Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/98BB84CC473634554A0B9F54BAEC3ED50E8A000F.cer
File:                     98BB84CC473634554A0B9F54BAEC3ED50E8A000F.cer (raw, json)
Hash identifier:          LyYN+htWZZHUSWf56h8uTUqKOBc5sCHp6EdOqJg3u78=
Subject key identifier:   98:BB:84:CC:47:36:34:55:4A:0B:9F:54:BA:EC:3E:D5:0E:8A:00:0F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E5ABF4B2ACB11C498631C932E0283A70D144E2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/98BB84CC473634554A0B9F54BAEC3ED50E8A000F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2024 11:03:38 +0000
Certificate not after:    Fri 07 Feb 2025 11:08:38 +0000
Subordinate resources:    AS: 266435
                          IP: 45.187.164.0/22
                          IP: 170.82.76.0/22
                          IP: 2804:37c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5a:bf:4b:2a:cb:11:c4:98:63:1c:93:2e:02:83:a7:0d:14:4e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 11:03:38 2024 GMT
            Not After : Feb  7 11:08:38 2025 GMT
        Subject: CN=98BB84CC473634554A0B9F54BAEC3ED50E8A000F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3d:1b:20:de:ee:b8:c5:8e:b6:79:b6:1b:55:
                    5f:66:18:cf:58:ac:cb:89:90:0c:aa:43:29:3d:05:
                    17:b0:48:37:d3:c2:69:3e:ee:cd:2b:a1:6a:7a:21:
                    71:9d:cc:d8:12:ec:eb:f1:b9:34:51:7a:79:f4:63:
                    59:02:5f:35:57:ea:21:fa:87:75:55:5e:2d:99:f6:
                    71:3a:51:71:72:4d:04:56:f9:d4:51:5f:1e:5c:d4:
                    a8:53:5f:28:e2:2d:08:bb:dd:e2:95:d1:91:e6:1c:
                    26:f0:5f:56:22:d5:a5:10:62:70:09:2b:a6:0f:36:
                    cd:01:15:10:55:d2:a4:a1:8a:8a:ca:32:17:f6:85:
                    0e:2c:d8:c9:b1:7a:17:3d:49:80:25:4d:15:ea:09:
                    71:35:e8:02:1d:f5:57:b7:fe:14:2f:f8:10:e7:c1:
                    8a:3c:75:b7:83:af:28:ec:7a:48:d4:89:1c:6a:81:
                    56:0b:f4:fc:97:d5:74:f8:f3:a0:cf:6c:10:32:6d:
                    ff:96:bb:a6:1c:3c:be:69:f4:d8:aa:8b:94:0a:5e:
                    4c:ef:db:eb:2e:47:23:6c:29:6e:ce:e5:c1:af:3e:
                    66:7a:6a:3a:56:3c:bd:fa:db:08:37:f8:4a:cd:b9:
                    bc:fa:c4:d6:e6:67:2b:93:5a:cf:ce:a8:5a:fe:a2:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:BB:84:CC:47:36:34:55:4A:0B:9F:54:BA:EC:3E:D5:0E:8A:00:0F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/98BB84CC473634554A0B9F54BAEC3ED50E8A000F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.164.0/22
                  170.82.76.0/22
                IPv6:
                  2804:37c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266435

    Signature Algorithm: sha256WithRSAEncryption
         78:9a:41:fe:82:37:6f:7b:49:7a:b5:9a:28:8a:9c:88:f3:10:
         ca:18:33:75:f4:58:71:ea:4f:61:0d:5f:13:50:07:53:4d:67:
         54:90:d1:7d:68:67:1e:14:06:dc:f3:12:77:97:0a:01:c8:fd:
         03:f1:5f:45:12:9c:42:18:84:08:a7:0c:38:f4:1b:9a:e2:2e:
         99:7a:e5:34:70:25:51:20:a9:e6:57:d8:43:ce:e2:5b:22:8e:
         25:d5:81:15:29:2a:be:80:f8:85:41:91:68:eb:79:40:ca:e2:
         4b:29:88:4b:aa:bd:37:02:8f:e5:e3:e7:0b:28:ed:c1:79:47:
         da:a6:6f:38:a9:3b:5b:c9:ed:cf:17:7a:6a:f2:02:19:5c:52:
         08:67:16:ec:5b:76:f6:90:75:4f:c3:71:4d:3f:3a:33:b9:8c:
         19:bb:61:78:ca:99:11:ce:48:a0:e4:bb:07:af:44:1b:4d:bd:
         e3:b7:f9:fb:86:36:c4:a4:bd:5a:63:aa:29:02:20:ce:d4:ba:
         a6:84:28:91:3e:07:2f:36:40:dd:84:b8:2a:79:bf:75:9b:40:
         73:89:1c:20:9d:e5:47:91:91:8e:a9:45:23:3a:1a:4f:f3:72:
         c4:12:f3:95:15:45:ff:e1:90:19:79:85:66:ae:29:44:da:7a:
         93:4b:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org