Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer
File:                     8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer (raw, json)
Hash identifier:          soR64SkoehMI9xHhggoFl4qZcrzfPhR7RPjdpH0wUAw=
Subject key identifier:   88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0C67A907EDDE1A8C0F9A8E498CDFD70B94FDE11B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 12:15:11 +0000
Certificate not after:    Thu 18 Jul 2024 12:20:11 +0000
Subordinate resources:    AS: 269595
                          IP: 45.188.236.0/22
                          IP: 2804:66f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:67:a9:07:ed:de:1a:8c:0f:9a:8e:49:8c:df:d7:0b:94:fd:e1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 12:15:11 2023 GMT
            Not After : Jul 18 12:20:11 2024 GMT
        Subject: CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:0b:42:da:0d:7a:4f:0a:c4:cf:b2:e8:03:
                    44:0b:81:ca:53:bc:10:56:e5:62:f4:fb:05:36:f7:
                    8a:41:79:cf:d7:fd:6d:79:ef:2e:63:d5:a8:d9:78:
                    ca:78:e6:78:38:7c:ab:05:c3:bf:82:38:ca:34:ca:
                    ac:5d:a1:ef:75:c5:26:ca:6b:05:84:26:69:20:9d:
                    f0:60:c6:65:91:a5:de:c3:25:0c:53:06:9d:55:56:
                    dc:05:ba:73:5a:16:04:17:94:b6:58:c2:89:a9:3f:
                    48:ea:24:74:cf:36:16:cb:ce:51:f1:b9:26:f6:3a:
                    dc:cd:48:c3:f3:17:9b:1e:42:98:53:66:4a:ea:61:
                    5f:5f:f8:04:03:57:5c:cd:66:e0:05:ca:21:da:32:
                    29:c9:ed:e4:94:b7:af:1d:3b:14:c3:c8:a8:5a:17:
                    00:1b:a7:69:9d:28:9f:34:52:97:21:1e:22:2f:16:
                    cc:6a:9c:3c:16:5a:88:bb:08:8b:e0:41:3c:19:d7:
                    15:d0:96:12:21:50:87:fe:1d:ca:e9:27:66:05:29:
                    8f:7e:d6:55:f9:c7:02:97:6f:0c:da:79:a7:f6:62:
                    09:a3:87:43:62:72:60:eb:7b:d9:8d:7c:a5:73:17:
                    f7:79:f4:cb:24:20:d5:3a:94:49:7d:b5:f0:30:54:
                    24:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.236.0/22
                IPv6:
                  2804:66f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269595

    Signature Algorithm: sha256WithRSAEncryption
         2f:8c:42:1d:17:3e:1b:aa:74:35:e5:72:6c:e9:89:2a:07:89:
         5a:c5:6e:d8:e3:95:ec:56:fb:e0:88:db:1d:1c:a8:53:a9:f0:
         59:8e:59:14:e9:d9:c1:9c:5c:70:ee:23:5d:c0:06:b5:c3:9c:
         9c:f9:a9:a4:33:2d:02:92:1a:ea:4a:b0:04:5f:7d:04:18:fc:
         b2:12:e2:a6:ee:10:fe:35:9e:4e:88:cf:31:fa:21:c1:e1:9f:
         d6:72:78:13:45:b7:99:97:0a:ee:e4:15:67:34:bf:2b:8b:e0:
         1f:13:17:62:7a:27:24:9c:13:8a:af:0f:40:cb:cf:e1:09:83:
         df:4c:c5:96:8f:39:5c:74:45:76:09:db:a5:e2:5a:2d:26:35:
         94:7c:0d:01:65:94:79:ed:cf:56:e5:7c:df:32:75:0a:b0:c0:
         0f:9b:f4:ee:09:fe:b3:83:98:68:9c:1b:c1:91:74:0c:15:06:
         4a:31:74:7f:a6:5e:65:a3:1f:be:06:2d:ac:34:15:17:ca:48:
         a3:3a:a6:b7:f7:b2:35:63:b7:cf:e3:69:3e:c8:03:21:24:87:
         0f:66:2f:7f:3a:00:45:16:bf:54:c1:24:f1:c1:8f:35:56:7d:
         00:d8:72:e1:90:b8:fc:08:4d:6f:a6:df:a1:3c:00:f9:cc:7a:
         57:96:d8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org