Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.cer
File:                     8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.cer (raw, json)
Hash identifier:          +YJmZtA0bZ9jFAy9yrMVXG8l/SuFYuIK0b4DZv+4Y3I=
Subject key identifier:   88:93:F0:FF:2F:C7:6B:C2:91:38:37:2D:A9:E7:EB:AB:17:DA:F0:56
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20ACEF6D0617545A06A2829DE551BCCA420DD3A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Aug 2022 13:25:13 +0000
Certificate not after:    Wed 30 Aug 2023 13:30:13 +0000
Subordinate resources:    AS: 28292
                          IP: 177.54.48.0/20
                          IP: 179.127.80.0/20
                          IP: 189.28.176.0/20
                          IP: 189.124.112.0/20
                          IP: 2001:12a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ac:ef:6d:06:17:54:5a:06:a2:82:9d:e5:51:bc:ca:42:0d:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 31 13:25:13 2022 GMT
            Not After : Aug 30 13:30:13 2023 GMT
        Subject: CN=8893F0FF2FC76BC29138372DA9E7EBAB17DAF056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:53:48:fe:f9:3a:c0:a0:25:23:05:df:2d:93:
                    17:0a:84:e0:f9:67:8e:31:c2:e2:dd:e9:9b:20:86:
                    b3:54:72:ef:5d:b0:90:6f:47:68:50:82:6d:17:a4:
                    3b:c8:c9:05:4c:5f:21:58:93:c5:ee:39:b1:11:a2:
                    c9:ca:9e:5e:4f:e8:2e:bf:86:4f:9c:98:21:ac:85:
                    f7:3b:4d:69:93:01:32:ec:2c:aa:5a:70:73:ae:3e:
                    c9:40:64:f3:3e:9e:28:37:18:ff:a3:4e:48:ab:a6:
                    b3:7b:46:59:be:d5:0c:85:05:49:56:b9:19:b1:f1:
                    5f:c1:c5:4f:db:66:b5:2c:1f:19:01:45:5c:68:21:
                    33:82:92:74:58:f9:10:39:ee:1f:b2:4f:03:b8:d2:
                    d2:1e:a6:fe:fc:70:92:0f:c1:92:1b:f0:c1:c2:67:
                    d5:62:58:de:61:9c:13:71:2d:90:e2:23:be:5d:ce:
                    bd:44:dc:5a:04:c2:c9:c0:45:5a:b6:15:27:b5:ae:
                    2f:2e:9c:fd:9f:ef:60:2f:02:b8:ea:dd:c6:a0:5f:
                    d2:6e:d9:09:53:0c:69:d6:de:fa:ce:b1:f5:64:eb:
                    4d:51:34:e4:3a:bd:45:13:d2:ef:87:d9:98:5c:c7:
                    e8:91:11:cf:8a:d1:05:7e:43:b1:e6:b3:85:46:65:
                    54:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:93:F0:FF:2F:C7:6B:C2:91:38:37:2D:A9:E7:EB:AB:17:DA:F0:56
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.48.0/20
                  179.127.80.0/20
                  189.28.176.0/20
                  189.124.112.0/20
                IPv6:
                  2001:12a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28292

    Signature Algorithm: sha256WithRSAEncryption
         28:ce:de:6a:a3:6b:a8:a4:e9:89:a1:73:b2:80:39:e2:01:e8:
         99:a0:8e:e2:aa:af:42:76:c4:6a:06:5b:fa:0e:89:98:6a:7d:
         36:20:71:81:45:0a:39:4b:dc:10:c3:c6:d3:06:dc:62:1f:ad:
         95:85:9c:63:e5:d2:a5:0c:7a:d9:77:e5:4d:8e:f3:41:9f:9a:
         d0:7e:9c:d2:49:c9:6e:96:51:8d:ce:de:23:97:ff:7c:c5:f1:
         9e:7b:7c:ab:3b:52:a1:a2:56:ae:a2:b9:bd:1c:34:0d:2b:91:
         a4:7e:52:02:82:97:80:9a:43:14:1b:97:e7:d6:5b:79:40:8f:
         4c:71:99:1f:7c:ac:e7:1d:83:31:ba:7f:69:18:c3:90:7d:80:
         a7:e6:41:49:09:e9:83:f1:d4:30:2a:2a:67:81:14:29:05:73:
         b3:92:18:91:23:c8:17:e8:87:18:c0:bc:36:e4:52:42:9d:c5:
         c7:df:da:3c:dc:97:45:d3:5e:7a:27:42:ee:59:d0:f9:36:f4:
         e4:0f:56:0a:67:bf:c1:e0:6e:01:a3:e9:a7:fc:f4:21:03:5f:
         6b:85:79:90:d1:06:c3:fe:0c:a3:30:54:91:15:f0:ab:0b:14:
         1e:75:8f:d8:91:a5:84:ef:a1:9e:1c:4e:78:d0:43:82:1b:f7:
         c3:4d:1c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org