Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/80E814B07EFEEBDE6301434C467AEDCA4D7947FC.cer
File:                     80E814B07EFEEBDE6301434C467AEDCA4D7947FC.cer (raw, json)
Hash identifier:          cF1QYJrZvYqEKrBQ6tp9ooX3qFNYZQenq/8WAHP/zmE=
Subject key identifier:   80:E8:14:B0:7E:FE:EB:DE:63:01:43:4C:46:7A:ED:CA:4D:79:47:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A318C93EB11381814CEEDA7E2A4181326792F8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/80E814B07EFEEBDE6301434C467AEDCA4D7947FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Jun 2023 13:48:06 +0000
Certificate not after:    Mon 10 Jun 2024 13:53:06 +0000
Subordinate resources:    AS: 52686
                          IP: 138.99.204.0/22
                          IP: 170.246.80.0/22
                          IP: 177.67.156.0/22
                          IP: 2804:2440::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:31:8c:93:eb:11:38:18:14:ce:ed:a7:e2:a4:18:13:26:79:2f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 12 13:48:06 2023 GMT
            Not After : Jun 10 13:53:06 2024 GMT
        Subject: CN=80E814B07EFEEBDE6301434C467AEDCA4D7947FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:b4:73:bf:71:24:2d:df:66:53:d5:e1:27:
                    09:33:e2:71:fc:5c:0b:91:aa:6a:90:e9:bb:eb:07:
                    fb:c6:77:73:7a:a8:b5:2a:31:78:96:66:cc:fd:8d:
                    86:73:7f:a6:6e:b6:02:04:24:a5:06:33:9b:63:20:
                    f8:1d:9d:b3:ad:26:28:80:fb:59:b6:e1:38:4d:1e:
                    b7:1c:e9:e7:23:aa:4c:18:0f:71:fb:e1:b8:5b:d8:
                    cc:e7:5b:c8:f3:5e:45:68:f9:3c:49:6c:59:99:d7:
                    08:6b:2e:79:9d:bf:2c:e3:b1:f5:b6:93:9b:4c:42:
                    1e:4d:b1:05:5f:73:4b:ff:fe:42:f5:83:52:76:cb:
                    20:dd:6a:c4:07:11:3d:b3:d8:42:0e:8b:73:6e:ab:
                    cc:a1:c5:9e:72:07:cc:6c:25:d1:67:82:74:bc:cd:
                    80:8f:d4:16:11:e6:39:bf:4e:f5:01:9e:e4:2c:ed:
                    34:9e:9d:d6:01:31:3b:9f:d8:aa:05:90:33:95:66:
                    19:1b:03:ac:81:9d:e2:b8:01:1f:99:93:3c:8a:1b:
                    fa:6a:0a:34:30:dc:cb:9f:42:2c:c4:59:5d:50:c5:
                    df:e9:bf:9f:a7:53:34:70:88:03:c8:8f:5f:57:0c:
                    f1:66:b1:13:db:f9:94:f4:29:04:f9:34:ac:86:ec:
                    cc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:E8:14:B0:7E:FE:EB:DE:63:01:43:4C:46:7A:ED:CA:4D:79:47:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/80E814B07EFEEBDE6301434C467AEDCA4D7947FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.204.0/22
                  170.246.80.0/22
                  177.67.156.0/22
                IPv6:
                  2804:2440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52686

    Signature Algorithm: sha256WithRSAEncryption
         90:8c:6d:4f:42:f5:58:48:ad:a7:65:25:bc:c4:a7:4f:c9:82:
         c5:b2:6b:70:45:95:e4:4c:44:47:22:ba:9a:eb:d5:dc:4b:42:
         1e:17:bd:a0:4e:1d:0b:09:78:a6:a7:d4:71:51:8f:3f:03:21:
         c8:9f:a8:b6:82:96:65:db:bb:ff:cb:c3:cc:f4:a2:15:ba:35:
         52:3a:b4:a1:d1:b9:72:d4:bc:fa:d5:43:c5:df:e4:b1:3d:e2:
         fd:72:65:40:e3:ce:c0:14:d2:23:43:63:7d:92:42:90:69:9a:
         73:9e:d3:19:58:71:5a:b0:b0:b2:f0:72:55:fa:1b:df:48:09:
         4f:28:8b:cd:e0:4e:84:6f:cb:fb:a0:46:9e:eb:09:b4:a4:ff:
         6e:fe:2a:2c:29:64:18:56:95:6c:6c:3b:3c:28:d4:dc:20:d6:
         3f:f1:7c:59:1c:67:90:cc:ad:65:4b:93:67:b5:46:24:84:8b:
         23:d0:4c:62:4f:6a:62:99:d7:6e:c9:62:83:d6:6a:8d:fe:9f:
         36:2e:aa:8e:b4:64:91:e3:af:cd:02:85:7a:80:c7:76:c9:b6:
         d8:3e:53:77:ee:29:a5:d2:20:d7:5a:bb:00:fc:7e:93:33:86:
         21:36:76:d9:c0:34:75:4b:9f:7c:b2:fc:a4:4c:ef:88:09:32:
         43:6f:0e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:51:51 2025 by rpki-client