Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/08BE98AAEC54110E9DEC4793B45648EFFC4B284A.cer
File:                     08BE98AAEC54110E9DEC4793B45648EFFC4B284A.cer (raw, json)
Hash identifier:          XM/4C2wkYELq591OdHhTrTyeDqQnpjMFEqwmKy6I3gM=
Subject key identifier:   08:BE:98:AA:EC:54:11:0E:9D:EC:47:93:B4:56:48:EF:FC:4B:28:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27C9589FF77648D90A660631FB2635D590E6B556
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/08BE98AAEC54110E9DEC4793B45648EFFC4B284A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Aug 2022 13:12:04 +0000
Certificate not after:    Fri 25 Aug 2023 13:17:04 +0000
Subordinate resources:    AS: 267548
                          IP: 201.182.184.0/22
                          IP: 2804:4318::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c9:58:9f:f7:76:48:d9:0a:66:06:31:fb:26:35:d5:90:e6:b5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 26 13:12:04 2022 GMT
            Not After : Aug 25 13:17:04 2023 GMT
        Subject: CN=08BE98AAEC54110E9DEC4793B45648EFFC4B284A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:ed:ed:18:35:62:5c:61:eb:bf:75:fe:fa:
                    e4:97:33:f0:2e:71:53:74:54:66:3b:d3:ec:27:c1:
                    3b:ca:34:34:f2:4c:78:80:bd:35:99:eb:75:22:77:
                    47:d7:1a:ba:65:c7:2b:cb:f4:22:59:76:b3:61:1f:
                    57:af:8b:87:4e:40:59:d3:f5:51:da:db:40:35:68:
                    a0:89:36:88:e0:ad:0c:0b:4f:7b:95:c9:82:09:2c:
                    2e:4e:05:14:90:43:87:c3:41:a0:e3:19:c7:2e:76:
                    0e:6f:4b:6b:fb:b1:b6:e6:12:59:03:7e:07:4d:46:
                    d4:a0:7e:43:72:c0:41:d8:9e:84:d2:72:95:03:c6:
                    8d:c8:22:d4:09:31:02:34:af:fa:21:6e:03:04:bd:
                    31:fe:11:d4:a9:e2:f1:2d:cf:fe:de:c6:15:46:1d:
                    c8:03:fc:9c:28:1f:ff:9d:44:bf:e5:19:5d:57:ff:
                    22:47:8e:d7:e6:d1:28:7c:bc:27:52:3b:c3:70:f9:
                    fa:73:e7:3f:80:99:fe:e4:81:8b:71:5e:0c:f0:2d:
                    95:95:45:4c:ee:8d:e6:0b:2a:68:bb:73:ad:f9:c5:
                    f2:96:ba:5e:68:d9:6a:c9:8a:d9:24:26:16:64:6a:
                    ee:d8:b7:bc:80:be:dc:2b:79:94:22:18:6d:45:d2:
                    24:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:BE:98:AA:EC:54:11:0E:9D:EC:47:93:B4:56:48:EF:FC:4B:28:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/08BE98AAEC54110E9DEC4793B45648EFFC4B284A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.184.0/22
                IPv6:
                  2804:4318::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267548

    Signature Algorithm: sha256WithRSAEncryption
         6b:64:9f:f3:9c:5f:97:d4:fb:14:04:fd:1a:c3:d8:8e:2d:07:
         89:1f:b1:d6:4f:e4:3a:83:a8:b8:0a:38:e4:5e:a4:10:8f:73:
         01:25:d9:99:f6:cc:c8:c5:1b:83:20:f5:cd:d3:b5:df:9d:cb:
         ba:aa:65:75:4d:42:e9:fa:eb:27:bb:0c:64:ef:e9:63:ce:10:
         20:30:2b:4f:e2:a4:93:8b:d0:86:ef:2b:aa:b7:c5:c5:a5:98:
         d5:9e:ff:46:a5:3f:5a:8d:80:f1:aa:73:c5:ea:99:d6:b4:2b:
         3e:7b:d3:1c:ec:ca:06:86:9b:30:50:13:1b:aa:00:22:74:ac:
         85:dc:39:3a:c6:fb:15:bf:68:07:54:77:1e:fd:08:59:6e:1a:
         7b:41:9d:ac:8f:2d:7f:36:6d:d7:45:81:c7:0c:4c:c2:c4:bf:
         54:74:85:a7:4b:d5:e2:21:ad:81:9c:cc:cf:f1:27:78:c9:16:
         10:d6:8d:91:49:65:80:2f:64:34:9a:ac:9a:10:0c:86:58:6e:
         b1:01:79:38:a6:79:de:50:23:08:e7:53:82:68:0b:b0:3b:09:
         d3:22:c3:b2:af:87:cf:1a:4f:32:c4:a0:d2:7d:f0:1e:a0:cf:
         64:7f:a0:09:05:b3:28:43:0e:0a:2b:63:24:fd:24:d1:b7:75:
         00:d8:25:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org