Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/08DE034B9C48C28A3FE65ED192908212FFC402A7.cer
File:                     08DE034B9C48C28A3FE65ED192908212FFC402A7.cer (raw, json)
Hash identifier:          XkPhVt+rtWcL2qY70q0O8SUG84pHRvtW5+4sKI9vjYo=
Subject key identifier:   08:DE:03:4B:9C:48:C2:8A:3F:E6:5E:D1:92:90:82:12:FF:C4:02:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B175185069EF8182070AC88A0491F3F1813BC94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/08DE034B9C48C28A3FE65ED192908212FFC402A7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Aug 2023 22:17:32 +0000
Certificate not after:    Thu 08 Aug 2024 22:22:32 +0000
Subordinate resources:    AS: 271195
                          IP: 179.49.152.0/22
                          IP: 2804:77b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:17:51:85:06:9e:f8:18:20:70:ac:88:a0:49:1f:3f:18:13:bc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 10 22:17:32 2023 GMT
            Not After : Aug  8 22:22:32 2024 GMT
        Subject: CN=08DE034B9C48C28A3FE65ED192908212FFC402A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7f:3a:1f:b0:52:8b:dc:bd:74:f9:9d:8e:91:
                    70:c8:c5:fe:fa:ea:66:24:e2:f2:3f:81:e4:0b:38:
                    d7:29:b5:42:39:31:74:2d:aa:a9:b0:a0:4e:6e:37:
                    37:87:d7:5c:06:0d:6f:b7:18:47:fd:51:f4:c5:f4:
                    a0:aa:9b:0c:d5:1f:4d:7f:a5:c2:89:d2:c8:24:99:
                    a3:42:5a:2b:e9:e9:70:62:fe:4c:55:1c:e0:7d:bc:
                    52:57:01:d9:4d:fc:8e:dc:cd:1a:fb:94:7e:f6:3d:
                    5e:e5:e2:a0:c4:8f:0e:26:34:9f:b4:39:4c:89:f0:
                    97:f9:7f:4e:3b:67:bc:13:b3:46:3c:a0:eb:e1:85:
                    2a:cd:b3:44:d9:7a:8f:c9:8e:9a:11:1a:be:c7:3a:
                    f0:2d:ce:c7:ad:c5:c7:04:d7:44:76:05:b9:f5:3d:
                    7d:f1:f9:3f:8e:35:3c:c5:46:12:fc:9f:8d:a0:a4:
                    fe:ce:66:54:4a:fc:bb:77:d4:5a:71:40:ef:15:8e:
                    17:93:5a:bd:a1:78:09:ed:54:46:2d:80:1e:b2:8e:
                    2f:db:7c:20:58:31:da:1a:d8:bd:88:60:b4:c8:af:
                    e3:1a:c5:44:61:6d:3e:ce:28:d0:c0:84:00:3e:8e:
                    ce:0f:bb:a7:6c:90:69:a1:64:51:ac:58:fc:c1:08:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:DE:03:4B:9C:48:C2:8A:3F:E6:5E:D1:92:90:82:12:FF:C4:02:A7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/08DE034B9C48C28A3FE65ED192908212FFC402A7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.152.0/22
                IPv6:
                  2804:77b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271195

    Signature Algorithm: sha256WithRSAEncryption
         0c:fc:d4:0d:45:98:0a:86:c1:6c:72:47:f7:1e:80:4a:b5:e6:
         fb:2d:68:44:14:67:1c:49:60:de:53:c0:16:f6:69:1e:8f:25:
         58:09:40:56:03:d8:cf:e1:fc:df:24:b4:d5:d6:e2:66:cd:90:
         57:8e:88:70:be:99:05:c7:47:80:02:20:a0:25:2d:33:52:ce:
         84:ec:f0:fd:a3:d0:9b:82:4e:44:10:a7:81:f2:cd:c2:ee:55:
         66:96:cd:f4:9f:fd:64:57:4e:95:7a:bc:84:15:ac:01:39:54:
         a4:74:06:48:3f:3e:72:8f:2b:ab:54:b2:f5:05:d7:e8:0b:2f:
         51:cf:ed:9f:ae:d5:57:ee:e9:85:b8:16:55:0d:59:c5:16:e8:
         4c:f8:4c:ed:10:be:9b:d1:40:f3:5b:10:24:62:6b:28:7e:e6:
         ae:2e:60:05:62:ce:2b:6d:78:99:6b:ec:7c:98:72:3c:c9:41:
         2c:35:7b:64:c7:10:b9:26:ec:1f:b6:ac:c6:ea:90:b4:0b:7c:
         d8:03:ac:dd:77:e4:b6:cd:33:4a:4e:3e:3c:8e:b2:1b:74:09:
         6e:69:00:df:6b:11:b4:6c:d3:04:b9:ed:98:df:e0:0e:fa:40:
         56:22:3c:47:95:8c:ad:5a:6c:9e:d2:d2:7c:41:bb:d4:57:5f:
         76:c2:8c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org