Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AD87A287E8D5A0CC9C97FF9E29E020E467C52AD8.cer
File:                     AD87A287E8D5A0CC9C97FF9E29E020E467C52AD8.cer (raw, json)
Hash identifier:          kpKXRrm9PQ11hrRe4SrRGoLMe4YCn4LlQGnpbjzdv7E=
Subject key identifier:   AD:87:A2:87:E8:D5:A0:CC:9C:97:FF:9E:29:E0:20:E4:67:C5:2A:D8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       187CE71D66AAFE5B96F2BB549C40BC957351C757
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/AD87A287E8D5A0CC9C97FF9E29E020E467C52AD8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Jan 2024 13:49:08 +0000
Certificate not after:    Fri 03 Jan 2025 13:54:08 +0000
Subordinate resources:    AS: 271580
                          IP: 179.63.60.0/22
                          IP: 2804:7dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7c:e7:1d:66:aa:fe:5b:96:f2:bb:54:9c:40:bc:95:73:51:c7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  5 13:49:08 2024 GMT
            Not After : Jan  3 13:54:08 2025 GMT
        Subject: CN=AD87A287E8D5A0CC9C97FF9E29E020E467C52AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:3b:cf:46:08:a8:18:88:d7:f0:92:64:ac:
                    bb:80:96:1e:cf:ee:21:43:ee:7a:9b:8a:eb:92:9a:
                    21:c0:b9:3c:fa:dd:1d:62:23:33:a6:b5:2c:ab:6b:
                    7f:8b:55:c0:36:95:d7:6d:04:ed:f0:36:28:d0:16:
                    50:f2:52:7a:5e:cd:30:b1:cb:aa:d5:fc:70:5a:c9:
                    4c:d6:fc:08:b2:cd:9c:4f:fe:5d:9d:b1:4f:e2:37:
                    66:cf:af:8f:48:e4:91:fd:24:8c:e3:52:61:4c:3e:
                    02:4e:1c:65:f4:7a:7f:68:fd:04:62:2b:21:78:ac:
                    e8:00:8d:a7:d5:55:22:12:49:fb:f7:11:52:65:52:
                    65:e4:c1:3a:4b:99:80:9d:c8:c7:fb:d9:98:83:70:
                    f7:47:4b:a5:f3:c5:4c:2e:ae:98:d3:bf:41:20:39:
                    58:a3:be:42:1c:0b:4b:62:16:c8:c0:87:12:bc:8c:
                    30:89:8f:d3:a5:44:b0:bc:ae:02:46:cf:a3:31:af:
                    7e:40:eb:8a:95:70:8c:b7:42:1c:c8:35:11:96:00:
                    3a:d1:02:5d:23:df:d6:52:a4:0e:e1:aa:1e:25:b5:
                    7e:ac:ca:be:72:35:f8:5f:89:06:26:f6:c3:88:9f:
                    3c:f2:9a:bc:56:60:21:d0:74:89:c8:b9:c1:62:4c:
                    48:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:87:A2:87:E8:D5:A0:CC:9C:97:FF:9E:29:E0:20:E4:67:C5:2A:D8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/AD87A287E8D5A0CC9C97FF9E29E020E467C52AD8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.60.0/22
                IPv6:
                  2804:7dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271580

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:87:b5:77:95:9b:26:d4:13:75:cc:e9:aa:89:68:19:ef:
         d2:a0:56:6f:bb:b3:d5:74:f0:da:9c:49:74:6f:e0:35:9c:82:
         58:36:8d:e0:86:0d:b9:c1:b6:5a:41:9b:7d:30:88:15:1a:33:
         a9:5e:86:02:81:43:76:d0:a3:2a:16:e0:bd:2c:39:f1:fa:3c:
         0c:40:f9:85:dc:5b:79:8b:65:d2:b6:e9:9f:b8:f3:2a:52:ee:
         e4:b5:9d:49:40:5b:73:ee:71:8a:c8:6a:65:e6:92:7d:9a:d0:
         d9:62:8d:2d:92:0a:d9:56:d7:1d:b0:9f:c9:bc:e8:f6:5b:99:
         21:bc:21:a1:9c:2c:ec:cc:4d:04:32:f4:d6:20:f3:02:80:5a:
         2b:42:08:a3:ad:80:b8:9b:04:d8:97:20:77:7f:15:5c:10:bd:
         fc:0b:c0:47:2e:33:26:53:ed:18:a8:5b:61:df:5f:ca:0c:04:
         f7:ac:f6:35:5b:b2:89:67:eb:96:a1:b6:33:dd:ac:2b:2e:da:
         19:a7:47:bd:69:af:b5:ea:73:d6:5e:1c:00:5d:a9:1b:eb:47:
         f4:e1:18:58:70:1b:ba:38:00:e9:f4:2e:52:9d:1c:94:f8:96:
         fc:4b:12:36:36:62:c7:61:e8:2a:9e:45:13:cd:45:b8:a4:ad:
         eb:94:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org