Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8AACAEE2367B1F73AB6857FF661991EB148686B2.cer
File:                     8AACAEE2367B1F73AB6857FF661991EB148686B2.cer (raw, json)
Hash identifier:          VBFhy9bBi9JCaI4yUNJtwjX+8dHUR2N4KIaNxfSdU28=
Subject key identifier:   8A:AC:AE:E2:36:7B:1F:73:AB:68:57:FF:66:19:91:EB:14:86:86:B2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       54BA03CD77DA61DDEED629BFF7FC387D974489D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/8AACAEE2367B1F73AB6857FF661991EB148686B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Nov 2022 22:05:13 +0000
Certificate not after:    Tue 28 Nov 2023 22:10:13 +0000
Subordinate resources:    AS: 263518
                          IP: 168.197.84.0/22
                          IP: 191.243.212.0/22
                          IP: 2804:1324::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ba:03:cd:77:da:61:dd:ee:d6:29:bf:f7:fc:38:7d:97:44:89:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 22:05:13 2022 GMT
            Not After : Nov 28 22:10:13 2023 GMT
        Subject: CN=8AACAEE2367B1F73AB6857FF661991EB148686B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:8d:75:d2:8f:12:e4:c1:3c:07:ff:4e:22:
                    1a:16:a8:18:c2:3a:49:ba:64:50:25:97:45:4f:b3:
                    86:44:8f:10:42:78:93:58:f5:f0:32:63:c9:6c:08:
                    de:50:df:2d:65:44:e7:4c:e2:03:c2:ea:66:7b:9c:
                    01:b3:24:49:79:21:b2:31:93:66:56:b8:39:2b:83:
                    62:ab:bb:f6:20:24:66:5c:91:57:d4:11:0e:a2:45:
                    52:cd:46:19:58:da:5a:46:63:a2:84:68:e5:e9:f8:
                    13:18:4e:e2:b8:1d:59:e0:af:08:a7:ba:94:9e:c9:
                    87:2b:3c:fa:bc:73:1c:ca:25:9f:e3:b1:a1:d3:d6:
                    26:e6:81:27:71:f6:79:0e:bf:77:03:94:0a:4c:98:
                    a2:da:ee:6b:81:86:3d:5d:91:d0:2a:49:04:e8:85:
                    b2:b1:0e:9a:53:b8:f6:d3:3e:52:4b:5e:e6:86:8f:
                    8b:cb:99:90:f2:23:0e:f2:49:68:3d:95:5e:91:8a:
                    2a:21:aa:e2:87:74:99:ad:01:25:2e:41:96:d8:5f:
                    44:72:97:51:0a:0e:59:95:cf:80:1f:77:1d:e8:3a:
                    79:06:97:85:8a:1b:f0:4b:58:50:3e:7c:a3:fd:00:
                    59:8a:57:ea:38:91:26:c8:c9:37:50:f0:54:65:66:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:AC:AE:E2:36:7B:1F:73:AB:68:57:FF:66:19:91:EB:14:86:86:B2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/8AACAEE2367B1F73AB6857FF661991EB148686B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.84.0/22
                  191.243.212.0/22
                IPv6:
                  2804:1324::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263518

    Signature Algorithm: sha256WithRSAEncryption
         b1:c5:c2:b1:d6:69:85:95:f7:8b:1c:44:ee:10:86:91:c1:7f:
         ec:05:93:33:cf:8a:ff:2f:8e:a2:d0:d4:fd:01:fe:d8:76:76:
         3d:55:04:f5:cb:8d:17:19:99:30:65:fd:56:6f:6a:9e:72:77:
         42:41:f5:12:e6:94:83:a0:c1:fd:75:16:a6:ee:07:08:72:0d:
         32:3b:56:b3:1a:f3:a8:1e:a6:b6:5f:6a:7c:0f:80:6f:b7:15:
         1c:14:93:3a:c2:72:88:44:c7:54:7e:24:03:46:bd:b1:dd:94:
         5c:53:b7:cc:59:70:02:16:52:6b:ca:63:f0:92:b2:9a:89:a0:
         6b:90:10:e3:2b:73:c8:83:f3:50:87:16:80:00:c6:a4:c5:7e:
         c8:6a:09:81:d2:99:3c:3c:93:4c:af:52:8a:f9:58:07:fe:22:
         ac:8d:fe:2b:8f:1f:05:0a:04:8a:8e:c8:51:c2:df:f9:6b:cf:
         19:7d:b8:5c:97:78:f2:6e:99:9e:cb:29:8f:d2:48:4d:c5:95:
         2f:3a:c1:55:c9:79:8d:c2:7d:21:23:02:9e:d2:75:05:f6:a6:
         39:49:d4:0a:fa:cc:a3:7e:65:03:94:4f:8c:dc:cd:1e:30:a8:
         1d:2a:c9:96:6c:d9:ef:b4:09:57:b3:68:83:ef:95:aa:53:e9:
         50:2f:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org