Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8542C77C0855B4B5D80E85975B54D46087005133.cer
File:                     8542C77C0855B4B5D80E85975B54D46087005133.cer (raw, json)
Hash identifier:          sA0TYyZxoizzy+KLJ2psNUIfDA6TlO7GjQ1vgUpw0ZI=
Subject key identifier:   85:42:C7:7C:08:55:B4:B5:D8:0E:85:97:5B:54:D4:60:87:00:51:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58CD7BEA5A83849F747387D0763749309A83CD91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AtLA8u3iSgkAWn14j9RSve7MLfj72jtHSMoPZVgLzZWU/0/8542C77C0855B4B5D80E85975B54D46087005133.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AtLA8u3iSgkAWn14j9RSve7MLfj72jtHSMoPZVgLzZWU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 01:01:43 +0000
Certificate not after:    Tue 28 May 2024 01:06:43 +0000
Subordinate resources:    AS: 267169
                          IP: 45.230.148.0/22
                          IP: 2804:4930::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cd:7b:ea:5a:83:84:9f:74:73:87:d0:76:37:49:30:9a:83:cd:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 01:01:43 2023 GMT
            Not After : May 28 01:06:43 2024 GMT
        Subject: CN=8542C77C0855B4B5D80E85975B54D46087005133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:51:e7:06:69:17:7d:9f:04:cf:b7:a6:05:
                    2f:f5:3f:84:f8:50:41:26:97:b5:c9:92:d6:53:9b:
                    44:6e:85:78:8b:72:7c:c8:f9:cd:5d:27:84:7a:70:
                    90:73:12:3a:a9:38:41:df:38:a4:c4:69:1d:2b:5f:
                    17:c8:20:10:52:f7:50:80:9a:38:6f:8d:6e:f7:ba:
                    75:f7:16:05:a5:30:33:fc:4b:20:9a:fb:42:8c:2e:
                    a0:d9:f8:22:49:3a:c9:96:8e:1d:92:df:dc:59:a1:
                    27:ca:2d:8c:d5:0e:8b:1b:6b:7f:c9:09:ff:85:f1:
                    a7:00:02:6a:60:ba:48:f3:c8:37:87:d1:5a:72:52:
                    b7:c8:02:c9:4e:ab:26:18:a0:1a:93:a2:41:b5:c5:
                    31:9e:d0:38:29:7e:53:38:b8:f4:74:06:bd:42:a9:
                    93:72:54:8f:2c:88:3b:5d:ea:35:a4:f0:ca:7f:30:
                    27:6c:46:9b:70:52:46:78:0b:ab:b6:eb:33:ae:be:
                    2d:af:e4:86:b9:9e:55:18:76:3c:19:56:a9:e4:8c:
                    62:9a:9d:82:08:00:4e:26:a9:bb:d2:64:fb:9b:d5:
                    d2:e1:aa:8a:32:ca:75:f2:2e:ce:95:21:fb:4c:62:
                    1c:50:51:ad:ed:a7:d6:b2:e1:7d:11:33:4e:6a:8e:
                    ab:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:42:C7:7C:08:55:B4:B5:D8:0E:85:97:5B:54:D4:60:87:00:51:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AtLA8u3iSgkAWn14j9RSve7MLfj72jtHSMoPZVgLzZWU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AtLA8u3iSgkAWn14j9RSve7MLfj72jtHSMoPZVgLzZWU/0/8542C77C0855B4B5D80E85975B54D46087005133.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.148.0/22
                IPv6:
                  2804:4930::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267169

    Signature Algorithm: sha256WithRSAEncryption
         86:c9:0e:2a:5b:25:f1:b0:66:24:0c:46:40:fd:38:ed:5f:05:
         f3:f9:c6:0c:c1:37:da:a9:22:9b:16:db:58:d8:47:68:0e:2e:
         cb:92:dd:b7:be:97:02:a8:8b:6d:90:fe:43:45:b0:53:1e:bc:
         30:be:15:8b:a4:75:a2:34:4d:02:7d:39:2f:18:5c:4b:48:89:
         f2:05:e3:ab:00:40:98:95:c6:e8:7f:d2:0c:76:96:a4:2d:94:
         ae:46:ed:22:05:42:59:cb:d4:2c:ab:69:89:16:7b:14:cd:7c:
         92:64:2c:0a:6b:a0:13:12:ea:82:f3:91:84:ae:16:67:dc:7e:
         62:67:de:a9:09:3b:31:c4:d9:28:29:4e:7d:b7:3a:cb:88:20:
         ee:d1:5b:e4:94:08:58:73:8a:1b:af:90:a1:8b:a1:a7:1c:37:
         48:e4:be:2f:40:7f:96:c2:f7:55:db:5a:b8:0c:53:e7:69:5a:
         be:ba:96:63:44:ba:07:38:6e:8f:1c:1d:dc:8c:1b:3f:2d:d1:
         0b:60:84:2e:11:dc:a5:66:70:a6:6e:79:d2:76:81:83:de:a4:
         85:59:75:73:eb:d0:c3:e7:e5:09:b1:3d:a2:b3:0e:cb:a6:ea:
         59:9c:3c:04:49:7b:ff:27:44:e1:43:36:f4:2b:01:15:9f:ac:
         6f:72:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org