Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8090DF482CB9A9B224C135ED8E8B4ABCD6D0A90A.cer
File:                     8090DF482CB9A9B224C135ED8E8B4ABCD6D0A90A.cer (raw, json)
Hash identifier:          82CTTMf+TtHGpfSYk+B0Usxgern4jPGfDhENm8Kj64A=
Subject key identifier:   80:90:DF:48:2C:B9:A9:B2:24:C1:35:ED:8E:8B:4A:BC:D6:D0:A9:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       70029E87F58E91F650F30058ACAFE75322AA4F09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/8090DF482CB9A9B224C135ED8E8B4ABCD6D0A90A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 21:03:12 +0000
Certificate not after:    Tue 08 Oct 2024 21:08:12 +0000
Subordinate resources:    AS: 269654
                          IP: 45.190.232.0/22
                          IP: 2804:67d8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:02:9e:87:f5:8e:91:f6:50:f3:00:58:ac:af:e7:53:22:aa:4f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 21:03:12 2023 GMT
            Not After : Oct  8 21:08:12 2024 GMT
        Subject: CN=8090DF482CB9A9B224C135ED8E8B4ABCD6D0A90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:14:16:f4:f2:95:25:2c:a7:46:08:0b:2d:
                    63:8b:7f:e2:64:9a:f8:46:b1:13:86:6c:52:ca:fd:
                    13:e2:f7:f3:21:ae:84:8d:02:d5:11:dd:22:46:5a:
                    56:45:d9:aa:6f:f1:0d:d7:7d:f4:46:31:ce:b2:cf:
                    f3:bf:09:71:be:b2:29:83:05:fa:09:57:d5:1f:83:
                    17:c0:95:b6:1d:ef:22:84:df:5a:f5:fe:71:d8:2e:
                    46:35:69:6b:b1:6a:7f:29:b6:b6:ad:59:f5:d5:a3:
                    13:bf:1f:50:c0:fa:bb:13:19:50:7a:33:43:dd:5a:
                    05:ea:de:76:ee:af:66:46:53:67:a2:bd:be:5c:f0:
                    0f:74:0e:29:26:32:5a:f4:92:52:bf:f3:34:23:e8:
                    f0:3e:57:da:01:ce:85:a8:06:19:e3:03:8f:b3:15:
                    fe:bd:f7:f2:00:16:70:9e:58:2c:75:7f:17:c2:8c:
                    d9:bd:f3:94:6b:ea:8e:ab:6e:6a:58:0a:2f:97:67:
                    c1:de:cd:b8:26:d6:43:79:a6:0c:36:20:dd:a9:89:
                    e2:72:49:8b:5a:af:d4:69:03:04:6f:30:c3:7c:75:
                    a5:14:1c:02:f3:40:74:bb:7d:cb:49:cd:8b:ec:a9:
                    eb:8b:b8:4b:46:51:07:75:16:c5:2d:9b:c0:d5:bd:
                    36:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:90:DF:48:2C:B9:A9:B2:24:C1:35:ED:8E:8B:4A:BC:D6:D0:A9:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/8090DF482CB9A9B224C135ED8E8B4ABCD6D0A90A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.232.0/22
                IPv6:
                  2804:67d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269654

    Signature Algorithm: sha256WithRSAEncryption
         b5:03:d6:e4:1f:48:29:4c:a1:6d:ab:76:fa:44:0c:e4:f9:12:
         0c:9b:48:1e:d9:8c:96:c1:fd:45:94:59:cb:12:86:a3:6d:a9:
         0a:07:01:14:c1:cb:f4:7a:ce:dd:ba:47:1f:16:3f:64:c0:c1:
         9b:81:d0:f3:6e:f6:80:b7:67:3e:0c:86:bf:f1:bb:ce:9d:2f:
         b4:96:0c:1c:34:d2:97:b5:39:0d:3c:fe:15:50:a2:c1:88:45:
         a4:3d:b5:34:c0:ec:c8:4e:38:da:f0:2f:5c:72:99:28:69:37:
         db:60:51:61:56:75:54:04:62:25:fd:ce:fd:31:17:87:18:1e:
         e2:1f:ac:f1:52:38:80:b2:dd:80:29:78:51:d3:b7:d3:55:bb:
         ac:80:f1:e0:01:97:7e:b4:04:7d:c0:00:33:26:cb:d2:9d:3e:
         9d:30:25:53:e7:b5:a7:d0:99:b3:9b:4c:2c:58:27:d4:8e:a1:
         91:aa:12:df:d1:a9:dd:e9:01:e0:59:81:1d:a8:c0:ce:c9:94:
         f6:80:fe:21:c4:25:78:f5:5d:19:b7:83:ed:11:52:bb:78:c2:
         27:9e:ba:2b:a0:2f:3d:3b:20:a7:59:e5:27:76:29:5c:c0:34:
         c3:73:ca:3f:b7:77:68:ae:74:60:93:c2:5a:ee:3b:41:1e:fe:
         66:7b:9d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:31:32 2025 by rpki-client