Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A8BE111941CDDC38809849D58F2E8A67233B99C.cer
File:                     8A8BE111941CDDC38809849D58F2E8A67233B99C.cer (raw, json)
Hash identifier:          /uVizwG2ugl0Rf6ZacAxhYNKB+bPUzZ3SXuc/d5Hscg=
Subject key identifier:   8A:8B:E1:11:94:1C:DD:C3:88:09:84:9D:58:F2:E8:A6:72:33:B9:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       61AFCCFB698CC49B41FF278B18D6767CD5B4219F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FaFL5TNpMBo9J3fiVv3ndPXc8Z7HXSBmgBMVfsSCyJ3j/0/8A8BE111941CDDC38809849D58F2E8A67233B99C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FaFL5TNpMBo9J3fiVv3ndPXc8Z7HXSBmgBMVfsSCyJ3j/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 17:08:50 +0000
Certificate not after:    Thu 18 Jul 2024 17:13:50 +0000
Subordinate resources:    AS: 262576
                          IP: 177.84.16.0/22
                          IP: 2804:3bc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:af:cc:fb:69:8c:c4:9b:41:ff:27:8b:18:d6:76:7c:d5:b4:21:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 17:08:50 2023 GMT
            Not After : Jul 18 17:13:50 2024 GMT
        Subject: CN=8A8BE111941CDDC38809849D58F2E8A67233B99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cf:1e:f0:d9:fd:d4:10:89:b2:19:8a:52:6d:
                    9e:5d:9e:30:c9:b5:69:1f:0a:b5:fe:b0:19:65:bb:
                    ff:46:b6:c2:7e:89:f5:c3:5e:27:d5:42:10:85:3e:
                    36:32:f4:22:9e:4b:26:07:4a:13:cd:5d:8f:48:a2:
                    cf:c2:3d:e1:a2:8d:ce:74:c5:d8:84:a9:b8:88:f0:
                    16:f2:76:8c:02:18:eb:ec:3c:98:8c:71:97:30:ba:
                    e6:9a:16:62:98:c6:6c:57:fb:9f:a6:82:b8:f2:c8:
                    40:31:70:80:0e:c2:b3:cd:16:ba:4e:21:86:f2:ec:
                    da:3b:9e:69:07:b0:ef:0d:ee:26:7d:ca:33:bc:6a:
                    46:79:2d:65:48:e7:ac:7d:8a:47:fa:c8:b7:4f:a8:
                    60:87:b7:c5:31:2e:4b:e5:32:b5:e9:32:ef:17:5e:
                    32:9f:25:85:17:db:09:36:5c:0a:d3:bf:72:a2:c4:
                    c8:c2:af:af:12:e3:fd:09:82:f1:d4:28:7d:4d:ec:
                    bf:76:ba:4e:08:fb:2f:69:0c:22:7f:6d:bd:90:cb:
                    ff:90:a8:91:60:51:92:37:80:61:5c:19:61:56:43:
                    12:77:ab:db:d6:b5:64:48:60:1c:bb:8d:68:b1:37:
                    c9:16:30:b8:ee:e0:3e:05:7b:52:31:29:e8:08:8d:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:8B:E1:11:94:1C:DD:C3:88:09:84:9D:58:F2:E8:A6:72:33:B9:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FaFL5TNpMBo9J3fiVv3ndPXc8Z7HXSBmgBMVfsSCyJ3j/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FaFL5TNpMBo9J3fiVv3ndPXc8Z7HXSBmgBMVfsSCyJ3j/0/8A8BE111941CDDC38809849D58F2E8A67233B99C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.16.0/22
                IPv6:
                  2804:3bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262576

    Signature Algorithm: sha256WithRSAEncryption
         73:3b:3e:a9:99:6e:07:fc:d9:55:3a:bc:c9:7e:f7:86:f3:07:
         41:ca:73:2d:1d:53:48:09:87:88:35:07:2e:bd:91:8d:54:ca:
         3e:33:42:ea:4f:04:c0:fc:a6:ac:00:41:4e:10:5a:4a:47:db:
         bd:af:86:d0:85:16:ab:6b:7a:65:37:c9:d4:19:6a:82:34:e0:
         a4:3d:e5:b4:4f:a3:00:4f:6c:68:83:49:48:02:86:3d:0d:fd:
         24:d6:71:4f:93:64:b2:c0:54:cf:3e:77:7e:14:2e:28:21:1b:
         f8:cc:58:80:6c:e5:29:c0:36:f7:7b:6a:08:6e:9f:98:a5:fa:
         3a:b2:bd:56:04:f3:34:5d:c7:02:53:0f:32:88:f2:74:6d:cc:
         58:f4:f8:21:b3:9f:69:8d:4b:c3:3d:88:30:3c:54:a2:41:6a:
         63:9e:04:64:c3:7d:9b:46:51:13:0d:96:52:2c:aa:18:35:2b:
         ab:7b:2e:4d:bb:0c:a6:bf:6e:4b:94:1f:50:45:66:65:37:f7:
         b1:a8:e5:4a:28:09:76:fe:cf:20:ba:c7:a1:76:28:d1:f9:c9:
         22:47:94:42:97:90:5a:8a:4b:50:0c:8d:4b:d3:4a:56:9a:2a:
         47:7a:11:f1:43:de:3e:91:80:dc:71:a6:a1:66:70:97:95:23:
         a1:ad:5a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org