Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8B2D0EE8927450C8BD302206E147D31846C72ACC.cer
File:                     8B2D0EE8927450C8BD302206E147D31846C72ACC.cer (raw, json)
Hash identifier:          E/xwSak0Ul/n81ebs2hDuyxXX7HSvBnAIUqzfaTcDAg=
Subject key identifier:   8B:2D:0E:E8:92:74:50:C8:BD:30:22:06:E1:47:D3:18:46:C7:2A:CC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       31CC95F433198D5DC8B8205E7DB7E7D87B1F8BE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/8B2D0EE8927450C8BD302206E147D31846C72ACC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 12:53:54 +0000
Certificate not after:    Thu 11 Jul 2024 12:58:54 +0000
Subordinate resources:    AS: 266293
                          IP: 170.79.132.0/22
                          IP: 2804:358c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cc:95:f4:33:19:8d:5d:c8:b8:20:5e:7d:b7:e7:d8:7b:1f:8b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 12:53:54 2023 GMT
            Not After : Jul 11 12:58:54 2024 GMT
        Subject: CN=8B2D0EE8927450C8BD302206E147D31846C72ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:11:38:ee:e0:5e:20:55:d0:15:17:3e:f6:
                    11:be:55:6e:26:99:36:8f:bf:cc:db:17:6d:60:16:
                    1a:a7:9d:3c:73:22:e9:4d:69:37:c4:06:51:96:15:
                    92:62:83:9b:94:37:a6:8b:ab:72:96:2f:d0:59:cc:
                    cf:f0:41:af:90:b5:87:d3:f3:39:ac:9b:f7:9a:03:
                    1f:17:5f:3e:e1:8e:f5:b1:d5:5d:67:4b:b5:d0:3b:
                    87:ef:18:27:54:d4:f8:25:41:cd:b8:76:2e:9d:dd:
                    d1:bf:70:4d:8a:8e:fe:78:dc:5c:cc:6d:33:38:8e:
                    30:75:55:5b:77:f0:0b:0a:00:44:7b:a3:32:75:91:
                    ac:fb:14:91:9c:e4:a7:d0:ee:f2:8a:51:8f:c6:35:
                    79:9d:b4:e4:50:fe:95:0c:84:a8:08:63:de:ad:88:
                    9e:1f:f0:94:a4:53:1b:0a:06:88:9c:cf:b2:a8:c4:
                    5d:ef:c1:a2:1f:aa:da:c1:49:74:8c:5c:08:aa:ad:
                    01:8d:16:a8:46:6c:44:cb:76:03:01:05:2f:00:a3:
                    e1:eb:f5:ce:ec:8a:92:be:13:d8:f6:4f:a9:d0:3e:
                    8e:42:80:00:b7:ed:5b:2c:63:45:e7:eb:df:01:0b:
                    1e:83:8f:e6:f7:e7:e5:84:34:ec:99:3b:e7:04:dd:
                    9c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:2D:0E:E8:92:74:50:C8:BD:30:22:06:E1:47:D3:18:46:C7:2A:CC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/8B2D0EE8927450C8BD302206E147D31846C72ACC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.132.0/22
                IPv6:
                  2804:358c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266293

    Signature Algorithm: sha256WithRSAEncryption
         8f:72:10:4e:d7:e4:ff:c4:68:ff:14:8f:21:53:e6:d2:60:42:
         39:f5:40:af:2d:ba:95:65:2b:12:06:8d:b6:d6:9c:65:af:68:
         6c:8c:27:c5:b2:00:ea:77:dc:12:c2:9f:8d:d3:95:3a:68:12:
         0c:ae:fb:f6:45:01:df:3d:f3:9f:51:e2:e0:0c:5c:38:fa:b7:
         f9:82:24:80:60:c3:29:d0:d3:e9:48:0a:5e:e7:3e:77:33:08:
         5b:38:80:ef:75:8e:ec:9a:85:d6:4b:1e:c6:4a:fd:51:5e:bb:
         e5:6c:b0:e0:18:d5:34:5d:5c:df:21:60:58:d0:9b:91:b6:0d:
         91:63:36:52:29:bb:3d:4d:cc:eb:e5:a3:e2:4b:82:90:98:7d:
         a8:b9:0a:82:ba:fd:f3:e4:f6:96:8c:07:77:8c:dd:a8:24:40:
         75:e5:f3:ca:93:28:76:0b:73:0e:be:87:ff:1b:41:7e:de:c3:
         20:90:2f:d9:a1:a9:d8:53:41:44:0e:3c:0c:b7:21:be:6e:60:
         bb:33:a9:25:de:e6:ae:8e:a7:56:a5:82:51:e8:9e:5d:03:38:
         b2:37:8d:b5:b5:75:95:e9:22:d1:5e:b2:fe:41:d8:53:3f:0e:
         af:64:c5:5f:ce:2a:6b:0b:18:96:c8:d7:11:6e:d8:c4:de:69:
         da:88:16:75
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUMcyV9DMZjV3IuCBefbfn2Hsfi+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTMxMjUzNTRaFw0yNDA3MTExMjU4NTRaMDMxMTAvBgNV
BAMTKDhCMkQwRUU4OTI3NDUwQzhCRDMwMjIwNkUxNDdEMzE4NDZDNzJBQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VxE47uBeIFXQFRc+9hG+VW4m
mTaPv8zbF21gFhqnnTxzIulNaTfEBlGWFZJig5uUN6aLq3KWL9BZzM/wQa+QtYfT
8zmsm/eaAx8XXz7hjvWx1V1nS7XQO4fvGCdU1PglQc24di6d3dG/cE2Kjv543FzM
bTM4jjB1VVt38AsKAER7ozJ1kaz7FJGc5KfQ7vKKUY/GNXmdtORQ/pUMhKgIY96t
iJ4f8JSkUxsKBoicz7KoxF3vwaIfqtrBSXSMXAiqrQGNFqhGbETLdgMBBS8Ao+Hr
9c7sipK+E9j2T6nQPo5CgAC37VssY0Xn698BCx6Dj+b35+WENOyZO+cE3Zy7AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLLQ7oknRQyL0w
IgbhR9MYRscqzDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zaGQ4TWRSeUxwaXBSSGtFRERkdFVZU0ZDMzNYVHl0NHNB
cEFmVjV0ZzNLTC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zaGQ4TWRSeUxwaXBSSGtFRERkdFVZU0ZDMzNYVHl0NHNB
cEFmVjV0ZzNLTC8wLzhCMkQwRUU4OTI3NDUwQzhCRDMwMjIwNkUxNDdEMzE4NDZD
NzJBQ0MubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqpPhDANBAIAAjAHAwUA
KAQ1jDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEDUwDQYJKoZIhvcNAQELBQAD
ggEBAI9yEE7X5P/EaP8UjyFT5tJgQjn1QK8tupVlKxIGjbbWnGWvaGyMJ8WyAOp3
3BLCn43TlTpoEgyu+/ZFAd89859R4uAMXDj6t/mCJIBgwynQ0+lICl7nPnczCFs4
gO91juyahdZLHsZK/VFeu+VssOAY1TRdXN8hYFjQm5G2DZFjNlIpuz1NzOvlo+JL
gpCYfai5CoK6/fPk9paMB3eM3agkQHXl88qTKHYLcw6+h/8bQX7ewyCQL9mhqdhT
QUQOPAy3Ib5uYLszqSXe5q6Op1alglHonl0DOLI3jbW1dZXpItFesv5B2FM/Dq9k
xV/OKmsLGJbI1xFu2MTeadqIFnU=
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:50 2025 by rpki-client