Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0C8E9B58CD81E367CCA0AC1C0414C231FBE6475D.cer
File:                     0C8E9B58CD81E367CCA0AC1C0414C231FBE6475D.cer (raw, json)
Hash identifier:          TXUKhdM63r/iIO2W8sxovyXDVEViM++jcoc5jR1bATw=
Subject key identifier:   0C:8E:9B:58:CD:81:E3:67:CC:A0:AC:1C:04:14:C2:31:FB:E6:47:5D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       524BE8D710A5DA6C3AF3848774741FBC1D0FE885
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/0C8E9B58CD81E367CCA0AC1C0414C231FBE6475D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Jun 2022 11:55:29 +0000
Certificate not after:    Fri 02 Jun 2023 12:00:29 +0000
Subordinate resources:    AS: 270614
                          IP: 200.215.240.0/22
                          IP: 2804:6eb4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4b:e8:d7:10:a5:da:6c:3a:f3:84:87:74:74:1f:bc:1d:0f:e8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  3 11:55:29 2022 GMT
            Not After : Jun  2 12:00:29 2023 GMT
        Subject: CN=0C8E9B58CD81E367CCA0AC1C0414C231FBE6475D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:e7:ed:f7:01:97:fc:15:4c:52:10:47:54:
                    d9:45:51:34:04:fa:8a:d8:2b:96:89:38:6d:14:05:
                    4e:59:4c:de:35:5c:00:2b:91:df:61:1f:ce:a9:19:
                    3f:ee:97:37:7c:d5:22:b7:eb:09:56:88:b1:9b:8b:
                    5d:ab:9b:19:05:c6:3e:29:58:06:c1:b9:b1:e5:bd:
                    04:af:80:f2:74:69:3e:4d:c7:e1:c8:af:db:2a:1e:
                    a0:c9:f7:8b:59:40:46:99:b1:84:f3:dd:a9:65:1b:
                    a3:28:c0:66:39:3f:3f:fe:2d:82:a1:ff:a8:fa:e6:
                    68:f8:06:8e:d3:cf:e6:3f:c2:0a:71:38:be:b1:c8:
                    74:f0:24:ae:e1:79:fa:53:3c:21:29:7f:a4:66:43:
                    64:dc:df:d2:a6:0c:a8:a8:8d:da:0f:03:80:39:0f:
                    47:f1:0c:e8:ea:64:c7:90:4b:1a:6c:2b:d9:01:57:
                    09:90:7a:1a:ba:e9:f4:c7:87:59:24:e5:3b:a9:fc:
                    8a:e4:cc:8d:e8:82:c5:12:23:6f:d9:62:4d:4c:f9:
                    fb:68:65:22:b2:19:3a:41:19:b0:5b:16:bf:a7:38:
                    2f:9e:e1:e6:db:90:a7:dd:14:0b:1e:5d:1f:03:c3:
                    5b:0b:8c:ec:e8:df:4a:01:78:79:9d:ec:84:65:46:
                    08:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:8E:9B:58:CD:81:E3:67:CC:A0:AC:1C:04:14:C2:31:FB:E6:47:5D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/0C8E9B58CD81E367CCA0AC1C0414C231FBE6475D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.240.0/22
                IPv6:
                  2804:6eb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270614

    Signature Algorithm: sha256WithRSAEncryption
         86:9a:ce:1a:12:c7:23:03:2f:6d:8c:5c:63:71:11:59:7c:92:
         bc:a0:ba:f0:1d:0c:78:48:2b:3f:4e:f0:35:bc:cb:b1:a9:d1:
         5f:2e:9f:f2:ab:67:71:a1:21:f9:24:ab:91:79:17:32:ce:62:
         54:99:70:66:83:a2:5a:a2:70:c0:63:8c:0e:77:93:31:ea:1e:
         e1:db:28:81:85:ae:d9:2e:fa:5e:f4:a8:9a:bf:9d:6b:8f:0c:
         60:94:62:6d:31:28:68:05:20:ef:d9:c4:a6:e3:9c:54:f8:ed:
         14:2d:54:df:9a:d4:03:f5:be:0e:fc:c1:44:a7:29:e2:51:54:
         e0:e2:2d:16:4d:9d:a1:f8:15:37:78:54:63:04:cb:35:bb:64:
         e2:c5:0c:c7:d4:2d:a2:15:6f:f1:28:4d:6b:00:34:c3:35:f4:
         34:57:d7:8d:54:16:73:a4:d8:2b:a5:96:5b:49:9a:df:d2:41:
         05:2b:59:54:5c:e9:a8:f7:c8:60:bb:3a:5e:08:29:5a:e0:31:
         fb:92:16:3b:02:f1:ed:b7:17:57:8b:69:fb:cc:3d:9f:39:8a:
         ed:83:e5:33:5e:8d:2f:6d:bd:8d:b5:f2:f9:44:42:72:e0:70:
         37:9e:b9:02:84:99:f1:72:c2:18:e5:a3:7f:7e:a1:7d:36:f0:
         a8:c3:f3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:27 2025 by rpki-client