Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer
File:                     8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer (raw, json)
Hash identifier:          iZvqLUVdVo4BxCaM4/dg3aCyGotmTiL9Y2UDCBoBReE=
Subject key identifier:   8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0C38234BA01F93BB95E6A312AD810F6757E0700F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 02:56:36 +0000
Certificate not after:    Wed 15 Jan 2025 03:01:36 +0000
Subordinate resources:    AS: 264075
                          IP: 45.166.164.0/22
                          IP: 143.0.24.0/22
                          IP: 143.208.20.0/22
                          IP: 168.227.52.0/22
                          IP: 186.235.120.0/21
                          IP: 2804:2a7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:38:23:4b:a0:1f:93:bb:95:e6:a3:12:ad:81:0f:67:57:e0:70:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 02:56:36 2024 GMT
            Not After : Jan 15 03:01:36 2025 GMT
        Subject: CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:a3:7d:fb:bb:ca:a1:17:13:f2:c8:3d:ad:
                    33:d0:c1:0c:6b:e4:18:95:2b:3e:53:ca:37:50:84:
                    96:86:85:b0:40:07:fe:24:87:91:69:4a:57:81:f4:
                    20:ca:b5:ee:84:45:50:dc:55:55:ef:f9:94:01:74:
                    44:25:0f:c9:b9:be:40:83:3a:6e:24:91:48:6c:af:
                    85:df:b1:cd:3c:3a:32:7b:9c:16:6d:ed:20:42:6e:
                    10:c9:2c:df:c2:cd:eb:65:fb:e9:4d:bf:64:58:d1:
                    be:58:c6:9f:21:14:4a:0f:69:4f:1c:02:18:e0:1f:
                    60:9f:b9:4b:59:73:7b:f6:ae:be:05:19:e1:a0:b4:
                    6b:3c:10:b0:3a:6d:ba:8f:e3:8f:cb:44:c2:b0:54:
                    0f:ec:50:b3:84:b6:bb:c5:48:35:d1:11:98:7a:39:
                    35:66:50:10:3f:34:58:35:c9:ee:2c:ab:bc:1b:69:
                    fb:d2:df:49:a1:13:8e:86:16:03:00:09:68:07:43:
                    8b:37:50:8e:cf:34:fb:a9:67:3c:56:2a:39:31:e3:
                    40:b1:e0:0d:74:08:25:65:ea:cd:b0:a7:bf:82:02:
                    5c:00:fc:38:15:c7:b3:89:b8:b0:0e:d8:1f:10:92:
                    bf:19:fa:cb:da:71:bf:f1:e5:8b:00:61:a5:e0:9b:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.164.0/22
                  143.0.24.0/22
                  143.208.20.0/22
                  168.227.52.0/22
                  186.235.120.0/21
                IPv6:
                  2804:2a7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264075

    Signature Algorithm: sha256WithRSAEncryption
         76:d9:12:ac:d7:7f:d9:7b:fb:ba:e2:f7:1c:e9:5c:cd:22:3d:
         85:58:53:fc:0a:62:c2:c4:0e:02:60:0d:21:bd:00:6c:20:d0:
         3f:c2:aa:81:8a:85:c6:c2:76:c1:24:74:b7:36:ed:a1:4c:06:
         f3:6d:73:88:bb:1a:b7:7c:80:e9:e9:5d:46:76:37:af:68:01:
         b5:ff:03:57:60:3b:1d:60:5d:26:ab:b1:81:15:1d:12:a0:8d:
         50:c0:55:0b:bd:2d:65:44:6d:45:24:01:cd:a9:18:8e:80:3f:
         39:15:c9:0d:04:be:7e:c5:84:e4:6e:ba:4c:36:56:16:f0:c8:
         ab:26:3e:4c:c2:0c:e2:9b:c4:02:c5:94:31:49:b9:46:d8:25:
         a1:17:9f:60:bf:e4:79:1c:1a:7e:4b:89:5f:6d:49:50:c9:4d:
         b2:42:b9:49:99:65:50:99:10:f9:e9:02:91:c6:d8:84:05:65:
         ca:7d:a6:c3:55:67:04:04:ad:a1:29:2d:e2:c3:8c:b4:a4:22:
         91:47:55:d7:a4:cf:2a:bf:1a:9d:34:0f:74:d5:27:b2:8f:d6:
         25:d1:0e:8e:01:c3:a0:51:60:4e:91:75:dd:b2:e6:a6:6c:4c:
         07:c7:b1:05:c3:a4:6b:9c:d7:5b:bf:31:06:89:70:98:3a:f1:
         15:cf:d2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org