Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8495E15CD7DE97D8E5B0ABEF39B99371653B49D2.cer
File:                     8495E15CD7DE97D8E5B0ABEF39B99371653B49D2.cer (raw, json)
Hash identifier:          ma9qIAkQ8ajR97rJhi6Isg9pd/GoZuWeTzK9pZfFmgQ=
Subject key identifier:   84:95:E1:5C:D7:DE:97:D8:E5:B0:AB:EF:39:B9:93:71:65:3B:49:D2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E86F76092FD055C18D7E4AFA87212D8A5152E9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/8495E15CD7DE97D8E5B0ABEF39B99371653B49D2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Oct 2023 14:07:07 +0000
Certificate not after:    Fri 11 Oct 2024 14:12:07 +0000
Subordinate resources:    AS: 270877
                          IP: 138.185.88.0/22
                          IP: 2804:72d0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:86:f7:60:92:fd:05:5c:18:d7:e4:af:a8:72:12:d8:a5:15:2e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 14:07:07 2023 GMT
            Not After : Oct 11 14:12:07 2024 GMT
        Subject: CN=8495E15CD7DE97D8E5B0ABEF39B99371653B49D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:60:05:9d:81:71:3c:c0:76:44:e2:3d:8b:
                    55:50:e6:2a:9b:44:2e:37:f2:b9:b0:dc:02:3c:56:
                    37:dc:08:06:05:7b:a4:bc:da:61:9e:b2:8a:ef:f4:
                    86:d9:c5:db:f7:44:c2:8c:9e:09:fe:1a:f2:a6:5c:
                    bb:29:73:c9:71:91:7a:16:df:8e:7c:9f:71:70:c1:
                    ef:31:5d:bb:47:23:74:f1:98:a3:3a:57:36:52:b7:
                    63:c7:d6:bf:a7:e3:c2:16:bd:3b:3f:b5:60:f9:02:
                    cb:5d:a1:29:02:96:d2:79:ff:f5:84:23:4b:df:2f:
                    ba:ac:01:53:92:fa:61:54:90:17:9e:21:d9:e8:c7:
                    d5:0c:98:93:86:66:96:dd:53:02:2d:60:94:58:64:
                    ce:59:0e:96:da:82:5d:d0:57:1d:7e:37:37:9a:4a:
                    9f:88:dc:96:2f:75:ac:76:09:4a:e3:5d:82:7c:d1:
                    8c:31:67:16:e6:ad:f6:5f:a4:89:73:c6:28:9f:8a:
                    e6:03:80:d3:e2:07:c7:3c:61:41:d9:7e:ba:5a:ec:
                    94:9f:27:91:98:a0:94:07:3e:6e:c9:d7:5b:2e:c2:
                    01:15:5a:c5:6c:b6:0c:7d:43:15:c6:f9:21:d3:5e:
                    28:1f:16:71:7b:6a:3c:81:e6:d2:2f:03:4a:70:87:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:95:E1:5C:D7:DE:97:D8:E5:B0:AB:EF:39:B9:93:71:65:3B:49:D2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/8495E15CD7DE97D8E5B0ABEF39B99371653B49D2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.88.0/22
                IPv6:
                  2804:72d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270877

    Signature Algorithm: sha256WithRSAEncryption
         a9:90:e2:31:7d:7a:bf:ed:1e:f8:35:e0:88:ab:e5:07:63:0c:
         69:47:28:e0:09:c5:4e:5d:40:4d:91:b3:90:4a:2c:fe:f1:ca:
         16:ab:3f:cd:70:d1:1a:12:45:34:30:f2:af:4c:05:21:1b:94:
         12:41:7f:23:01:74:22:c4:43:8b:8a:67:09:2f:93:e1:bf:40:
         c1:b8:31:93:c6:eb:45:f8:dc:6e:05:ab:c1:12:ff:f2:6e:ed:
         44:ba:c9:f2:7b:df:57:1d:bb:f8:11:dd:33:15:dd:a9:5a:8c:
         9e:9c:41:ff:c3:0b:f3:39:1c:2f:0b:0a:78:78:2c:0d:59:0d:
         d0:97:15:66:be:56:cb:6c:45:f3:bd:2d:8b:bd:38:07:55:5b:
         94:80:45:ec:71:38:be:53:64:1b:c1:1b:d4:5a:75:cc:f6:1f:
         e1:a0:d6:35:16:20:ae:b7:48:3b:11:52:7d:04:71:0a:a4:9c:
         e6:89:76:ab:99:60:a0:77:37:54:93:44:5c:fb:84:65:dd:77:
         16:cf:09:40:c9:92:f9:bc:40:66:7f:4b:a3:4b:36:55:77:6b:
         14:a8:64:1e:89:a3:ba:21:d3:cd:5f:a3:1c:6e:35:5f:dd:a2:
         f6:a8:6a:1b:94:b6:d5:dc:85:4c:03:c2:fa:8c:c7:52:c4:ef:
         d7:89:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:08 2025 by rpki-client