Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A90DF018B161D6CEA690EF462A96991BD182AEB.cer
File:                     8A90DF018B161D6CEA690EF462A96991BD182AEB.cer (raw, json)
Hash identifier:          e0ZI26YJytmFKZJEhB9+pyV+fwugSHp1zCwuoJptXfA=
Subject key identifier:   8A:90:DF:01:8B:16:1D:6C:EA:69:0E:F4:62:A9:69:91:BD:18:2A:EB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53B02EF1FDA08885C7858F5565015123481A30A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/8A90DF018B161D6CEA690EF462A96991BD182AEB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Sep 2023 12:48:39 +0000
Certificate not after:    Wed 11 Sep 2024 12:53:39 +0000
Subordinate resources:    AS: 61632
                          IP: 131.100.124.0/22
                          IP: 138.121.236.0/22
                          IP: 168.232.184.0/22
                          IP: 2804:1bfc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b0:2e:f1:fd:a0:88:85:c7:85:8f:55:65:01:51:23:48:1a:30:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 13 12:48:39 2023 GMT
            Not After : Sep 11 12:53:39 2024 GMT
        Subject: CN=8A90DF018B161D6CEA690EF462A96991BD182AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:5a:4a:a3:32:f7:d8:9c:11:0c:65:07:86:
                    e1:3b:3b:c4:13:3a:6d:f9:ad:45:bc:78:9a:f2:6f:
                    d2:b2:e8:25:d6:a8:ee:68:7d:17:60:1c:ce:f1:53:
                    36:fe:a3:10:63:8a:74:78:f2:76:64:a9:8e:f3:b0:
                    41:02:8e:f3:38:2b:a8:3f:ac:44:de:b0:90:d3:b4:
                    e2:6b:90:f3:07:81:5f:d5:c8:68:dd:fa:d5:40:ec:
                    52:f2:fd:28:d1:eb:2d:61:ea:a6:76:1b:76:0e:79:
                    4c:f5:ea:3b:24:8c:f5:a2:8e:3d:71:8f:80:ad:7f:
                    86:9b:6a:f4:de:22:94:34:13:ac:aa:a9:04:b6:31:
                    db:54:c0:5f:a8:5a:10:1d:8c:ec:b9:0f:d1:06:e0:
                    10:cc:80:d9:76:15:6c:05:a8:4f:10:e0:42:09:2b:
                    fd:95:23:66:1b:ac:59:7c:08:a5:c4:9b:61:a6:f3:
                    aa:dc:48:76:b7:65:26:30:60:5e:03:50:73:3f:5b:
                    c4:df:92:fd:55:63:22:50:8d:68:d1:d5:54:51:44:
                    1b:64:19:b4:f7:0d:71:5d:41:42:ce:a7:a4:ed:c9:
                    ac:95:08:53:73:a1:ec:9d:86:59:ba:ba:2b:7e:7d:
                    05:50:83:c8:d7:6e:94:69:8e:4e:83:69:3f:02:76:
                    05:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:90:DF:01:8B:16:1D:6C:EA:69:0E:F4:62:A9:69:91:BD:18:2A:EB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/8A90DF018B161D6CEA690EF462A96991BD182AEB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.124.0/22
                  138.121.236.0/22
                  168.232.184.0/22
                IPv6:
                  2804:1bfc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61632

    Signature Algorithm: sha256WithRSAEncryption
         6a:0d:98:82:25:19:4b:d6:11:30:2c:cf:bb:f5:8a:01:01:d9:
         43:af:b6:d3:49:c5:e5:67:93:d1:5a:e2:06:22:85:9c:cc:80:
         e9:73:b2:5c:d2:8c:ad:af:2b:c0:4d:bf:32:10:02:29:39:a2:
         17:a2:dc:01:2a:02:4a:6c:72:dd:8c:72:8a:38:f4:84:d9:76:
         57:1e:c6:9a:ee:87:11:39:fa:04:84:31:b6:14:b7:07:cf:08:
         d3:9c:71:0e:c0:58:9f:e1:45:5f:81:b8:64:56:c6:db:c5:b3:
         b4:3c:37:a3:2c:d8:a9:7c:f8:98:47:95:7b:68:27:58:d6:64:
         0e:da:03:a4:e9:7b:9f:88:4c:19:c7:dc:8e:ae:05:5f:4f:d3:
         d0:4b:98:fb:d0:87:7a:f6:68:71:b5:7a:d0:31:da:c8:a2:fa:
         5a:ce:c9:8a:d5:c1:5e:9a:af:48:22:75:74:24:f6:71:5d:9f:
         82:7f:60:c3:e0:fd:52:df:7c:e4:b9:b6:81:e5:5a:3d:37:e9:
         f7:e4:1b:4b:c7:6f:f7:ba:9e:13:72:a4:28:32:c4:35:30:4e:
         9b:45:03:2e:9a:71:f8:aa:0c:c5:7f:87:b4:a4:4b:9d:e1:0a:
         41:26:e9:bb:96:70:18:c0:e1:ed:c3:e0:84:81:4d:09:f5:6a:
         ac:d7:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org