Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.cer
File:                     08DC97818473BD73C2DD2C6E472F59268A919F1D.cer (raw, json)
Hash identifier:          UGH6TXPxYKaw/UWAvQ+rzN27ptIawfcJkScJ5vBlWGM=
Subject key identifier:   08:DC:97:81:84:73:BD:73:C2:DD:2C:6E:47:2F:59:26:8A:91:9F:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3768762C0BFCFB632D8DC444F2909A1AA44F4E20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Aug 2023 08:49:11 +0000
Certificate not after:    Tue 20 Aug 2024 08:54:11 +0000
Subordinate resources:    AS: 270704
                          IP: 189.127.144.0/22
                          IP: 2804:7014::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:68:76:2c:0b:fc:fb:63:2d:8d:c4:44:f2:90:9a:1a:a4:4f:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 22 08:49:11 2023 GMT
            Not After : Aug 20 08:54:11 2024 GMT
        Subject: CN=08DC97818473BD73C2DD2C6E472F59268A919F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:66:2b:64:73:b9:4a:f8:15:ce:03:76:38:
                    87:fd:57:1a:e1:a8:ec:4d:a8:69:fd:6e:0c:c1:7e:
                    e9:84:d2:30:d6:6a:e7:a2:d4:ef:af:b2:46:32:28:
                    b0:f8:67:15:13:ba:1d:67:cb:67:f5:7f:4e:39:49:
                    22:73:ca:85:83:96:20:b6:34:6e:af:91:35:35:fa:
                    f3:ac:c1:51:1f:34:85:e6:cb:96:dc:54:2f:e6:dd:
                    46:80:ac:cc:77:5e:3e:72:29:78:9c:72:4c:74:dd:
                    cb:ec:b2:a9:ea:6a:26:46:00:ce:df:c2:32:d6:9a:
                    52:02:4e:ce:0e:f8:19:14:4e:5e:b0:da:f2:6c:75:
                    48:11:01:37:c3:74:2f:42:59:10:92:93:31:6c:79:
                    5d:b5:c8:23:f9:06:08:39:bd:03:12:88:31:cd:22:
                    31:bf:b9:12:9a:4c:48:c8:df:5d:d9:f8:69:5f:19:
                    89:5c:3c:ca:16:c3:72:1d:d1:2b:22:16:e9:bc:cb:
                    91:a4:07:dc:40:a6:33:16:be:7b:ce:67:67:d5:f3:
                    88:c8:5e:f8:02:70:15:39:fa:df:7f:72:09:e1:43:
                    57:68:c0:30:d2:b8:75:95:39:3f:3d:77:71:76:44:
                    80:c9:a4:28:a8:2b:e8:5e:2c:00:75:e6:42:6a:89:
                    a5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:DC:97:81:84:73:BD:73:C2:DD:2C:6E:47:2F:59:26:8A:91:9F:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.144.0/22
                IPv6:
                  2804:7014::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270704

    Signature Algorithm: sha256WithRSAEncryption
         25:bb:7e:9d:6a:24:61:29:fe:94:c0:a9:2d:a3:e0:89:86:bc:
         d4:fe:1e:55:57:7e:2b:f3:f3:cf:ba:6f:27:7c:4a:da:33:86:
         00:ed:4f:ae:a1:ae:fd:08:b2:95:10:04:a8:e8:da:89:2b:9d:
         1f:ad:de:64:a3:cf:91:c8:cf:2c:5f:d5:14:01:e0:f3:99:ca:
         2a:8b:e1:e7:dd:a6:b7:83:e9:2a:35:23:8c:6d:28:ec:fd:47:
         93:08:e2:d1:71:44:d4:4c:1c:cc:2a:f1:96:99:8b:3c:2b:94:
         99:f3:b0:66:39:53:63:83:21:bf:0b:22:ed:55:cc:f4:a5:08:
         51:d8:6c:7d:e6:c1:4b:de:da:b4:a3:2b:b3:df:5e:2f:db:11:
         6d:49:78:0d:7b:19:00:bf:f5:be:3e:df:a7:c6:de:a3:74:a5:
         d9:2c:83:34:db:d6:0f:5c:01:dd:7b:bb:5b:6e:de:1a:62:f7:
         7b:b1:e5:54:63:36:57:c7:ef:ca:4d:33:17:b6:f3:90:ac:83:
         68:fa:6a:0a:4d:ce:fb:87:1d:fd:b3:2a:ce:f4:7b:10:ea:a6:
         46:ff:40:a6:4c:cc:ab:f3:ff:7c:7e:96:57:04:f2:9f:74:6b:
         3d:4a:e2:53:d0:ef:0e:13:63:ed:cc:65:32:4f:57:2b:d2:29:
         39:b1:6f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org