Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/88FE00A126CA3E9C621FECD65CECFA36649E9BA2.cer
File:                     88FE00A126CA3E9C621FECD65CECFA36649E9BA2.cer (raw, json)
Hash identifier:          uWgHwJcaUvvhxd5HqfUy82ABsFlDBMbnrtEHWccFUJ4=
Subject key identifier:   88:FE:00:A1:26:CA:3E:9C:62:1F:EC:D6:5C:EC:FA:36:64:9E:9B:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       250BFA90CA1F50DF5BAE919DC8482B49B7F4ADC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/88FE00A126CA3E9C621FECD65CECFA36649E9BA2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Aug 2023 20:13:25 +0000
Certificate not after:    Thu 15 Aug 2024 20:18:25 +0000
Subordinate resources:    AS: 52677
                          IP: 177.66.204.0/22
                          IP: 2804:c18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0b:fa:90:ca:1f:50:df:5b:ae:91:9d:c8:48:2b:49:b7:f4:ad:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 17 20:13:25 2023 GMT
            Not After : Aug 15 20:18:25 2024 GMT
        Subject: CN=88FE00A126CA3E9C621FECD65CECFA36649E9BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:05:b8:1b:c7:59:c3:e9:10:8b:ca:7f:79:fd:
                    13:cb:71:81:34:7a:6f:ef:61:17:05:91:0f:75:70:
                    84:cb:46:c7:86:1b:d3:a1:03:26:f2:2e:e3:7d:37:
                    43:ce:a5:80:c1:d9:2c:43:c3:5f:1e:26:62:cc:26:
                    a7:d2:f0:9a:0c:42:af:94:b0:c3:84:fd:5a:8e:2f:
                    97:65:b8:22:bc:30:82:54:c2:8c:69:b4:81:39:49:
                    a1:64:2f:0d:74:81:61:ab:83:3b:e2:8c:1d:db:db:
                    44:9e:e5:70:85:3c:92:96:c0:a5:9f:a3:9f:42:f4:
                    44:cd:f1:7c:1c:22:48:d8:32:2d:cd:1d:ca:ce:52:
                    3e:b1:03:16:8b:71:0d:fd:ba:45:87:42:c1:cd:2c:
                    76:f8:b8:c0:d7:d6:cf:cd:46:ca:fa:50:36:3e:42:
                    0d:f1:ad:53:e3:56:6a:89:01:3a:26:0e:99:c0:db:
                    c5:b5:aa:5d:62:12:ff:01:2b:ef:61:c8:64:57:08:
                    7f:00:a4:93:09:64:39:97:10:71:09:e8:e2:dd:c8:
                    a0:87:db:87:14:88:8f:06:c8:1c:1b:bd:cc:54:0c:
                    5f:17:1e:51:33:49:17:d2:65:ec:a4:d8:58:e8:68:
                    12:63:68:be:bf:b8:e8:a3:ea:9a:8d:50:9e:e9:1c:
                    2e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:FE:00:A1:26:CA:3E:9C:62:1F:EC:D6:5C:EC:FA:36:64:9E:9B:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/88FE00A126CA3E9C621FECD65CECFA36649E9BA2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.204.0/22
                IPv6:
                  2804:c18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52677

    Signature Algorithm: sha256WithRSAEncryption
         4f:d9:c5:ca:21:e6:8c:ae:54:93:a5:26:50:3e:3a:2d:d2:f6:
         5b:ab:51:25:c3:21:8a:76:47:5c:e7:e8:1a:0f:72:0f:3e:8b:
         8a:f3:e9:ac:b9:b6:f9:46:b6:9e:9e:03:e6:8f:7d:9b:bf:54:
         9c:cd:41:69:18:cf:01:2b:3c:d4:ff:e3:f2:a7:57:08:27:96:
         66:d9:e3:5d:16:bc:f3:75:6d:75:1c:78:92:e2:38:07:e3:2b:
         7c:99:54:4e:f5:20:66:04:fc:84:20:b0:91:22:df:60:b4:6a:
         9c:eb:1b:3b:6d:dd:05:12:62:9f:99:74:3c:81:09:34:31:34:
         26:3c:6a:10:ed:59:a9:ee:1d:14:bd:9c:c0:78:f0:62:c4:1a:
         34:c0:b4:6f:55:75:35:dc:c9:0d:96:7c:7b:77:e5:f8:98:c5:
         58:65:af:57:fd:00:2b:46:b0:96:8f:d9:32:15:c2:1c:f8:54:
         ef:0f:a0:57:81:74:79:01:51:1a:6d:20:39:8f:bc:35:2b:8a:
         6f:72:fe:a4:70:dc:f0:fe:93:7c:84:c2:98:49:cd:0a:e1:3f:
         f7:62:2f:8a:38:61:e5:17:c7:96:76:d4:ae:1e:d4:e9:c5:da:
         b6:87:f0:1c:e9:0a:7b:a9:6e:ce:ba:05:6e:bf:ca:93:e4:97:
         a0:be:5d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org