Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A60A1D51D94FF013FFF7A8A96E75406CB8D4354.cer
File:                     8A60A1D51D94FF013FFF7A8A96E75406CB8D4354.cer (raw, json)
Hash identifier:          D25xvKqAnui3zz9qeAmMXSKHOmocEyNPHD5R3hY3j7Q=
Subject key identifier:   8A:60:A1:D5:1D:94:FF:01:3F:FF:7A:8A:96:E7:54:06:CB:8D:43:54
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       229D8F15EBEB753D2C7502523687F92663D53000
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/0/8A60A1D51D94FF013FFF7A8A96E75406CB8D4354.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Aug 2023 11:44:15 +0000
Certificate not after:    Thu 08 Aug 2024 11:49:15 +0000
Subordinate resources:    AS: 267643
                          IP: 45.71.220.0/22
                          IP: 2804:44a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9d:8f:15:eb:eb:75:3d:2c:75:02:52:36:87:f9:26:63:d5:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 10 11:44:15 2023 GMT
            Not After : Aug  8 11:49:15 2024 GMT
        Subject: CN=8A60A1D51D94FF013FFF7A8A96E75406CB8D4354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:d9:53:6e:ec:84:bb:35:54:9c:ad:e1:b5:
                    d3:87:83:6f:0a:9b:03:87:54:04:c5:77:bb:96:ed:
                    7d:1f:97:44:aa:ec:c5:e3:8b:d0:c7:6e:36:63:16:
                    7d:10:24:f1:e7:44:fa:b8:36:e4:aa:8b:e2:73:98:
                    63:ea:bd:7a:a8:1e:9d:d3:08:1d:39:89:c2:b7:66:
                    b4:a3:df:b1:a1:d9:ac:68:f0:86:f5:89:d2:4e:20:
                    84:45:de:64:0c:37:4d:4a:b7:eb:18:27:2a:ca:c6:
                    88:70:2c:54:94:56:03:02:8d:96:fb:5b:7c:bd:de:
                    f1:08:1f:fa:bc:15:4d:eb:73:8b:a6:f5:96:09:f7:
                    47:71:71:00:ad:44:38:be:d8:74:50:58:82:90:f8:
                    64:4c:80:a3:76:a0:d6:42:31:ad:58:71:36:0d:0c:
                    dd:74:f0:4c:67:7d:46:48:6d:b3:3f:3e:ef:86:42:
                    f1:b5:85:2c:19:9d:d5:d9:6c:b3:0c:91:ee:11:8e:
                    de:e3:30:5f:2e:8a:92:a3:84:9c:6a:ea:f4:45:a7:
                    cc:e4:29:dc:b4:78:6a:e6:8b:0f:27:f3:c4:6f:dd:
                    fa:b0:24:7e:66:70:a4:d4:06:db:a8:c9:49:1b:bb:
                    b7:34:80:e7:c4:19:45:c2:c4:96:c0:a3:71:32:dc:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:60:A1:D5:1D:94:FF:01:3F:FF:7A:8A:96:E7:54:06:CB:8D:43:54
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/0/8A60A1D51D94FF013FFF7A8A96E75406CB8D4354.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.220.0/22
                IPv6:
                  2804:44a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267643

    Signature Algorithm: sha256WithRSAEncryption
         9f:32:03:b2:6b:c1:37:09:03:1e:9f:70:2a:86:e4:28:5a:01:
         b8:27:c1:e1:9b:15:55:cd:b3:4a:23:1d:7d:5c:15:15:a6:e3:
         cd:f0:de:05:5d:65:4f:af:c1:6e:49:c0:61:c7:0c:a7:2d:0f:
         d3:aa:c3:7e:db:17:52:2e:27:dc:28:60:e6:28:c9:2b:22:55:
         0a:cb:ed:18:e1:d9:6e:80:b0:f2:5c:83:81:20:88:8a:8b:90:
         13:10:66:9f:f8:24:f4:e4:8c:29:79:5d:15:b6:70:38:8c:ea:
         76:fe:d3:ab:5b:cf:65:68:83:8e:dc:1c:2c:cb:93:05:bf:c2:
         9c:1b:ed:6c:7e:aa:dc:7d:d9:b8:41:60:4b:c6:c5:9c:03:9e:
         be:30:20:34:af:07:b5:6a:61:d8:9a:ce:94:6d:f5:cd:27:2c:
         ad:11:d0:2f:e6:d3:ff:30:76:2a:cf:a8:4d:6b:90:41:d3:28:
         c8:2b:d4:c7:9c:e0:07:19:ec:18:63:3b:d6:e2:2a:e8:02:0f:
         dd:1b:a0:24:8c:77:16:69:27:ba:c9:ea:ac:c3:16:87:40:78:
         36:ab:75:a3:1a:3c:a6:66:56:b3:9d:73:ad:ae:49:72:42:2a:
         8a:37:a0:8c:f9:c1:14:68:eb:a1:63:c8:85:c4:73:4c:8d:5e:
         54:55:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 01:34:04 2025 by rpki-client