Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8B10E88FB610CE992B0CC79650F8B7A548A6BDA9.cer
File:                     8B10E88FB610CE992B0CC79650F8B7A548A6BDA9.cer (raw, json)
Hash identifier:          unR1LTu0x52+36DLqQwAlR0W3NEA1cEOxRhWxqaEwcA=
Subject key identifier:   8B:10:E8:8F:B6:10:CE:99:2B:0C:C7:96:50:F8:B7:A5:48:A6:BD:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E3BBF15E19E7324A8F22E36B861917031A94CAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/8B10E88FB610CE992B0CC79650F8B7A548A6BDA9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 16:03:24 +0000
Certificate not after:    Sat 06 Apr 2024 16:08:24 +0000
Subordinate resources:    AS: 264091
                          IP: 143.208.128.0/22
                          IP: 2804:2abc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3b:bf:15:e1:9e:73:24:a8:f2:2e:36:b8:61:91:70:31:a9:4c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  8 16:03:24 2023 GMT
            Not After : Apr  6 16:08:24 2024 GMT
        Subject: CN=8B10E88FB610CE992B0CC79650F8B7A548A6BDA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:f5:12:02:db:9c:48:35:13:e3:22:65:21:
                    a0:c4:ed:cb:80:5f:72:13:0f:28:d6:8b:06:64:70:
                    33:cc:c8:3e:c9:3a:fd:26:fd:1d:af:33:e8:de:48:
                    6e:2a:a7:ab:d3:1d:d9:73:bd:c9:d2:b0:46:69:3a:
                    31:91:79:72:fb:82:e1:41:b1:e3:b2:e1:1b:cd:f2:
                    78:39:fe:58:8b:79:69:db:b7:16:32:a2:82:ea:d1:
                    fc:76:2e:74:8d:32:ed:c2:9c:58:6d:90:16:7b:83:
                    b6:26:36:95:26:a9:7d:9b:3b:d0:07:8f:fc:1b:14:
                    57:e8:92:cc:4e:b8:80:ce:5d:df:9e:ff:2d:5d:57:
                    86:3a:c3:38:45:68:42:a5:b5:3d:2f:7a:47:aa:1c:
                    0f:aa:67:13:b2:00:2a:34:3c:b3:14:08:1c:68:66:
                    1b:60:50:eb:29:44:44:53:ed:95:dd:46:7c:ee:25:
                    6c:7c:c4:a0:49:9a:50:d5:f0:47:3d:96:0b:b4:10:
                    66:54:15:78:f8:a6:9c:0c:0c:f4:ea:db:59:cb:83:
                    53:a4:fb:8d:1b:85:fb:1c:84:c4:8a:0b:28:89:9a:
                    67:26:e9:b1:6e:ef:f4:a9:be:b3:54:f4:44:a9:5c:
                    bc:45:fc:d7:6f:97:5f:7e:14:8b:05:5e:8a:b1:7d:
                    b1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:10:E8:8F:B6:10:CE:99:2B:0C:C7:96:50:F8:B7:A5:48:A6:BD:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/8B10E88FB610CE992B0CC79650F8B7A548A6BDA9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.128.0/22
                IPv6:
                  2804:2abc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264091

    Signature Algorithm: sha256WithRSAEncryption
         a9:63:33:17:ce:1d:ae:33:ab:40:12:ef:17:3a:df:96:96:24:
         30:a4:44:82:cb:15:9f:06:ec:c0:7b:59:50:f7:e2:62:66:07:
         3d:0e:5d:ef:d0:8d:43:f8:34:4c:6d:ab:57:08:a3:ea:10:0a:
         64:cc:bc:d2:3e:04:5e:2c:90:c8:fe:37:8c:00:38:19:1b:34:
         70:93:63:38:e6:55:46:86:d1:79:5e:d7:aa:2e:d9:f7:f2:ce:
         eb:c2:12:4f:90:1a:1c:d3:26:34:86:4f:6a:c3:7b:90:d0:9f:
         1b:91:d3:eb:48:40:4a:1d:68:1e:01:74:86:99:5d:92:cc:59:
         0d:da:c5:00:a6:80:20:a1:1e:9e:d6:c3:9d:f8:b7:8d:48:43:
         68:56:3a:74:fc:7d:93:b7:34:7c:26:e4:62:9e:0b:bb:19:d0:
         c9:f3:b7:48:01:54:e4:a6:96:d4:94:34:b0:9a:8d:66:22:a5:
         da:07:94:66:a2:19:0c:41:20:59:dd:9d:44:8c:e8:28:7d:e9:
         f5:b4:fc:f0:5e:c2:15:a9:23:85:f4:cd:e8:2f:4a:b1:6b:81:
         12:69:9a:60:ca:6a:17:a3:99:a5:7e:80:bc:41:81:92:44:2c:
         40:54:4b:c9:2f:fa:6b:1d:c8:b3:2b:29:d7:24:f5:2f:ea:a5:
         40:47:70:a5
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUHju/FeGecySo8i42uGGRcDGpTKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MDgxNjAzMjRaFw0yNDA0MDYxNjA4MjRaMDMxMTAvBgNV
BAMTKDhCMTBFODhGQjYxMENFOTkyQjBDQzc5NjUwRjhCN0E1NDhBNkJEQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgPUSAtucSDUT4yJlIaDE7cuA
X3ITDyjWiwZkcDPMyD7JOv0m/R2vM+jeSG4qp6vTHdlzvcnSsEZpOjGReXL7guFB
seOy4RvN8ng5/liLeWnbtxYyooLq0fx2LnSNMu3CnFhtkBZ7g7YmNpUmqX2bO9AH
j/wbFFfoksxOuIDOXd+e/y1dV4Y6wzhFaEKltT0vekeqHA+qZxOyACo0PLMUCBxo
ZhtgUOspRERT7ZXdRnzuJWx8xKBJmlDV8Ec9lgu0EGZUFXj4ppwMDPTq21nLg1Ok
+40bhfschMSKCyiJmmcm6bFu7/SpvrNU9ESpXLxF/Ndvl19+FIsFXoqxfbFfAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLEOiPthDOmSsM
x5ZQ+LelSKa9qTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CS0hGcTMzRWp0VXBFckdOUFhZeFpXVFhBanlCYWU2TVVU
bnNpN1VuN3BhNS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CS0hGcTMzRWp0VXBFckdOUFhZeFpXVFhBanlCYWU2TVVU
bnNpN1VuN3BhNS8wLzhCMTBFODhGQjYxMENFOTkyQjBDQzc5NjUwRjhCN0E1NDhB
NkJEQTkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAo/QgDANBAIAAjAHAwUA
KAQqvDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEB5swDQYJKoZIhvcNAQELBQAD
ggEBAKljMxfOHa4zq0AS7xc635aWJDCkRILLFZ8G7MB7WVD34mJmBz0OXe/QjUP4
NExtq1cIo+oQCmTMvNI+BF4skMj+N4wAOBkbNHCTYzjmVUaG0Xle16ou2ffyzuvC
Ek+QGhzTJjSGT2rDe5DQnxuR0+tIQEodaB4BdIaZXZLMWQ3axQCmgCChHp7Ww534
t41IQ2hWOnT8fZO3NHwm5GKeC7sZ0Mnzt0gBVOSmltSUNLCajWYipdoHlGaiGQxB
IFndnUSM6Ch96fW0/PBewhWpI4X0zegvSrFrgRJpmmDKahejmaV+gLxBgZJELEBU
S8kv+msdyLMrKdck9S/qpUBHcKU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org