Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/98886E660C218FD13E82E809EF5CD801BC0310E5.cer
File:                     98886E660C218FD13E82E809EF5CD801BC0310E5.cer (raw, json)
Hash identifier:          bLpkWbbVWQj5oyAZT8C1pSXFm7XaSA3sAwhmYWvRuPE=
Subject key identifier:   98:88:6E:66:0C:21:8F:D1:3E:82:E8:09:EF:5C:D8:01:BC:03:10:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7106E4F798EA55B27F8741C7BF7F47478CCB0D32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0/98886E660C218FD13E82E809EF5CD801BC0310E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Apr 2024 02:55:24 +0000
Certificate not after:    Fri 11 Apr 2025 03:00:24 +0000
Subordinate resources:    AS: 266520
                          IP: 45.177.140.0/22
                          IP: 170.245.92.0/22
                          IP: 2804:390c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:06:e4:f7:98:ea:55:b2:7f:87:41:c7:bf:7f:47:47:8c:cb:0d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 02:55:24 2024 GMT
            Not After : Apr 11 03:00:24 2025 GMT
        Subject: CN=98886E660C218FD13E82E809EF5CD801BC0310E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b3:8c:23:03:80:c5:a1:d5:84:7a:e2:89:74:
                    13:40:18:31:95:38:79:69:9b:8a:98:a3:ed:3d:e7:
                    12:c2:47:15:21:ad:cb:7a:6c:48:df:24:21:68:1b:
                    a4:53:36:f7:6b:0d:90:5e:4b:4f:ce:91:b9:90:8d:
                    2f:bc:05:30:c6:f6:37:a7:8e:2d:8d:1d:68:b3:68:
                    61:2d:06:6d:87:0e:a3:40:cb:6b:1a:af:48:89:b4:
                    5e:a9:93:86:1b:93:0d:cd:2b:c1:95:3a:77:00:31:
                    1c:e0:dd:9a:02:70:bd:3e:fd:8e:24:7f:96:82:df:
                    40:e4:f7:e1:5a:6e:20:df:e2:74:8c:f5:e1:c9:7b:
                    a1:fd:5a:12:f8:04:33:9e:2c:c3:a2:4c:62:82:0a:
                    e9:3a:4f:50:83:59:89:70:3f:6f:9f:12:d8:fd:ef:
                    6e:c8:33:55:84:d3:d5:4d:90:44:e5:ce:90:c3:49:
                    54:cb:0b:13:9f:6f:bb:61:4b:99:96:e8:50:50:ef:
                    fc:f0:8c:aa:35:03:2d:3b:bd:b7:f1:d1:ba:25:fe:
                    43:d2:7c:dc:5d:67:24:94:00:a5:ae:ee:5f:b5:5e:
                    b1:b8:42:67:bd:87:88:ec:a2:d8:f7:69:be:16:9c:
                    3e:6c:fd:16:17:96:57:4f:1f:12:45:3c:82:cb:ba:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:88:6E:66:0C:21:8F:D1:3E:82:E8:09:EF:5C:D8:01:BC:03:10:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0/98886E660C218FD13E82E809EF5CD801BC0310E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.140.0/22
                  170.245.92.0/22
                IPv6:
                  2804:390c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266520

    Signature Algorithm: sha256WithRSAEncryption
         3d:8e:b5:c3:c7:ad:f4:7b:a8:56:4b:69:37:dc:5a:ef:00:4f:
         2a:39:27:2c:2b:b9:25:0d:9d:69:18:3a:51:91:bd:64:d0:a8:
         d3:a3:c9:e5:bb:c5:1c:d9:f8:37:1b:74:7d:aa:b6:5a:a7:f0:
         b7:51:f3:23:7b:8a:5d:12:54:51:31:ef:42:35:cb:36:1a:0f:
         1c:3d:72:cc:75:b1:71:6a:b0:05:fd:92:53:42:2d:27:ca:4d:
         b5:77:fe:15:1e:56:1e:fe:c8:be:c1:c0:21:5b:55:cf:a5:e0:
         0f:5a:eb:b2:e1:0d:d1:1d:f2:a4:64:79:a5:75:7c:d2:df:1d:
         1a:55:97:e9:c6:42:df:ea:65:b8:9a:9a:48:4c:6c:cd:01:68:
         6a:f5:a7:23:f4:68:a0:d7:0e:ad:a6:ca:ea:4d:d9:32:f1:f8:
         2b:66:27:b0:ca:a0:cb:b2:92:66:17:a8:0d:d6:0a:b5:5d:b0:
         86:71:38:5f:2f:63:da:ff:ed:c9:9f:f6:31:4b:97:f5:5a:c6:
         03:84:bb:86:e8:c1:9d:d8:47:3f:8f:96:ed:e2:e8:40:52:84:
         bb:d1:e0:ef:15:c0:51:7f:78:6d:e8:e5:46:f2:8c:ef:71:56:
         cc:77:13:d8:8d:83:c7:1e:4b:bb:ac:cc:71:ea:0b:92:2e:ef:
         bf:1b:da:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org