e3:cf:f5:30:40:5e:d5:
                    7a:94:6b:2c:37:5f:92:11:b8:b6:8b:ab:75:c9:a8:
                    f7:63:ba:47:c2:f6:5b:9d:4c:26:71:47:a0:99:84:
                    42:aa:1b:0c:10:bd:59:1d:a8:58:f1:c9:c9:39:b9:
                    7b:6c:57:32:63:04:46:5c:ce:ba:30:ea:32:34:dd:
                    c6:e8:0d:32:59:38:b1:fb:3e:e8:2c:a4:c0:d3:4a:
                    97:2f:03:ab:a7:b2:ea:b1:41:50:4a:e4:42:50:ec:
                    84:ee:8c:26:25:49:a5:60:50:2d:24:73:eb:c0:ee:
                    7c:34:ca:4a:00:ab:f5:fd:07:bb:77:8b:7f:92:76:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:A1:10:BA:EE:FC:E5:74:AF:84:A7:7C:D4:B7:90:86:F1:4D:D8:9B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1/88A110BAEEFCE574AF84A77CD4B79086F14DD89B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.120.0/22
                IPv6:
                  2804:7df0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271592

    Signature Algorithm: sha256WithRSAEncryption
         1a:c6:08:19:3f:ef:8c:4b:88:32:df:6a:0f:21:8d:92:54:7e:
         f9:20:b7:92:83:c0:2e:19:56:4e:d1:d8:5c:9f:8a:08:21:7a:
         22:61:7b:20:b5:0d:1c:67:4d:f7:9d:12:85:40:e3:a9:d8:f5:
         be:26:1a:f6:6f:82:98:3f:13:8d:f2:7d:1d:54:63:fb:89:61:
         4f:22:19:2d:b4:e2:31:0e:86:35:31:5f:9c:c9:93:fc:96:db:
         98:06:ca:d0:3f:1e:47:bb:7b:3f:b4:58:e0:61:ad:60:c5:ae:
         95:4c:63:95:84:64:17:89:0b:97:bf:9d:65:94:51:bd:0d:01:
         dc:43:71:af:f0:da:5b:49:bb:93:94:a2:0a:00:5b:7e:02:93:
         7d:ff:3a:4f:9b:fe:57:fa:da:00:a6:6b:54:66:95:13:5e:b1:
         44:b8:9e:5d:1a:7b:6e:10:1f:00:25:74:61:75:01:bf:69:d7:
         38:26:7d:8c:8e:7d:70:4b:db:d6:f1:c0:0b:35:b2:2a:1e:63:
         8b:6d:c5:5b:36:ae:05:a4:ff:e6:bc:e1:24:1b:c9:e7:23:31:
         b1:63:90:31:ef:f6:42:3f:d2:04:02:92:7b:eb:f1:bd:be:f1:
         2b:45:05:bd:39:2c:3e:af:7e:06:82:ae:17:35:0f:8e:8a:49:
         de:5a:ff:0c
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUCc3Y9lJY3xpWwWem93fF4PDadHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjExMDkxMzMzMDhaFw0yMzExMDgxMzM4MDhaMDMxMTAvBgNV
BAMTKDg4QTExMEJBRUVGQ0U1NzRBRjg0QTc3Q0Q0Qjc5MDg2RjE0REQ4OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRM+/Hj+jFt6iEbzf/SE5llfHL
F6xKHPjYzGypCLmQYmC9B4ymaJpZLHV5bGCOow7fvn2HD4vC4wMCB7ZvQaMYY1bK
xMxF0b8d00eD0HeiNidTqDeEBsBF1L/7cY/MbZFVd+0OTYfUtDxEkeYX0H8sdsJb
aUvEqO6/HeVeP0DC48/1MEBe1XqUayw3X5IRuLaLq3XJqPdjukfC9ludTCZxR6CZ
hEKqGwwQvVkdqFjxyck5uXtsVzJjBEZczrow6jI03cboDTJZOLH7PugspMDTSpcv
A6unsuqxQVBK5EJQ7ITujCYlSaVgUC0kc+vA7nw0ykoAq/X9B7t3i3+Sdq4fAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSIoRC67vzldK+E
p3zUt5CG8U3YmzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81SENxQnFVV3lRSFc1RUZrQXdQUFhEalBWYkNCY0Y2b0ZR
SFNGck5wbW1qVC8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81SENxQnFVV3lRSFc1RUZrQXdQUFhEalBWYkNCY0Y2b0ZR
SFNGck5wbW1qVC8xLzg4QTExMEJBRUVGQ0U1NzRBRjg0QTc3Q0Q0Qjc5MDg2RjE0
REQ4OUIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr4JeDANBAIAAjAHAwUA
KAR98DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJOgwDQYJKoZIhvcNAQELBQAD
ggEBABrGCBk/74xLiDLfag8hjZJUfvkgt5KDwC4ZVk7R2FyfiggheiJheyC1DRxn
TfedEoVA46nY9b4mGvZvgpg/E43yfR1UY/uJYU8iGS204jEOhjUxX5zJk/yW25gG
ytA/Hke7ez+0WOBhrWDFrpVMY5WEZBeJC5e/nWWUUb0NAdxDca/w2ltJu5OUogoA
W34Ck33/Ok+b/lf62gCma1RmlRNesUS4nl0ae24QHwAldGF1Ab9p1zgmfYyOfXBL
29bxwAs1sioeY4ttxVs2rgWk/+a84SQbyecjMbFjkDHv9kI/0gQCknvr8b2+8StF
Bb05LD6vfgaCrhc1D46KSd5a/ww=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:02 2025 by rpki-client