Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/08CF95B96B5DA80570E1CFE1518C8E0519AB0869.cer
File:                     08CF95B96B5DA80570E1CFE1518C8E0519AB0869.cer (raw, json)
Hash identifier:          1Q5NhCRI79UoHtvgyPrF76/EOCdUdnxC4jFJR+Csp2U=
Subject key identifier:   08:CF:95:B9:6B:5D:A8:05:70:E1:CF:E1:51:8C:8E:05:19:AB:08:69
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2244D7B41B95F4B635477F44268DE7E36A76137A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/08CF95B96B5DA80570E1CFE1518C8E0519AB0869.mft
caRepository:             rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Oct 2021 13:47:29 +0000
Certificate not after:    Mon 24 Oct 2022 13:52:29 +0000
Subordinate resources:    AS: 264022
                          IP: 143.0.220.0/22
                          IP: 170.245.172.0/22
                          IP: 2804:2990::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:44:d7:b4:1b:95:f4:b6:35:47:7f:44:26:8d:e7:e3:6a:76:13:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 13:47:29 2021 GMT
            Not After : Oct 24 13:52:29 2022 GMT
        Subject: CN=08CF95B96B5DA80570E1CFE1518C8E0519AB0869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5f:69:fd:97:93:16:af:9b:61:d7:a5:ec:df:
                    29:9f:76:0f:25:9d:94:2e:a1:4c:98:a2:ed:d3:4f:
                    f1:26:0b:63:f1:c3:78:a3:07:d5:6a:d0:6b:61:d9:
                    11:d6:bb:3a:d8:9e:aa:04:24:99:47:c7:79:dc:49:
                    f9:7a:df:1a:a2:0c:b9:04:5a:42:a0:06:a5:41:cc:
                    25:f8:6d:ab:04:22:45:25:7c:6c:33:e4:fc:52:87:
                    d2:65:e3:8f:c0:b6:14:b2:7a:08:a1:9d:5f:80:92:
                    4e:8e:40:43:cb:e7:db:a3:b8:77:fd:f4:68:d7:32:
                    94:f0:e5:bd:12:e8:1e:e5:61:9c:67:45:dd:8c:1c:
                    ad:fb:a8:74:e1:d1:21:c6:33:4e:46:07:20:27:28:
                    9e:8f:25:7a:fa:78:52:5d:06:65:27:c5:43:a8:f7:
                    07:d3:24:31:ca:bc:78:ed:b6:1f:4f:9d:dc:6b:1d:
                    41:1b:b6:89:da:6b:31:48:60:99:41:a5:ac:d9:29:
                    a0:24:b7:b8:d9:ec:d2:a1:64:50:b0:89:8c:30:9e:
                    fd:62:02:53:86:f2:0a:ff:e7:04:02:1a:df:5f:99:
                    a5:e0:8c:95:de:c4:0a:70:6d:b5:b2:33:64:8e:1d:
                    7a:3a:9b:be:c8:78:f7:18:7e:a5:9e:37:19:49:67:
                    76:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:CF:95:B9:6B:5D:A8:05:70:E1:CF:E1:51:8C:8E:05:19:AB:08:69
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/08CF95B96B5DA80570E1CFE1518C8E0519AB0869.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.220.0/22
                  170.245.172.0/22
                IPv6:
                  2804:2990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264022

    Signature Algorithm: sha256WithRSAEncryption
         35:0e:0e:5c:a2:c7:4c:c0:05:5f:0d:1b:02:cd:fa:dd:8d:a3:
         d3:a6:26:f4:9b:84:c5:ed:d3:16:10:a9:cb:68:cc:d2:c4:8e:
         81:ee:07:94:70:55:da:0b:0f:46:e9:1d:04:96:99:5c:ee:ac:
         c9:28:eb:07:ae:bd:4c:bd:c7:c0:f4:0d:f0:15:2d:78:36:f7:
         ed:3d:91:74:a6:e3:5a:b0:9b:e9:25:13:d1:1a:ee:53:e7:c9:
         66:13:af:65:60:90:13:e1:e5:c4:b4:16:94:59:a5:b3:9d:dd:
         bc:cd:37:33:3d:1c:57:68:f4:e9:c6:e0:e3:ad:ad:f0:68:1b:
         1e:0e:f6:30:35:33:4c:15:13:0b:0a:01:c9:b2:f4:dc:25:8d:
         34:b9:8f:f1:b7:e7:b1:aa:cf:52:9d:a8:1b:5a:87:ec:d8:4a:
         25:bd:5c:1c:89:b7:9e:dc:fb:16:c3:ad:8c:3a:ce:e3:16:42:
         44:90:83:ea:ff:e0:70:90:ba:8f:eb:b4:cb:1e:c2:19:29:e8:
         33:49:67:b9:2b:d7:d0:f4:68:7d:bb:5b:d1:46:c4:73:40:db:
         f2:7e:82:14:78:40:31:fd:a9:ed:d7:27:f8:2d:57:3c:64:1b:
         60:2d:1a:57:61:aa:80:42:25:90:4f:62:1b:3a:b1:d1:4b:16:
         aa:04:a8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org