Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8929036E724281BF4E20D98AD92E7E6645147A68.cer
File:                     8929036E724281BF4E20D98AD92E7E6645147A68.cer (raw, json)
Hash identifier:          J3BwsWP/1cSA9Qq+J9T6Y9JazhcSpPQmq/7B5uqf+uE=
Subject key identifier:   89:29:03:6E:72:42:81:BF:4E:20:D9:8A:D9:2E:7E:66:45:14:7A:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10DD23610C86FA9FC557206D86982A93F9849618
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/8929036E724281BF4E20D98AD92E7E6645147A68.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Feb 2024 17:42:30 +0000
Certificate not after:    Fri 21 Feb 2025 17:47:30 +0000
Subordinate resources:    AS: 271185
                          IP: 190.5.208.0/22
                          IP: 2804:778c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:dd:23:61:0c:86:fa:9f:c5:57:20:6d:86:98:2a:93:f9:84:96:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 17:42:30 2024 GMT
            Not After : Feb 21 17:47:30 2025 GMT
        Subject: CN=8929036E724281BF4E20D98AD92E7E6645147A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:e5:3c:fc:0a:0b:01:df:97:1f:17:40:fd:
                    6c:9d:0b:65:27:98:af:9e:7f:7e:8d:38:74:c2:3b:
                    06:2c:44:fb:35:39:69:e0:cd:8c:2e:b5:a5:3e:f5:
                    15:f9:b4:ca:5d:76:37:a1:14:a0:a1:71:2a:64:97:
                    aa:4b:ba:8e:09:7e:81:02:db:b7:ee:b3:99:db:a0:
                    a7:53:0b:df:3e:9c:71:3c:ea:55:d7:be:ce:8a:ad:
                    44:f0:f2:f4:14:4b:28:00:a1:50:d1:75:7e:60:93:
                    e8:f9:cd:af:85:27:d5:54:f1:55:82:bf:3f:72:73:
                    ec:b2:45:cf:9d:15:9d:02:91:6e:9c:a5:2d:d2:f6:
                    c2:dc:08:c4:c7:75:cc:97:6f:dd:28:eb:d1:07:0d:
                    3d:0b:26:46:06:b9:75:a3:d7:74:60:09:cf:c6:55:
                    63:0c:83:e2:69:d0:eb:1a:f1:89:34:0d:1c:8a:ca:
                    c6:9d:cc:cd:65:9f:fb:73:85:59:50:29:c2:53:a4:
                    37:89:31:a7:41:6f:a2:bf:89:04:6d:85:d8:48:99:
                    c1:6d:4f:25:3e:bd:e3:59:cc:32:c7:61:d3:a4:e4:
                    14:22:02:62:25:5f:30:98:5e:9a:cc:b2:86:ed:76:
                    97:0a:6f:d4:5f:ba:9c:9a:05:ad:f8:0f:d7:a3:1e:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:29:03:6E:72:42:81:BF:4E:20:D9:8A:D9:2E:7E:66:45:14:7A:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/8929036E724281BF4E20D98AD92E7E6645147A68.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.208.0/22
                IPv6:
                  2804:778c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271185

    Signature Algorithm: sha256WithRSAEncryption
         66:29:02:28:6e:d7:f4:ef:17:1e:40:bb:2b:7c:12:2c:01:bc:
         3f:90:ba:7a:ec:e2:ec:12:2b:87:24:4e:b2:a0:9f:d9:20:5e:
         91:a7:3b:f5:a3:c1:de:72:f0:0d:b3:8c:af:0e:05:32:5c:a7:
         21:16:28:1e:f7:06:b2:2e:8b:53:d8:bf:93:83:65:83:97:4d:
         b8:e9:94:d0:a1:35:45:53:02:9c:c7:91:9a:0b:2d:7f:b9:00:
         0b:e9:9e:ef:85:d8:8d:a1:4f:7c:4d:63:20:18:91:6d:e3:be:
         69:b5:48:ab:cc:d4:76:86:ca:35:55:da:b7:6e:1f:cf:d2:e0:
         04:38:c8:d1:a4:ee:f2:f2:a9:66:4d:82:80:96:73:d5:38:ef:
         ef:4e:02:5b:c7:f1:5d:5a:63:e9:a6:e0:d9:c6:e7:44:2b:0e:
         51:4d:ec:40:97:ba:8c:06:81:65:4d:78:f3:9e:b2:d6:3d:a3:
         e8:3b:3e:9f:d9:41:b7:c5:9c:14:46:e6:83:03:24:4f:15:fd:
         05:64:a4:2b:ae:8d:76:97:cf:5c:a8:88:46:e4:a3:dd:c4:e9:
         78:97:7b:27:c3:05:99:70:64:76:85:2c:85:cf:cf:06:e2:20:
         47:b0:cd:a5:cc:5e:70:41:b3:7e:22:24:97:65:94:6e:cf:d5:
         e7:bc:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org