Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A8C004C19E02B376E4BE3D4C7FAC47C17F858EDA.cer
File:                     A8C004C19E02B376E4BE3D4C7FAC47C17F858EDA.cer (raw, json)
Hash identifier:          VmZUo62s7o/5mMRT9q1/QChOX6jA3BcJEAhjTu2oDZM=
Subject key identifier:   A8:C0:04:C1:9E:02:B3:76:E4:BE:3D:4C:7F:AC:47:C1:7F:85:8E:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5B29781909B75CCE8F1C542B276B442E2927F453
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/A8C004C19E02B376E4BE3D4C7FAC47C17F858EDA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 12:06:24 +0000
Certificate not after:    Mon 31 Mar 2025 12:11:24 +0000
Subordinate resources:    AS: 61726
                          IP: 131.72.96.0/22
                          IP: 186.227.64.0/22
                          IP: 2804:1b68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:29:78:19:09:b7:5c:ce:8f:1c:54:2b:27:6b:44:2e:29:27:f4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 12:06:24 2024 GMT
            Not After : Mar 31 12:11:24 2025 GMT
        Subject: CN=A8C004C19E02B376E4BE3D4C7FAC47C17F858EDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6f:a2:65:c7:9e:2f:e1:fa:c2:6e:55:0a:58:
                    f8:5a:82:05:87:e3:4b:26:1c:01:be:b3:7b:0e:9c:
                    0e:e9:46:48:40:7e:59:21:e6:99:38:e5:f7:27:36:
                    20:fa:cf:0b:cd:b5:4b:0c:6e:19:5e:f4:03:df:a3:
                    22:72:f3:e8:21:2f:ac:2f:50:e5:74:eb:fb:3e:54:
                    45:0d:75:3b:e4:8b:04:65:db:ed:ba:eb:51:50:71:
                    3d:d7:a2:f7:c8:19:6a:a9:db:83:0b:df:03:67:a3:
                    fe:3d:7d:ff:61:7b:7b:47:47:24:03:2c:5a:a0:9a:
                    1f:a2:69:62:86:e8:ba:04:6c:22:5b:75:89:6e:ff:
                    6d:5b:1f:0e:55:38:e0:fb:ad:d3:b7:c6:dd:18:67:
                    62:8f:6f:05:81:98:a3:a5:71:db:cd:43:82:5b:bc:
                    04:6c:aa:16:01:25:3e:b0:4f:bb:72:18:47:f6:3c:
                    30:52:08:e4:0d:63:ee:71:66:d8:89:57:54:27:7c:
                    8b:6e:56:9c:20:b5:cc:d5:dc:d1:35:8e:44:f8:be:
                    f0:3f:e8:4e:53:a8:6c:86:5f:33:0a:1e:03:87:9d:
                    61:ab:d2:d2:f6:73:32:95:13:61:b0:72:34:19:d2:
                    14:38:8f:d7:67:0f:4c:98:05:d9:4e:d9:77:ff:1b:
                    f0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:C0:04:C1:9E:02:B3:76:E4:BE:3D:4C:7F:AC:47:C1:7F:85:8E:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/A8C004C19E02B376E4BE3D4C7FAC47C17F858EDA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.96.0/22
                  186.227.64.0/22
                IPv6:
                  2804:1b68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61726

    Signature Algorithm: sha256WithRSAEncryption
         15:ef:e0:b2:16:73:d4:aa:03:10:70:81:a5:6a:eb:f9:33:16:
         de:76:54:0c:e1:7e:de:e1:fd:b9:b5:15:a2:d5:c7:5e:c0:16:
         d1:39:f8:5c:29:ef:0e:79:5a:03:33:72:18:91:73:48:e0:58:
         3d:25:e2:bb:3a:b4:9f:83:df:e9:bd:12:67:90:b2:82:3e:5f:
         4b:a9:d0:3b:39:1e:18:8e:5b:43:bb:ce:72:36:5e:23:a2:8e:
         a6:68:d8:33:31:5e:85:a6:e1:85:73:3e:25:8a:3a:b1:49:17:
         9d:be:e3:4d:35:41:81:42:00:26:fd:b3:95:e5:5a:e7:d5:01:
         74:e9:fa:44:a4:d9:4a:cc:63:bc:69:fa:fc:af:22:17:30:6b:
         b5:d9:f1:77:06:d2:4a:47:f0:b4:10:64:16:a3:50:d6:d6:8e:
         ab:7a:9e:b6:ac:b3:37:74:6c:bd:c1:d9:ae:55:7b:d1:e9:d2:
         16:14:65:d7:33:1f:55:f2:fe:83:d6:50:5f:7f:18:4c:74:f4:
         27:b3:4a:14:99:db:f1:1c:cb:e2:34:db:8f:3a:1a:ee:f5:80:
         81:66:70:dd:1d:84:ff:a0:9e:ec:e1:20:4e:69:9b:6e:3c:15:
         39:6d:bc:a3:6d:ca:09:25:58:f3:5f:80:8f:46:2a:79:d5:2f:
         38:ef:6c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org