Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.cer
File:                     AC88E2B8518089044D3F00C0A71F5699DC4E11FA.cer (raw, json)
Hash identifier:          td+wA6ZQcARdGq9G503hU8xW/sdATwCrGGut6OO5Ti8=
Subject key identifier:   AC:88:E2:B8:51:80:89:04:4D:3F:00:C0:A7:1F:56:99:DC:4E:11:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4ED0C023176A92B5915DD666833ED2D668BD159F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 22:51:34 +0000
Certificate not after:    Wed 23 Oct 2024 22:56:34 +0000
Subordinate resources:    AS: 271512
                          IP: 181.232.128.0/22
                          IP: 2804:7cb0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d0:c0:23:17:6a:92:b5:91:5d:d6:66:83:3e:d2:d6:68:bd:15:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 22:51:34 2023 GMT
            Not After : Oct 23 22:56:34 2024 GMT
        Subject: CN=AC88E2B8518089044D3F00C0A71F5699DC4E11FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:24:8a:82:20:3e:b7:42:8c:a1:0a:a1:5c:
                    17:db:35:60:42:c5:79:a1:89:29:31:af:07:17:02:
                    4c:49:47:bd:85:88:e8:68:89:58:55:01:20:32:1e:
                    cd:40:3e:d3:1b:32:7e:3e:60:9b:2f:41:bf:43:45:
                    ce:87:96:23:fa:30:f1:45:f3:c2:30:51:5a:d2:b3:
                    dd:8b:43:a7:84:ec:91:91:66:e3:7f:b7:bc:78:bf:
                    58:11:87:0d:07:dd:31:cd:93:94:85:79:f7:b8:ef:
                    61:c5:9c:e0:7d:a8:c2:4c:13:e8:0e:ae:73:f6:fc:
                    2b:a4:f3:21:6b:14:65:25:25:21:ea:c8:ce:f2:e4:
                    24:d0:b0:14:f7:af:f2:bb:01:4e:e4:36:82:5b:1d:
                    6a:eb:5c:16:a7:0d:34:89:69:73:b4:e7:f8:d6:a5:
                    ea:6c:fd:26:6d:09:1b:a6:a8:24:c9:af:f8:70:ab:
                    c9:e9:0a:64:27:4b:ca:e7:24:46:94:94:0c:20:57:
                    06:a9:8e:2e:54:d0:2b:84:62:d3:1e:2e:32:9b:1d:
                    0c:67:c2:cb:6d:a5:c6:e8:e0:8f:63:78:9a:72:e1:
                    02:b2:11:41:cb:a4:e6:df:06:9d:e6:c8:3f:37:41:
                    c7:d6:4e:a2:60:34:cb:69:ea:24:32:b6:f2:19:75:
                    ab:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:88:E2:B8:51:80:89:04:4D:3F:00:C0:A7:1F:56:99:DC:4E:11:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.128.0/22
                IPv6:
                  2804:7cb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271512

    Signature Algorithm: sha256WithRSAEncryption
         01:b8:19:48:c6:78:04:3c:fb:79:0a:5e:5c:56:94:da:dd:80:
         2d:cb:99:f6:e1:0f:a8:e5:5d:ee:f5:43:d2:f5:ab:5e:e1:1a:
         33:9d:d8:bb:43:f3:c3:6d:6e:d8:a0:b5:7a:d6:0f:2f:0f:c8:
         29:6f:df:94:9d:ea:7b:ba:76:db:f5:c5:e8:2d:2f:e7:2e:82:
         08:7e:97:7d:6d:2b:8f:f3:11:7c:6d:39:de:9c:70:5c:3f:74:
         d1:12:4e:3e:de:17:92:72:51:c0:23:71:ad:b9:8a:e6:5f:87:
         a3:c7:1a:c2:a9:81:9a:60:c1:56:87:36:69:09:a7:e7:87:8f:
         bc:0f:70:08:43:58:0c:30:e9:ae:9e:a9:bf:ee:96:62:be:b9:
         b4:53:c5:af:40:b5:1d:c6:bb:b7:dd:d5:16:ab:53:8b:be:50:
         de:11:82:99:14:cf:1b:f6:f8:a8:8a:6f:0f:a6:5c:91:24:ac:
         9c:2b:d5:e9:6e:83:da:63:4c:84:89:40:87:fd:f0:da:31:4a:
         78:e1:5b:43:65:04:b9:93:7a:1e:45:37:0c:d2:73:83:43:12:
         79:7d:17:ad:a2:88:c5:6e:b8:83:b7:54:86:c8:aa:46:2f:9d:
         a8:7b:46:3f:25:ea:01:c4:b6:a6:29:3c:4b:a0:fa:83:78:de:
         e2:a8:4d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org