Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8AB9159A6A776B346A919BDCBE1FDAF72E89F110.cer
File:                     8AB9159A6A776B346A919BDCBE1FDAF72E89F110.cer (raw, json)
Hash identifier:          NXdqqHmYzAqpgS6vjVrd1EFkzVXi5r0qXhHJRhuFQys=
Subject key identifier:   8A:B9:15:9A:6A:77:6B:34:6A:91:9B:DC:BE:1F:DA:F7:2E:89:F1:10
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       578B2429A003D97344B9BFBCA932DE37CB3DBE6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/8AB9159A6A776B346A919BDCBE1FDAF72E89F110.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 02 Sep 2023 15:30:01 +0000
Certificate not after:    Sat 31 Aug 2024 15:35:01 +0000
Subordinate resources:    AS: 262899
                          IP: 45.165.128.0/22
                          IP: 2804:554c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8b:24:29:a0:03:d9:73:44:b9:bf:bc:a9:32:de:37:cb:3d:be:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  2 15:30:01 2023 GMT
            Not After : Aug 31 15:35:01 2024 GMT
        Subject: CN=8AB9159A6A776B346A919BDCBE1FDAF72E89F110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:69:ab:4d:11:7c:c1:23:54:3b:d3:75:96:
                    15:1b:62:5c:1d:38:65:7b:84:84:ba:f4:be:96:e3:
                    42:75:9d:95:b7:bb:ee:dc:86:38:25:f8:22:af:3e:
                    da:dd:79:51:d2:ca:40:ab:9f:a8:9e:c9:ff:43:46:
                    1f:fc:49:d9:d0:0c:4a:0b:6a:24:44:4b:55:fe:da:
                    43:b2:95:93:5b:d4:b5:2a:ed:4f:6d:82:d1:82:67:
                    eb:25:de:63:54:f8:53:bf:77:26:b2:b7:4d:43:97:
                    70:c9:3f:60:7e:ee:f4:16:de:42:e8:7d:a7:a4:49:
                    90:7a:91:92:1f:e8:6a:96:3e:50:04:c3:0c:05:7e:
                    c6:7b:61:f6:8d:20:6e:34:35:2b:b3:e3:55:80:ae:
                    b8:95:31:3c:4a:a2:4b:5e:63:ba:79:9d:a3:48:0d:
                    18:84:fe:53:ac:ac:49:be:3a:73:1b:ba:62:9a:c9:
                    67:79:23:99:39:13:5a:f8:fe:e1:99:4e:c7:83:90:
                    50:b0:99:61:b1:cc:7f:15:4a:2f:4c:36:17:eb:b9:
                    14:2f:b2:54:41:2c:e8:fe:78:38:d0:4b:5a:90:7f:
                    f9:9b:82:12:7b:9f:48:ac:0a:fa:94:9e:ba:6e:5d:
                    10:8c:f4:9d:16:f7:f7:53:86:20:80:4b:83:7a:ed:
                    26:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:B9:15:9A:6A:77:6B:34:6A:91:9B:DC:BE:1F:DA:F7:2E:89:F1:10
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/8AB9159A6A776B346A919BDCBE1FDAF72E89F110.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.128.0/22
                IPv6:
                  2804:554c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262899

    Signature Algorithm: sha256WithRSAEncryption
         8f:cd:f9:bb:9e:26:df:c1:06:38:79:cc:96:d1:9e:f6:f9:bf:
         50:e5:f7:6b:56:dc:62:01:de:7b:20:49:35:d6:5d:b9:b7:e5:
         6d:59:b6:ee:0a:46:0e:a5:32:0f:d7:45:89:b1:b6:f9:4f:67:
         66:10:45:67:62:02:91:07:96:ba:bc:aa:9e:bc:16:64:33:88:
         4f:bc:2d:2b:1f:4f:24:c7:7a:09:ee:a6:c3:a2:32:a5:15:0f:
         7b:eb:d4:15:e0:cc:bc:44:26:e2:30:df:3b:4d:4e:2d:9c:cf:
         dc:c6:40:b6:40:0e:86:96:3a:44:bb:90:0d:ee:ee:14:c6:4d:
         1a:7b:6b:97:49:6d:5e:62:0a:82:4e:d6:ee:42:5e:c1:e8:8e:
         55:62:be:6c:cd:b2:5e:0f:8c:cb:ca:62:45:09:ab:cd:45:06:
         bd:83:8c:58:d9:d4:55:fc:40:8c:20:d9:70:0a:f8:2b:53:d3:
         92:df:56:4c:2c:bb:d2:c1:5c:a5:bd:0a:b9:8e:c1:8e:f2:eb:
         1c:72:18:9f:04:7c:a2:67:b7:e5:40:d1:7b:52:40:4b:06:66:
         83:17:06:e4:8b:ba:07:9c:f9:82:11:51:bb:b3:63:30:04:eb:
         83:ac:98:1e:de:15:d8:b4:0f:f6:9b:29:40:43:e4:d0:9d:11:
         2c:11:c5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org