Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.cer
File:                     C88D10B687ABB2F8DC649DC753A12E98C0539139.cer (raw, json)
Hash identifier:          HuIj73A0vFkfqa8tjnkMICpSqHbJZUscB8DAU9Ovj+g=
Subject key identifier:   C8:8D:10:B6:87:AB:B2:F8:DC:64:9D:C7:53:A1:2E:98:C0:53:91:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       17FD84E06B32C2F1B5094C151BBF9E051F9EFF8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 14:56:46 +0000
Certificate not after:    Wed 29 May 2024 15:01:46 +0000
Subordinate resources:    AS: 267374
                          IP: 45.234.124.0/22
                          IP: 2804:4c80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fd:84:e0:6b:32:c2:f1:b5:09:4c:15:1b:bf:9e:05:1f:9e:ff:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 14:56:46 2023 GMT
            Not After : May 29 15:01:46 2024 GMT
        Subject: CN=C88D10B687ABB2F8DC649DC753A12E98C0539139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4f:e0:ad:92:7f:a9:95:41:cf:ea:8a:83:3e:
                    91:34:3a:cc:fa:e5:bf:52:cc:a2:17:ba:a8:07:f7:
                    5a:b3:79:0f:b5:d4:6d:67:03:29:84:7e:a3:01:10:
                    94:04:6b:0b:ab:27:22:4d:ca:17:4c:d3:3e:a8:47:
                    90:ed:d0:7d:c9:d6:88:5f:e7:55:a4:24:ff:e2:a2:
                    b4:86:96:8a:52:d0:36:40:fc:62:8a:00:f6:eb:a4:
                    9c:e2:16:95:31:3a:24:a0:6f:bc:27:3c:a7:ab:4c:
                    ee:ce:2a:f4:69:d1:83:63:06:02:6a:e1:58:6d:a0:
                    d4:47:bb:3a:31:82:ad:4e:1b:c7:3f:6c:94:39:b6:
                    90:14:ba:84:4e:8f:1a:ce:75:cf:05:ce:6b:d6:a1:
                    39:8e:de:17:11:46:80:35:50:08:78:90:55:49:03:
                    a4:56:be:3d:32:7c:53:86:86:02:92:05:14:f3:71:
                    06:d3:c9:ec:8d:e3:03:10:65:c8:13:f3:b2:f3:bd:
                    fd:8d:24:fa:16:88:c2:f6:0b:06:6b:d4:4f:11:78:
                    81:e5:35:cf:67:f0:7a:be:1a:37:f2:77:66:6a:c6:
                    d3:6e:7d:6b:59:7a:f6:38:37:06:d6:94:a9:71:2f:
                    db:99:9a:5c:5b:0a:c0:f9:42:3a:fd:b9:a2:b0:cd:
                    92:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:8D:10:B6:87:AB:B2:F8:DC:64:9D:C7:53:A1:2E:98:C0:53:91:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.124.0/22
                IPv6:
                  2804:4c80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267374

    Signature Algorithm: sha256WithRSAEncryption
         60:95:9e:be:f7:73:51:09:d3:7d:32:de:f2:a3:88:ae:60:fa:
         9c:8e:8f:e9:0a:11:23:f0:8e:2e:5d:f7:f4:ec:36:66:87:0b:
         5f:c4:48:24:13:2f:72:a9:de:6b:9b:3a:a7:4c:62:90:83:c0:
         da:39:55:c6:d1:0f:a4:26:f1:7a:1d:a7:60:b7:4c:91:70:66:
         3a:be:06:f1:0c:ef:ba:99:5d:20:ce:98:a6:1b:84:17:68:67:
         64:99:19:2f:f9:69:9b:c7:76:0a:28:69:ab:90:ff:11:e1:e4:
         b1:3b:cc:60:6d:9d:ce:cb:f7:84:b5:b9:b4:88:f5:1b:da:93:
         78:b7:ad:10:1e:52:75:60:5b:b3:c3:59:be:b6:91:79:72:59:
         da:4f:df:90:58:77:13:3b:d8:03:3d:db:94:2f:ac:c9:de:89:
         88:d7:4d:95:f1:2d:60:7e:f2:38:ad:c6:78:e7:37:f7:54:26:
         70:a4:13:14:05:10:0b:33:e3:e9:02:f9:08:f3:00:91:09:17:
         f8:e8:13:8b:98:02:98:dc:12:38:7a:b1:98:a7:e0:b6:7d:f8:
         0f:fe:02:a4:b2:e2:8b:9f:b6:de:cb:c5:70:a8:41:d7:92:50:
         0b:bd:5a:b7:a9:92:4d:54:06:09:70:47:b3:65:45:46:2a:6a:
         2e:5e:1b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org