Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8B1B4D5839857F2454829C6591FEC9769B1C4704.cer
File:                     8B1B4D5839857F2454829C6591FEC9769B1C4704.cer (raw, json)
Hash identifier:          edjPaiDyjQNuILMK47fq2aWxNt1fu2Yy8gPcKDvRu4M=
Subject key identifier:   8B:1B:4D:58:39:85:7F:24:54:82:9C:65:91:FE:C9:76:9B:1C:47:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4156AE0961E87061414E9D1372CF7C0672E3F400
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/8B1B4D5839857F2454829C6591FEC9769B1C4704.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 07 Aug 2023 16:41:25 +0000
Certificate not after:    Mon 05 Aug 2024 16:46:25 +0000
Subordinate resources:    AS: 262676
                          IP: 187.73.224.0/20
                          IP: 2804:e80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:56:ae:09:61:e8:70:61:41:4e:9d:13:72:cf:7c:06:72:e3:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  7 16:41:25 2023 GMT
            Not After : Aug  5 16:46:25 2024 GMT
        Subject: CN=8B1B4D5839857F2454829C6591FEC9769B1C4704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:06:e2:8c:ef:09:ab:a5:20:a6:34:0d:62:
                    eb:00:cc:e6:35:e7:a3:17:11:43:2d:d7:fd:96:4d:
                    2a:94:65:bc:94:af:9c:41:2f:7a:7c:1b:fd:a8:5c:
                    3d:8e:02:cd:f8:e5:28:97:bd:24:64:2e:c2:78:0e:
                    c0:81:b8:a8:53:09:21:d0:32:25:c6:3d:2e:d8:3a:
                    7d:92:38:5e:eb:48:81:67:06:15:5d:9d:da:7b:cb:
                    71:88:38:f4:e0:85:9e:03:e1:d6:bf:56:60:6b:6a:
                    5e:89:a4:59:66:c2:20:eb:a5:1c:6a:93:9c:61:bc:
                    29:4e:20:d4:42:a5:8b:42:a6:76:7e:6d:4d:e1:56:
                    b8:16:bb:d1:f1:54:21:9b:cb:e2:32:f8:99:36:cc:
                    84:58:5b:bd:a3:b0:b0:0b:29:65:b4:59:5d:d5:02:
                    dd:a6:a3:48:f4:ea:0a:b7:81:23:02:99:6f:12:8a:
                    be:c0:a9:d5:1a:c4:d7:36:a5:a2:b6:e4:9e:ac:5f:
                    fa:99:dc:15:d3:8b:4b:5d:85:0a:e1:ff:49:06:81:
                    45:8d:5e:f3:04:2e:97:46:92:20:3e:69:23:3d:4d:
                    7a:61:ff:c0:18:ec:d4:fc:67:0d:ce:e1:4d:c7:db:
                    63:1f:65:5f:6c:6b:c6:8d:55:2a:c3:f8:e2:c3:d2:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:1B:4D:58:39:85:7F:24:54:82:9C:65:91:FE:C9:76:9B:1C:47:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/8B1B4D5839857F2454829C6591FEC9769B1C4704.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.224.0/20
                IPv6:
                  2804:e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262676

    Signature Algorithm: sha256WithRSAEncryption
         87:c0:4d:b5:58:91:46:52:a2:e4:4c:66:d5:ac:1d:40:b6:00:
         13:ed:d5:75:9b:75:80:48:8d:29:7a:00:ff:0c:25:b6:fc:4c:
         c7:2f:1d:78:51:fa:33:54:fd:40:a2:04:6b:83:98:13:84:0b:
         93:5a:08:e0:4f:93:0a:1c:73:d9:eb:31:fa:3d:f8:ec:b6:2b:
         56:77:e7:15:88:e5:d7:56:0d:5b:4d:54:16:f8:89:22:b0:62:
         21:77:69:cf:32:3a:64:36:31:34:3a:9d:7d:0d:c0:cf:82:fc:
         18:bb:51:5d:32:9d:85:d1:be:7d:75:9d:c6:b7:cd:e0:f6:7d:
         d5:18:70:3e:e8:40:53:e6:7b:b2:05:6f:ad:fe:bc:44:d1:6a:
         aa:68:4d:e6:e7:35:7d:4f:53:93:c6:87:93:fc:0b:32:a6:98:
         d5:e8:b1:92:b2:c7:e9:14:99:94:f2:a7:f1:53:08:43:36:61:
         46:2c:50:b2:c2:5a:0c:3e:0c:55:e7:2e:6a:cb:1f:ca:58:19:
         95:f2:31:ad:c6:1b:4e:40:81:06:95:5f:ec:77:ba:cf:fd:cc:
         72:ad:4c:87:14:32:56:f9:3b:1c:f7:2f:5a:24:ab:2c:bb:6d:
         02:e7:b0:b3:29:f1:12:b4:cc:d2:23:f9:eb:82:f7:34:e3:21:
         78:6b:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org