Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.cer
File:                     CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.cer (raw, json)
Hash identifier:          3weBeURKj2Nl7gPDeYhd+ekSMc0IWWnx0eGjt/I5wms=
Subject key identifier:   CB:88:00:8D:20:CA:6B:3A:C8:4F:D5:7A:80:D9:69:AB:87:69:A5:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       33314965470E652D5738B7BDE99E8AFEB7C9CE27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:30 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:30 +0000
Subordinate resources:    AS: 269184
                          IP: 45.181.132.0/22
                          IP: 2804:60b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:31:49:65:47:0e:65:2d:57:38:b7:bd:e9:9e:8a:fe:b7:c9:ce:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:30 2024 GMT
            Not After : Mar 31 11:03:30 2025 GMT
        Subject: CN=CB88008D20CA6B3AC84FD57A80D969AB8769A5AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:fb:65:04:00:58:90:fd:57:4c:01:2b:ce:
                    77:fa:97:22:70:15:98:36:88:67:fb:04:91:2a:25:
                    1a:74:86:da:7d:d5:b2:00:67:13:db:9a:7b:37:3f:
                    47:7b:a7:cd:c7:28:21:54:fd:d9:f5:ef:1d:56:d5:
                    db:b8:91:17:58:d7:4d:2b:94:e4:41:c6:04:84:2e:
                    f7:d7:93:0a:0c:1b:94:5d:58:64:f7:c4:42:d7:79:
                    51:4d:5f:84:42:06:11:bb:1e:98:36:9b:31:d7:1c:
                    11:cc:87:e3:ba:2f:5a:f0:f3:72:bb:7b:42:e7:92:
                    0c:ae:f9:da:29:6c:8e:d2:d7:89:c7:be:a6:8f:01:
                    39:dd:86:77:a1:cf:68:9e:b0:c2:67:79:c3:a0:b6:
                    2e:fc:c7:19:e6:c1:c0:7d:ae:6e:fa:1c:1a:93:4b:
                    d6:36:46:07:70:98:f7:0c:fa:87:8c:79:e6:ab:d8:
                    55:86:6f:39:5d:db:2c:10:2b:df:c2:bc:ff:45:9a:
                    5c:2b:e6:fa:8f:d2:a1:7f:5e:37:75:ac:fa:b5:ea:
                    5c:57:f9:1d:44:37:90:1b:78:f4:8e:fa:5b:ab:a4:
                    ff:d6:63:82:10:5a:55:6d:c0:f6:0f:12:e7:de:62:
                    38:d7:30:18:44:6f:a1:7c:1f:8c:ce:69:5d:24:b6:
                    25:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:88:00:8D:20:CA:6B:3A:C8:4F:D5:7A:80:D9:69:AB:87:69:A5:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.132.0/22
                IPv6:
                  2804:60b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269184

    Signature Algorithm: sha256WithRSAEncryption
         98:19:5c:0b:2d:ad:db:e9:b0:6a:de:e2:a1:35:40:69:fc:8c:
         b2:25:aa:e5:72:4f:f3:f1:eb:e8:a2:23:55:e3:ac:fb:d9:9c:
         0d:da:29:8c:29:d3:e4:c1:63:73:6c:97:11:51:8c:ca:be:bf:
         0b:09:de:c9:42:23:95:3e:c3:9c:4b:c5:52:75:e1:cf:7e:95:
         1a:eb:bb:27:3a:72:12:96:42:2a:14:c6:6e:30:46:b1:09:50:
         56:09:0a:91:5e:0d:d9:09:51:4a:17:60:1f:59:02:a2:e6:ca:
         cb:4e:42:af:8a:7a:ac:aa:37:f6:92:7c:5a:82:26:6d:2e:8c:
         b0:89:28:f4:85:bb:c9:32:08:2a:68:52:22:8b:f2:2b:44:cf:
         37:54:e6:7a:47:2b:cd:5b:1f:8a:bc:b5:bb:35:3e:b1:bd:69:
         3e:a3:98:10:74:a9:16:10:d8:d2:0c:1c:7c:12:c1:3d:7d:a0:
         1e:61:18:a9:6f:df:95:a0:48:8c:b5:2d:be:3c:1b:dd:b2:62:
         1a:d8:a1:00:e3:3e:46:28:bb:9d:03:cb:ce:dd:2e:ca:8c:a0:
         76:10:ab:f3:29:cf:d9:4d:b0:7f:13:b0:dd:14:18:3d:47:c1:
         f5:79:b8:98:58:01:6e:fd:58:33:80:38:56:2a:55:09:05:44:
         a7:d9:09:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org