Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
File:                     82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer (raw, json)
Hash identifier:          kbfB/6oz5xst0vmO9nqKixgDwKMRib7Mb/JjXA1X08E=
Subject key identifier:   82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11F87CBC1540FB6FD8D9912578CA6E5546748A59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Aug 2023 14:15:21 +0000
Certificate not after:    Mon 12 Aug 2024 14:20:21 +0000
Subordinate resources:    AS: 52871
                          IP: 177.136.0.0 -- 177.136.9.255
                          IP: 177.136.12.0/24
                          IP: 177.136.14.0/23
                          IP: 177.136.32.0 -- 177.136.41.255
                          IP: 177.136.43.0 -- 177.136.45.255
                          IP: 177.136.47.0/24
                          IP: 201.157.194.0/23
                          IP: 201.157.199.0 -- 201.157.210.255
                          IP: 201.157.212.0/24
                          IP: 201.157.214.0/23
                          IP: 201.157.217.0 -- 201.157.218.255
                          IP: 201.157.220.0/24
                          IP: 201.157.229.0/24
                          IP: 201.157.231.0/24
                          IP: 201.157.235.0 -- 201.157.237.255
                          IP: 201.157.246.0/24
                          IP: 201.157.251.0 -- 201.157.255.255
                          IP: 2804:870::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f8:7c:bc:15:40:fb:6f:d8:d9:91:25:78:ca:6e:55:46:74:8a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 14 14:15:21 2023 GMT
            Not After : Aug 12 14:20:21 2024 GMT
        Subject: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:83:3e:1e:9d:39:ae:a7:82:ef:80:f2:4e:
                    88:f3:2c:87:42:57:74:52:d5:74:0f:87:c6:a9:38:
                    87:0b:f7:7e:bd:a3:e2:5b:28:90:bb:49:3d:43:09:
                    24:47:fe:80:6f:91:a9:08:30:d2:e0:9b:5c:d9:15:
                    7a:6f:f3:18:b3:cb:49:96:04:2a:28:4e:b5:7f:27:
                    f3:c3:4c:b4:97:52:aa:fc:4f:83:88:a0:49:8f:88:
                    d8:ba:3e:44:69:9b:a0:07:dd:a3:95:55:ea:d4:2e:
                    06:c7:59:8b:fb:1e:2d:46:5a:8f:60:ff:ad:96:72:
                    a1:4c:c3:9a:79:8b:97:48:27:5a:d6:79:39:05:d6:
                    4d:a7:96:83:27:d4:e1:79:cf:d2:54:67:31:a5:13:
                    15:70:3e:6b:d8:20:52:6a:81:04:01:51:7e:2d:33:
                    68:98:80:95:0e:bb:f1:64:25:34:53:2e:0b:e5:34:
                    aa:d4:7d:cf:21:24:aa:95:c8:79:e8:83:02:ae:a0:
                    ca:a8:91:b5:43:94:86:47:36:8d:7b:e6:a6:2b:f4:
                    f3:9e:3e:fa:b7:c7:23:41:13:f0:62:3b:2e:c6:56:
                    9f:36:bc:c0:2b:d8:26:10:7b:6a:b6:ac:78:db:29:
                    86:3a:c6:d8:4e:fc:78:32:40:50:41:ef:70:90:ca:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.0.0-177.136.9.255
                  177.136.12.0/24
                  177.136.14.0/23
                  177.136.32.0-177.136.41.255
                  177.136.43.0-177.136.45.255
                  177.136.47.0/24
                  201.157.194.0/23
                  201.157.199.0-201.157.210.255
                  201.157.212.0/24
                  201.157.214.0/23
                  201.157.217.0-201.157.218.255
                  201.157.220.0/24
                  201.157.229.0/24
                  201.157.231.0/24
                  201.157.235.0-201.157.237.255
                  201.157.246.0/24
                  201.157.251.0-201.157.255.255
                IPv6:
                  2804:870::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52871

    Signature Algorithm: sha256WithRSAEncryption
         32:9b:35:e8:d8:da:f2:f5:23:fc:f4:8d:69:4d:cd:b0:a7:c4:
         d1:a0:8e:3f:a4:cf:ad:a0:b6:77:ad:3c:50:d0:43:6d:bd:5d:
         6c:d8:08:4e:30:48:c8:0c:84:2b:b0:0f:55:4b:d7:68:5b:bd:
         c3:c3:a3:54:4e:67:d3:b3:44:38:2c:c0:b4:cc:06:eb:dc:d3:
         95:d2:5c:d7:76:73:22:63:95:f0:60:50:66:c8:c7:d2:46:1f:
         b8:bb:11:86:a5:5c:35:ab:f5:b9:47:87:ca:28:33:1a:e7:bc:
         ab:fd:46:ff:79:ad:cc:ba:38:fa:e6:dd:63:76:e7:73:f7:45:
         c0:c9:20:cd:c0:83:29:8b:d4:4a:d7:a0:70:a0:ab:71:78:c3:
         23:f7:33:de:50:29:a6:8d:0e:14:98:9e:ef:89:48:d4:9d:9c:
         5a:3d:fc:76:fc:e7:a3:ef:a5:a5:f0:06:a8:93:a6:f8:bb:b0:
         ca:82:69:32:7a:48:26:8e:29:01:36:ec:87:8a:a7:5f:7d:05:
         a6:88:0d:01:a2:9b:ff:c8:d3:9a:e5:91:40:16:61:ae:33:bc:
         be:ab:e2:94:be:e2:e3:88:68:70:92:a5:eb:c7:a9:bb:c1:3e:
         45:7b:b0:51:b6:67:d6:81:40:a1:20:23:10:38:1d:de:ca:18:
         b0:22:d0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org