Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7.cer
File:                     8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7.cer (raw, json)
Hash identifier:          UcyLFWsapn8ra+N7tgXOW1chy5ix0+VJWB70Ul67HXk=
Subject key identifier:   87:86:B5:E0:27:E1:0F:EC:4F:0B:2A:27:99:5F:82:0D:8E:A4:CA:F7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0C07631EFCCD3F234AA596BF70CF02B5DAFD2FED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0/8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 17:02:21 +0000
Certificate not after:    Wed 04 Sep 2024 17:07:21 +0000
Subordinate resources:    AS: 263557
                          AS: 267109
                          IP: 45.226.56.0/23
                          IP: 138.204.32.0/22
                          IP: 186.250.252.0/22
                          IP: 2804:ee4::/32
                          IP: 2804:4848::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:07:63:1e:fc:cd:3f:23:4a:a5:96:bf:70:cf:02:b5:da:fd:2f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 17:02:21 2023 GMT
            Not After : Sep  4 17:07:21 2024 GMT
        Subject: CN=8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:74:33:87:ee:b3:a2:1f:b7:23:0a:fd:bb:
                    00:7c:28:a7:e5:18:02:c5:03:32:f7:99:a5:a5:d3:
                    1f:78:51:39:04:88:fb:98:f3:11:50:38:a0:93:9b:
                    cc:00:56:21:3c:0a:e2:30:de:79:f7:be:2a:2c:4a:
                    e5:f1:47:a9:56:28:60:27:a9:36:48:bc:54:a4:a2:
                    f8:c7:2d:3d:18:67:d6:ed:6a:1b:de:da:2a:d6:ac:
                    dc:cb:58:f7:30:94:13:3c:a9:35:d6:20:31:16:e4:
                    6b:37:e8:aa:9d:84:2b:36:a9:37:14:21:7b:98:e4:
                    93:19:fd:26:fa:b3:b4:83:e8:b7:6f:d3:55:a0:b9:
                    7c:69:aa:f4:75:e2:a6:32:99:7f:52:16:85:c0:02:
                    c4:1e:37:85:a4:bf:a5:49:3f:8b:fe:3c:4d:21:3e:
                    9b:c9:f3:5b:1e:fd:52:c6:f6:cd:23:05:63:96:55:
                    95:2c:8e:0a:b2:eb:fd:3b:98:6b:7d:39:fa:5a:d7:
                    c6:ac:d7:d1:cb:88:d5:83:56:9f:a5:b7:2b:56:ac:
                    14:95:41:ef:89:4b:b1:07:0e:4c:0b:16:a7:5f:7d:
                    86:eb:5c:95:bd:95:60:56:9a:f4:a9:2e:02:7a:73:
                    8a:9d:7b:69:79:0a:e9:cb:2b:f5:16:ca:07:8a:98:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:86:B5:E0:27:E1:0F:EC:4F:0B:2A:27:99:5F:82:0D:8E:A4:CA:F7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0/8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.56.0/23
                  138.204.32.0/22
                  186.250.252.0/22
                IPv6:
                  2804:ee4::/32
                  2804:4848::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263557
                  267109

    Signature Algorithm: sha256WithRSAEncryption
         4d:b7:f4:cb:0e:e5:82:4c:cc:2c:47:bc:d3:00:83:0d:e2:fa:
         c7:6b:d0:bd:3f:23:72:d2:3c:8a:96:cb:c4:e0:85:5e:d1:7e:
         07:83:f5:6e:66:b0:23:a3:b1:04:72:65:ec:c0:fe:d3:98:0a:
         23:d0:34:39:4d:cf:34:89:12:08:af:d3:d9:4f:3f:54:d8:77:
         6f:ab:79:b9:e7:19:15:15:14:fe:cc:98:10:d9:4f:3b:b7:f1:
         d5:b9:e0:71:2c:a8:7f:e1:8f:55:05:95:b3:84:30:49:27:52:
         92:31:37:74:9e:f7:91:b5:de:7d:2c:28:bd:85:d9:40:57:87:
         80:cc:21:fc:b0:1e:69:d8:15:89:20:d0:2a:ed:60:22:e4:a2:
         9c:80:b4:b2:ba:c7:13:35:a5:7f:dd:3f:d1:9f:f9:f3:be:d2:
         04:cc:fb:9f:cd:3c:9a:33:64:bd:6d:32:e2:27:65:ac:31:ad:
         06:41:0a:58:d1:e6:1b:63:98:71:4b:07:04:86:4f:6e:bc:4e:
         2e:ab:53:ee:3c:54:f3:97:dd:3e:87:49:d8:55:fe:7c:d5:f3:
         48:aa:c8:14:2b:1e:5b:b3:29:14:53:da:94:9c:66:d2:f5:0f:
         ff:84:7a:c3:bc:1a:d1:4d:54:6a:f4:60:ce:01:92:3e:be:ec:
         c6:19:d7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org