Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/988D9558519B864B89E9DBAD7B77E7BCCD06F82E.cer
File:                     988D9558519B864B89E9DBAD7B77E7BCCD06F82E.cer (raw, json)
Hash identifier:          9Sv9CF8RTsxfkZ7cwYb368VJhE9cHM92hRvsABMrWHE=
Subject key identifier:   98:8D:95:58:51:9B:86:4B:89:E9:DB:AD:7B:77:E7:BC:CD:06:F8:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       421631EEC6166AEE7BB0FBF6C8DABC11AB530EB3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/988D9558519B864B89E9DBAD7B77E7BCCD06F82E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Jan 2024 19:20:07 +0000
Certificate not after:    Wed 01 Jan 2025 19:25:07 +0000
Subordinate resources:    AS: 264344
                          IP: 138.185.84.0/22
                          IP: 2804:2674::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:16:31:ee:c6:16:6a:ee:7b:b0:fb:f6:c8:da:bc:11:ab:53:0e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  3 19:20:07 2024 GMT
            Not After : Jan  1 19:25:07 2025 GMT
        Subject: CN=988D9558519B864B89E9DBAD7B77E7BCCD06F82E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:f6:55:af:01:09:4b:af:aa:7f:cd:4f:9e:
                    26:98:e9:a5:3b:1d:eb:d8:11:0c:3e:c4:8e:f1:83:
                    09:c5:e7:99:0b:12:48:4d:b8:c1:9f:8f:89:77:77:
                    5a:7d:2d:fd:f0:62:ce:0e:09:7b:ca:ae:95:e2:5e:
                    00:82:c5:ed:a7:4a:31:0b:c5:e1:ae:64:71:83:e8:
                    1f:5e:6a:4b:51:c6:28:49:04:c5:7c:94:ed:f2:21:
                    13:25:59:31:8a:b5:f2:5f:a3:72:e0:b8:ea:09:05:
                    04:93:fc:01:41:9c:94:1d:de:95:69:39:ee:2d:90:
                    3a:95:ae:78:33:85:d7:8e:9e:fe:7c:25:11:48:0d:
                    1e:0c:7d:47:03:51:5f:99:65:f8:52:f9:49:4f:e5:
                    64:cf:a9:a1:9f:5b:10:e8:fd:f7:fe:bd:95:d2:4d:
                    b5:a6:85:a5:ab:38:a2:3d:d2:2b:16:fc:a0:1b:f5:
                    24:57:3c:6a:bb:4e:21:79:09:78:b9:d4:2c:2d:14:
                    99:ef:73:e8:13:0f:e3:03:36:23:7a:ee:a0:95:85:
                    7f:f8:15:36:52:cd:7c:6e:5d:86:b8:55:30:61:40:
                    ed:2d:fd:a3:35:f3:5c:36:57:3d:bf:4c:56:6e:a1:
                    26:39:3b:ca:2a:91:e6:cc:d1:70:7a:ab:15:ba:20:
                    d7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:8D:95:58:51:9B:86:4B:89:E9:DB:AD:7B:77:E7:BC:CD:06:F8:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/988D9558519B864B89E9DBAD7B77E7BCCD06F82E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.84.0/22
                IPv6:
                  2804:2674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264344

    Signature Algorithm: sha256WithRSAEncryption
         44:73:74:3b:79:b8:b9:ad:48:90:ea:b1:ca:ab:a8:7f:8c:4b:
         27:29:07:5e:d7:2f:3e:23:d4:e0:61:42:0e:a4:7a:95:5a:c8:
         63:2e:a3:1c:be:a4:78:e2:6b:5e:ce:84:cd:1c:0d:f6:a3:08:
         44:1d:e3:6c:e6:71:4e:c9:b9:2e:7b:4b:19:43:81:f5:7a:07:
         c0:6b:bf:97:d1:0a:e9:e1:63:0e:35:35:9d:29:60:12:f6:15:
         17:f0:94:a5:59:cc:7d:83:07:3c:7c:f7:04:a5:d2:09:01:24:
         af:ce:5a:00:3d:b5:b7:d4:4e:25:23:4a:be:0d:4e:58:52:8e:
         60:f6:bf:9a:a4:82:ea:6a:b7:c7:4a:9a:1d:46:79:d5:0b:19:
         40:14:e0:86:1e:cf:4a:b2:59:f9:95:57:86:8a:27:48:3a:38:
         1a:ee:eb:63:75:9e:74:ec:51:ef:a0:39:9d:bc:16:31:16:c6:
         3c:bb:6e:3f:90:4a:ef:d6:67:b0:e1:d0:e1:ab:80:25:f2:8d:
         a1:98:c5:f9:55:35:03:89:7b:4c:c9:a6:41:ba:e0:a8:d0:cb:
         7c:4d:07:80:58:75:08:3f:67:3a:64:d9:b5:f3:1d:2f:a6:35:
         52:34:31:24:a6:be:56:a2:56:7f:cf:b7:87:44:7d:57:ac:48:
         86:c3:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:48 2025 by rpki-client