Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C.cer
File:                     88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C.cer (raw, json)
Hash identifier:          aHkoMSvCy+jnURBIwNXAptq5hL3nuc8bv1Y2JIgRGoU=
Subject key identifier:   88:EE:4C:B4:E5:DF:EC:FA:53:60:BE:82:4F:04:DD:4D:07:A9:CE:3C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       312036593F0D703AA085A574659BE8DB96278773
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/0/88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Feb 2024 16:25:14 +0000
Certificate not after:    Mon 03 Feb 2025 16:30:14 +0000
Subordinate resources:    AS: 270540
                          IP: 189.85.112.0/22
                          IP: 2804:6d8c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:20:36:59:3f:0d:70:3a:a0:85:a5:74:65:9b:e8:db:96:27:87:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  5 16:25:14 2024 GMT
            Not After : Feb  3 16:30:14 2025 GMT
        Subject: CN=88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:4b:65:f4:e7:f7:64:0a:e1:1a:40:cf:23:
                    59:da:75:d9:b2:bf:10:b2:61:f2:a2:6e:9c:f8:70:
                    f1:10:d0:37:5f:ec:5d:23:7d:d5:76:11:b7:d3:bf:
                    40:02:6b:91:55:e2:3e:a2:aa:a7:0d:a0:da:40:bf:
                    c6:85:cc:3e:f7:99:fa:40:f7:4e:96:62:ab:d3:47:
                    a6:59:49:40:79:35:60:8a:38:52:72:02:19:17:77:
                    f9:77:37:fa:50:40:27:bc:c9:a6:9b:85:dc:fe:e6:
                    be:e7:f1:43:04:00:7a:36:a0:59:41:da:36:82:f4:
                    be:42:d3:76:58:16:dd:44:7d:f6:fa:c0:1e:69:dc:
                    54:b6:db:66:d4:20:63:12:2f:65:39:ce:c3:42:d9:
                    11:43:e9:64:de:73:8b:f6:48:0a:76:92:32:28:ae:
                    09:22:f2:7f:bc:02:5b:19:84:0a:85:27:e2:b8:97:
                    ef:59:29:9b:f2:c2:2e:4b:87:5c:47:8c:7a:47:5e:
                    fe:ba:34:2f:f3:aa:d6:fa:dd:96:a5:8a:d9:eb:2e:
                    2b:b8:48:3d:59:d9:a4:df:05:4f:af:49:d2:09:d3:
                    77:7e:40:f1:a3:a7:74:f1:6a:ab:72:06:ed:35:f2:
                    c7:75:dd:92:b5:5f:de:16:ee:57:13:f0:ba:10:d4:
                    72:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:EE:4C:B4:E5:DF:EC:FA:53:60:BE:82:4F:04:DD:4D:07:A9:CE:3C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/0/88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.112.0/22
                IPv6:
                  2804:6d8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270540

    Signature Algorithm: sha256WithRSAEncryption
         08:49:6c:fb:44:2a:cc:04:f2:1c:49:22:87:3e:a3:74:af:14:
         28:92:65:14:61:26:5e:d5:dc:c6:a9:4e:de:e3:cd:d5:a4:35:
         9e:42:d6:00:50:64:12:f5:9e:21:e1:95:04:d2:06:e7:db:4a:
         c7:00:95:7c:06:7e:f9:46:dc:87:f7:fc:75:2d:14:bf:d2:13:
         48:09:9a:d0:c8:8b:aa:b6:c8:17:53:28:60:a7:85:4d:44:60:
         3c:5f:d2:3a:88:8a:26:ca:5c:be:41:ed:04:f0:77:53:2e:6e:
         90:b8:97:ad:10:9c:07:2d:d3:78:83:b3:1f:27:7b:00:79:55:
         19:d5:fb:0a:4d:35:6f:b3:5e:b8:c8:bc:29:93:00:a0:6b:8d:
         0e:a7:3c:f0:b5:1a:8f:79:6f:e3:42:18:e5:73:1e:92:5f:4d:
         49:85:0e:1f:9b:fc:49:8b:98:1d:9e:c2:c6:9e:76:e8:fd:ff:
         44:2c:bf:26:ff:46:8b:57:07:99:39:e3:c6:73:6f:c1:af:29:
         3e:3d:56:d3:36:b1:d6:f1:34:0d:dd:75:71:0c:09:fe:32:2f:
         e3:05:72:85:47:f6:65:b5:92:37:35:ad:12:81:a9:97:85:ec:
         a5:10:6e:33:33:ff:31:5e:6b:e0:0b:b8:48:38:36:1d:94:b0:
         c9:0e:65:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org