Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A2D68F59DA79C1167B96E60DB2A8AC7F897F91B.cer
File:                     8A2D68F59DA79C1167B96E60DB2A8AC7F897F91B.cer (raw, json)
Hash identifier:          i46o5y7qPUnolNHc3bHTu8Wi97oQUlxHWo9eLGTr5Ss=
Subject key identifier:   8A:2D:68:F5:9D:A7:9C:11:67:B9:6E:60:DB:2A:8A:C7:F8:97:F9:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       572DE485AF902D33C2563800985C2FDCCB0046D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8A2D68F59DA79C1167B96E60DB2A8AC7F897F91B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Aug 2023 15:56:27 +0000
Certificate not after:    Mon 12 Aug 2024 16:01:27 +0000
Subordinate resources:    AS: 269416
                          IP: 45.186.80.0/22
                          IP: 177.85.190.0/23
                          IP: 2804:6440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2d:e4:85:af:90:2d:33:c2:56:38:00:98:5c:2f:dc:cb:00:46:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 14 15:56:27 2023 GMT
            Not After : Aug 12 16:01:27 2024 GMT
        Subject: CN=8A2D68F59DA79C1167B96E60DB2A8AC7F897F91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:91:69:da:bb:c7:17:0c:6a:53:7a:8e:00:
                    7a:13:24:87:39:13:15:ce:09:7b:71:f5:36:0a:86:
                    d9:92:4d:2b:90:98:67:fd:9e:b3:23:90:6d:17:87:
                    d7:d8:d9:a0:0d:6b:71:c1:b3:3b:6b:fd:73:43:82:
                    86:fb:45:e0:3d:12:70:97:35:85:32:04:77:a5:f1:
                    f3:b2:33:dc:e5:d4:75:43:b6:8c:4b:cb:11:6b:4a:
                    90:9e:f5:ac:d3:0a:60:32:c0:25:98:a2:4b:ef:f8:
                    c6:e5:b6:88:49:c6:3b:40:f2:b2:68:da:d5:ab:58:
                    07:4b:ed:77:f2:fa:36:d7:67:c1:a4:13:a6:9f:7f:
                    f2:19:95:3d:6b:85:4d:7e:e3:e7:8e:ee:87:58:72:
                    42:1f:41:67:18:76:5b:84:88:66:4d:27:97:97:24:
                    8d:21:11:19:17:02:c2:5e:2d:ab:40:f7:f5:a1:a5:
                    de:4f:b3:d4:cd:c4:c9:97:a6:34:36:e0:89:84:4f:
                    5f:9a:06:cb:f5:90:b7:e4:4d:be:0b:b6:40:cc:2c:
                    b6:2b:ad:b8:a8:92:ed:2e:24:81:6b:d9:22:11:47:
                    9d:86:95:57:b5:12:f2:bd:3b:b7:3d:ac:82:5c:92:
                    d7:dd:d5:a7:74:b1:e9:e0:a1:ab:49:92:db:4a:c5:
                    fc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:2D:68:F5:9D:A7:9C:11:67:B9:6E:60:DB:2A:8A:C7:F8:97:F9:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8A2D68F59DA79C1167B96E60DB2A8AC7F897F91B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.80.0/22
                  177.85.190.0/23
                IPv6:
                  2804:6440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269416

    Signature Algorithm: sha256WithRSAEncryption
         76:a1:3f:ae:6b:f2:48:e5:76:a5:19:59:c7:89:5a:ca:5b:30:
         69:1f:e2:47:b3:5e:1d:ba:de:95:70:79:b8:02:a0:a1:8a:2e:
         ae:1a:a5:2a:c2:c9:41:99:de:29:9f:6a:7e:17:61:cc:74:ec:
         1e:c6:50:c4:1a:5b:26:07:a6:fd:27:2c:b1:e5:ac:b7:fd:47:
         32:be:52:06:f4:64:21:2a:45:79:2c:98:85:a8:7f:4d:7a:24:
         af:c5:9b:b0:b3:ce:d4:ce:e1:cd:0a:f4:6f:13:8a:d9:47:d7:
         cc:bd:31:98:ed:14:0f:5e:ea:5a:ea:4b:32:cd:58:96:eb:60:
         16:67:cc:af:80:30:89:be:25:82:ec:76:35:21:8c:6b:d2:f2:
         2f:7a:ef:e7:54:24:0a:6d:c5:c1:37:76:b0:a5:23:2f:6f:53:
         32:b2:26:e8:ea:b5:6b:05:60:3c:56:87:69:e8:99:01:bd:8d:
         6f:27:e5:0c:7f:03:a1:c2:d0:bb:c1:aa:78:58:ce:95:e9:e5:
         f9:57:43:9c:ca:1b:b8:0e:2f:ca:96:1d:ea:f3:d4:c5:6f:16:
         52:3b:32:24:f8:27:48:52:b5:c3:ff:ae:52:10:ef:e8:42:fb:
         93:30:16:ef:7e:84:6a:0a:87:15:c4:04:c2:e2:7e:c9:96:05:
         36:91:99:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org