Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/88AFC1DCAE3A776D894FA1A7F8C4E6B7231D5A1B.cer
File:                     88AFC1DCAE3A776D894FA1A7F8C4E6B7231D5A1B.cer (raw, json)
Hash identifier:          e5FgtZo1AzbVdHkiykKLuuZMdDHhUwHj+GgmLobDDwc=
Subject key identifier:   88:AF:C1:DC:AE:3A:77:6D:89:4F:A1:A7:F8:C4:E6:B7:23:1D:5A:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5AA33DBF83A128A56DD18960A9BAD90F2DBAAC5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/88AFC1DCAE3A776D894FA1A7F8C4E6B7231D5A1B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Nov 2023 18:02:59 +0000
Certificate not after:    Mon 04 Nov 2024 18:07:59 +0000
Subordinate resources:    AS: 273747
                          IP: 2804:8ba8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a3:3d:bf:83:a1:28:a5:6d:d1:89:60:a9:ba:d9:0f:2d:ba:ac:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  6 18:02:59 2023 GMT
            Not After : Nov  4 18:07:59 2024 GMT
        Subject: CN=88AFC1DCAE3A776D894FA1A7F8C4E6B7231D5A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:88:d5:d3:22:d4:cd:8b:55:81:6a:5f:a1:
                    6e:88:28:68:9b:a4:ec:62:11:53:67:9f:a0:4d:dd:
                    2a:29:7a:f1:e5:26:9f:eb:33:66:ee:b4:3c:bb:b7:
                    6a:33:3b:06:21:c7:3a:49:3e:79:1d:36:8c:93:1a:
                    33:0b:f4:3c:84:22:9e:c9:1c:2a:d0:f4:5a:07:fa:
                    fe:a6:55:47:02:f7:10:4e:bc:af:fc:f2:63:c5:e2:
                    4a:fe:1e:f5:96:9e:b0:8f:a0:53:7f:e4:f5:c0:7b:
                    a6:6b:9d:ff:73:8e:4a:65:40:58:66:27:78:88:f4:
                    1b:00:00:73:b2:6f:88:9e:11:96:5b:b6:93:a7:33:
                    37:83:9e:f3:6d:5a:80:57:ab:98:f1:d7:d8:b1:dd:
                    af:ee:c5:1a:ca:fe:34:d7:a2:5c:12:50:b4:30:86:
                    4d:15:4e:f4:4d:38:e8:bb:44:c5:9a:93:e1:a7:96:
                    0c:91:f0:f3:ac:68:c9:dc:b8:38:76:31:2f:75:13:
                    83:61:c1:b4:e2:47:dc:0d:12:be:12:2a:bf:a5:e0:
                    ec:c7:4f:08:07:b6:4c:7c:6c:0b:05:cb:4d:4c:d8:
                    9f:c1:14:1a:a3:e6:6c:dd:a1:29:3e:eb:0f:6e:fe:
                    70:87:61:c9:72:f0:bc:ab:1c:a3:01:e5:38:dd:44:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:AF:C1:DC:AE:3A:77:6D:89:4F:A1:A7:F8:C4:E6:B7:23:1D:5A:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/88AFC1DCAE3A776D894FA1A7F8C4E6B7231D5A1B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ba8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273747

    Signature Algorithm: sha256WithRSAEncryption
         00:a8:87:79:10:75:80:d8:48:ef:f5:5a:56:65:8e:23:c7:1d:
         b2:eb:1b:86:ac:81:75:f5:e4:82:64:f6:46:69:76:b1:a6:7a:
         ba:85:f3:ac:7c:16:ea:34:cc:da:e0:52:b8:c7:31:85:3b:e7:
         5e:b3:20:9d:06:2c:3b:c1:d8:7e:09:e9:0f:87:1a:53:a0:0b:
         a8:41:cf:ec:5c:77:39:81:db:05:65:70:21:ac:0e:9f:bc:27:
         c5:5f:da:22:70:f0:5b:61:1f:eb:d0:c5:38:b2:24:b1:df:12:
         3b:18:40:31:38:e1:a3:e6:05:7c:8a:44:a5:fa:b5:d4:a6:cf:
         26:d2:ee:a4:50:cc:0b:e7:59:80:40:98:fd:9c:38:25:e2:34:
         11:61:40:0a:45:bd:a1:8d:90:5c:3d:a8:55:c6:9f:e4:34:cd:
         c7:b1:30:9d:ca:c7:dc:6e:73:54:42:9c:a1:59:ec:cd:31:7e:
         76:82:6c:83:9d:0d:ed:02:17:56:6b:ac:b7:d3:42:62:ea:df:
         ca:b5:7b:ef:b4:88:80:b0:29:1c:9d:ff:a9:8d:e3:df:3f:fc:
         7c:6b:12:6b:11:f6:33:a9:45:1f:e6:da:9a:e8:d1:a6:31:5d:
         91:fe:e8:94:1a:e7:0c:d0:7a:51:10:d9:ce:bd:ad:2f:7f:d2:
         5d:c1:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org