Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8755FEBCF039857E1AF03ECE2861AB7D18E1F04C.cer
File:                     8755FEBCF039857E1AF03ECE2861AB7D18E1F04C.cer (raw, json)
Hash identifier:          HcfnHxOqcZGWPzR6h31Zg4MSDxDE8SbP7WHC+Jxoq30=
Subject key identifier:   87:55:FE:BC:F0:39:85:7E:1A:F0:3E:CE:28:61:AB:7D:18:E1:F0:4C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23C8F9697BE29E7F165A48C4F8E80496188C03F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/0/8755FEBCF039857E1AF03ECE2861AB7D18E1F04C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 05:11:16 +0000
Certificate not after:    Fri 07 Mar 2025 05:16:16 +0000
Subordinate resources:    AS: 264975
                          IP: 170.0.188.0/22
                          IP: 2804:30d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c8:f9:69:7b:e2:9e:7f:16:5a:48:c4:f8:e8:04:96:18:8c:03:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 05:11:16 2024 GMT
            Not After : Mar  7 05:16:16 2025 GMT
        Subject: CN=8755FEBCF039857E1AF03ECE2861AB7D18E1F04C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1c:f3:ca:51:35:59:63:ed:1b:70:c9:7e:6d:
                    47:37:bf:95:66:4b:c1:0c:0b:61:fe:18:b9:b9:cd:
                    0a:f5:38:c9:50:2c:34:4b:1a:80:8e:64:46:07:b6:
                    3f:48:40:3b:d1:9b:e9:11:25:55:8c:d0:9c:5e:d7:
                    83:33:27:93:3d:9a:fc:4d:14:3e:c6:e7:eb:9a:05:
                    6c:dc:46:a4:69:fb:58:f4:ad:4b:30:fb:a2:56:64:
                    c6:1b:34:44:10:5a:c8:3a:fa:0b:be:e7:aa:84:5a:
                    2e:58:c7:f7:12:5f:fa:67:ee:bb:f3:a5:f0:ee:93:
                    2c:51:7d:e8:91:73:7b:6f:38:bc:7d:35:5a:40:18:
                    70:4d:cb:3f:88:94:01:81:11:88:02:dd:19:38:b2:
                    76:22:01:af:d3:11:eb:31:39:1f:e9:a4:3a:3c:da:
                    69:e6:0a:d3:25:06:db:28:2e:f0:1e:76:cf:39:e9:
                    02:ea:75:ff:5e:ee:d9:84:ed:18:3d:0e:dc:45:1a:
                    2e:bc:82:f4:c6:f1:44:8e:10:77:f5:d0:ab:ab:f0:
                    be:51:e0:b9:bf:be:50:85:b9:fa:3a:eb:45:e7:b4:
                    26:1c:9e:22:a5:00:81:11:5f:02:71:34:af:c9:e1:
                    ae:59:31:9b:ac:1f:45:f0:6a:75:c8:34:67:7b:13:
                    81:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:55:FE:BC:F0:39:85:7E:1A:F0:3E:CE:28:61:AB:7D:18:E1:F0:4C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/0/8755FEBCF039857E1AF03ECE2861AB7D18E1F04C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.188.0/22
                IPv6:
                  2804:30d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264975

    Signature Algorithm: sha256WithRSAEncryption
         28:e1:8c:6f:71:bd:cc:ca:ee:8d:bd:f5:39:c0:21:48:4d:3c:
         d5:f3:06:31:28:f8:6f:f5:20:78:ff:15:32:7d:cb:39:94:7d:
         ba:85:2a:31:ee:fc:6d:56:d6:d3:f0:77:ae:5c:42:4d:91:d8:
         20:e7:42:35:1e:09:83:13:43:6c:74:9d:9c:a9:03:26:2b:8e:
         62:10:09:54:77:b2:6e:34:bc:14:d4:91:e4:91:7b:95:e1:c4:
         c6:52:5d:ca:c7:6d:25:88:50:40:45:1b:23:66:b2:99:bf:3b:
         07:70:96:5d:33:c9:56:8b:81:b3:87:57:66:c9:2c:66:60:7e:
         b7:20:92:7a:35:93:65:a5:b1:f9:1e:a9:ca:4a:db:90:34:ab:
         3c:5d:9e:c3:05:3d:48:51:77:e8:a7:50:74:9a:ef:0a:21:64:
         b7:24:9e:ae:f2:25:7d:b2:fb:e9:d9:14:f7:2d:76:3c:0a:14:
         41:dc:da:28:6f:9e:93:f8:32:ee:f3:6f:e7:76:ff:89:0e:77:
         dc:aa:be:57:9a:db:53:c7:99:02:56:d1:7f:6a:ba:e0:a6:4d:
         83:c6:53:58:58:ab:6c:d3:9e:26:4e:f0:09:a8:0a:d4:6b:dc:
         ca:8c:00:1c:b1:9f:85:df:85:fe:1b:b7:bf:c5:e8:23:a4:fc:
         7b:81:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org