Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A7B6D32150DD485FBE6132A020AD50F76CFE4F0.cer
File:                     8A7B6D32150DD485FBE6132A020AD50F76CFE4F0.cer (raw, json)
Hash identifier:          HMzmHw30Sn+lUwfd+LYp3s7bsqNiuguVw6UprqdzQcg=
Subject key identifier:   8A:7B:6D:32:15:0D:D4:85:FB:E6:13:2A:02:0A:D5:0F:76:CF:E4:F0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       226528DBCED9935D7DF09D313EBAEA972E2D05B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/8A7B6D32150DD485FBE6132A020AD50F76CFE4F0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Nov 2023 17:57:30 +0000
Certificate not after:    Wed 27 Nov 2024 18:02:30 +0000
Subordinate resources:    AS: 1916
                          AS: 6125
                          IP: 132.255.96.0/22
                          IP: 138.121.68.0/22
                          IP: 150.165.0.0/16
                          IP: 170.79.212.0/22
                          IP: 200.17.0.0/20
                          IP: 200.17.32.0 -- 200.17.79.255
                          IP: 200.17.112.0 -- 200.17.159.255
                          IP: 200.17.176.0/20
                          IP: 200.18.20.0 -- 200.18.31.255
                          IP: 200.18.80.0/20
                          IP: 200.18.128.0 -- 200.18.239.255
                          IP: 200.19.8.0 -- 200.19.47.255
                          IP: 200.19.112.0 -- 200.19.191.255
                          IP: 200.128.128.0 -- 200.128.239.255
                          IP: 200.129.0.0 -- 200.131.255.255
                          IP: 200.133.0.0 -- 200.133.223.255
                          IP: 200.133.240.0/20
                          IP: 200.137.0.0/16
                          IP: 200.139.0.0/18
                          IP: 200.143.192.0/18
                          IP: 200.159.240.0/20
                          IP: 200.235.0.0/17
                          IP: 200.237.0.0/18
                          IP: 200.239.128.0/18
                          IP: 2001:12f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:65:28:db:ce:d9:93:5d:7d:f0:9d:31:3e:ba:ea:97:2e:2d:05:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 17:57:30 2023 GMT
            Not After : Nov 27 18:02:30 2024 GMT
        Subject: CN=8A7B6D32150DD485FBE6132A020AD50F76CFE4F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1b:8c:fe:e3:72:ec:95:84:e4:17:af:59:f2:
                    83:a0:4b:37:a5:41:a8:28:12:75:e7:60:c4:ff:f4:
                    67:43:a6:04:4a:61:46:b5:86:13:9f:04:a5:b0:36:
                    f4:0a:c0:89:e7:ff:5f:4b:3b:26:a8:bb:93:ca:2c:
                    01:63:b1:0e:a2:7e:5f:e8:4d:1e:7d:c4:60:20:b7:
                    33:e0:36:a4:f0:ef:6a:f4:d1:3d:f2:43:69:b7:7e:
                    1c:09:04:d1:4f:53:1f:56:59:e8:89:8a:57:ed:32:
                    e7:d4:20:39:88:f5:75:08:15:13:a3:42:6b:c9:02:
                    f1:cc:34:0a:fe:59:34:3d:62:d0:b6:58:5d:ec:be:
                    71:02:0a:4a:c9:de:2e:e9:c5:9f:91:3f:a9:60:8d:
                    d0:2d:43:21:33:fc:6d:50:36:20:71:54:8d:11:69:
                    63:f3:94:54:fc:f1:aa:2d:7a:b7:c5:2a:a7:e6:f7:
                    09:e4:39:c2:3f:31:8a:a7:4b:de:a1:0a:27:ee:4a:
                    fb:12:0f:b0:8f:6f:33:bb:3d:a7:9e:40:e2:16:44:
                    37:91:b8:57:2f:52:82:d7:74:e8:e1:97:42:61:c5:
                    a3:61:67:b0:f9:83:85:7e:a8:45:51:d6:85:09:36:
                    f8:73:c7:a1:c4:63:3e:4b:5b:ec:96:43:c0:97:a7:
                    e1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:7B:6D:32:15:0D:D4:85:FB:E6:13:2A:02:0A:D5:0F:76:CF:E4:F0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/8A7B6D32150DD485FBE6132A020AD50F76CFE4F0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.96.0/22
                  138.121.68.0/22
                  150.165.0.0/16
                  170.79.212.0/22
                  200.17.0.0/20
                  200.17.32.0-200.17.79.255
                  200.17.112.0-200.17.159.255
                  200.17.176.0/20
                  200.18.20.0-200.18.31.255
                  200.18.80.0/20
                  200.18.128.0-200.18.239.255
                  200.19.8.0-200.19.47.255
                  200.19.112.0-200.19.191.255
                  200.128.128.0-200.128.239.255
                  200.129.0.0-200.131.255.255
                  200.133.0.0-200.133.223.255
                  200.133.240.0/20
                  200.137.0.0/16
                  200.139.0.0/18
                  200.143.192.0/18
                  200.159.240.0/20
                  200.235.0.0/17
                  200.237.0.0/18
                  200.239.128.0/18
                IPv6:
                  2001:12f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1916
                  6125

    Signature Algorithm: sha256WithRSAEncryption
         14:10:ab:c5:14:7e:de:35:c5:91:01:4f:d9:00:85:39:fb:25:
         f4:83:12:5d:77:f6:87:34:99:da:e3:54:b4:5a:b9:1e:ee:4e:
         92:0b:83:fd:b0:85:5e:68:b7:45:e0:c7:a6:28:28:5c:5b:19:
         6b:bd:b8:76:94:3f:5c:7f:39:ae:ef:aa:fb:93:d7:6d:5e:f2:
         83:e5:42:53:3b:9d:4c:16:2c:28:95:e0:43:24:df:0e:e8:2b:
         5d:f4:55:1b:10:7b:ec:75:8a:45:09:47:0a:19:05:1d:23:e4:
         7a:5e:c6:01:be:02:15:40:32:ec:87:55:e5:61:bc:68:a6:bd:
         ba:a1:cb:60:5f:0c:07:a6:0d:85:ce:be:c4:1c:45:37:bb:b1:
         d1:ab:12:b0:ee:7d:bc:8e:9b:57:a1:15:02:3c:80:34:df:d0:
         72:24:3c:ab:f7:ab:a0:05:0d:ca:a7:7c:f4:62:dd:8f:d8:89:
         b9:8d:98:52:1d:48:e9:ab:ed:68:b1:df:4d:dc:71:6d:ee:9b:
         1b:1c:b6:e3:51:65:3b:66:f5:fb:db:77:8f:2c:97:69:02:cd:
         fb:62:41:7c:c9:2f:63:84:24:cc:2d:a4:31:09:1a:d9:2a:91:
         05:4b:35:b3:62:7f:9d:57:7c:d7:e1:16:e6:98:22:5a:68:41:
         4c:85:4a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org