Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8178EFC7D88F0B922C750C074384F509ABCA85CF.cer
File:                     8178EFC7D88F0B922C750C074384F509ABCA85CF.cer (raw, json)
Hash identifier:          aCBoYBUtGhVbJbi4PjVsCAKY4lYy+M3YGaldxdHS0DA=
Subject key identifier:   81:78:EF:C7:D8:8F:0B:92:2C:75:0C:07:43:84:F5:09:AB:CA:85:CF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60AE3092401B609717F76116A2A90A1535598A57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9KE5pueBQ2PXfuSTCpWg3YfDn7tbYRwLNDPChspk5cuo/0/8178EFC7D88F0B922C750C074384F509ABCA85CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9KE5pueBQ2PXfuSTCpWg3YfDn7tbYRwLNDPChspk5cuo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 08 Oct 2023 14:08:40 +0000
Certificate not after:    Sun 06 Oct 2024 14:13:40 +0000
Subordinate resources:    AS: 263978
                          IP: 138.255.216.0/22
                          IP: 2804:28c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ae:30:92:40:1b:60:97:17:f7:61:16:a2:a9:0a:15:35:59:8a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  8 14:08:40 2023 GMT
            Not After : Oct  6 14:13:40 2024 GMT
        Subject: CN=8178EFC7D88F0B922C750C074384F509ABCA85CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:67:9a:8b:ad:62:5b:e0:03:47:b4:f1:f4:
                    fd:46:a3:b5:80:a0:04:5e:35:49:92:8d:c3:7b:5c:
                    98:6d:65:88:3c:27:2c:7a:a0:c4:24:40:f9:69:6f:
                    2f:19:c0:1d:2e:3f:73:70:a0:e5:c4:cd:d4:dd:c2:
                    a4:3d:cb:81:52:af:2d:79:fb:41:1e:be:ee:b9:26:
                    f3:d4:95:5d:0f:f0:e2:ca:e7:1b:f9:53:0f:0d:5d:
                    7e:7f:18:c5:6a:2d:3b:84:14:4b:ae:3b:1f:b2:34:
                    a9:69:a8:89:19:34:89:32:19:94:de:d9:e0:ac:45:
                    39:a5:23:d8:cd:08:85:61:78:21:65:32:3d:93:1b:
                    14:5d:12:c8:67:a3:b5:0f:62:fc:e0:9c:a0:b0:46:
                    19:77:cf:b5:ef:c6:5c:df:69:3f:b4:c0:34:ea:bb:
                    e5:73:84:2b:03:2d:26:37:59:41:c6:8f:ac:2e:aa:
                    93:3b:d2:c7:0e:ca:53:7d:e6:e9:50:b5:60:04:05:
                    29:51:96:5d:b7:78:92:9c:d4:ed:46:cc:1e:67:53:
                    06:16:fb:5c:22:a7:ea:12:fb:2b:75:7b:53:f1:64:
                    60:8f:e0:1a:70:68:ba:ca:fd:eb:87:b5:dd:4b:71:
                    4d:76:e8:a4:74:e1:14:e4:8a:7b:63:60:14:5b:b0:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:78:EF:C7:D8:8F:0B:92:2C:75:0C:07:43:84:F5:09:AB:CA:85:CF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9KE5pueBQ2PXfuSTCpWg3YfDn7tbYRwLNDPChspk5cuo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9KE5pueBQ2PXfuSTCpWg3YfDn7tbYRwLNDPChspk5cuo/0/8178EFC7D88F0B922C750C074384F509ABCA85CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22
                IPv6:
                  2804:28c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263978

    Signature Algorithm: sha256WithRSAEncryption
         8d:b2:64:21:d0:e2:21:18:34:07:51:72:f7:81:8f:d8:e3:cf:
         dd:1c:19:2a:e7:4e:d4:e1:fa:28:eb:1a:f0:ca:5d:a7:5e:9b:
         38:c1:ed:f3:7e:3e:ec:d9:c0:b3:b1:c4:ac:00:9b:9a:2e:77:
         e2:01:3e:b4:53:2d:e0:b7:13:a6:7a:98:63:85:44:21:ba:ed:
         2d:df:a4:79:56:6c:64:a2:60:86:df:18:2d:26:b5:89:6b:2b:
         8c:0c:6e:a1:5d:dc:be:01:c0:50:60:71:0a:b9:12:43:91:4d:
         0d:fa:89:86:c4:70:ee:6e:31:24:85:fd:77:0f:41:00:c8:aa:
         b6:e5:43:a1:e9:67:37:3a:8f:23:84:37:da:6e:2f:e9:da:13:
         7a:a9:97:f3:a5:e5:12:7c:94:7e:e4:93:2f:03:c7:75:bb:ec:
         f0:ed:9f:fb:28:fb:84:0d:df:90:5e:de:b9:82:9b:76:be:2b:
         99:94:db:4e:5c:80:fb:c4:06:94:cb:04:76:aa:a4:c1:3a:11:
         bf:70:76:ae:24:aa:23:7d:72:f5:aa:c5:94:df:bb:55:78:35:
         b6:8b:ce:85:1f:a4:1f:54:5b:31:74:53:4e:ca:8d:2d:90:00:
         76:c0:0c:75:5e:19:c8:b0:90:6f:77:c7:f9:c1:20:8f:76:15:
         10:87:77:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org