Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8B383B3261B26CE80816D64F95882AD7906A2A79.cer
File:                     8B383B3261B26CE80816D64F95882AD7906A2A79.cer (raw, json)
Hash identifier:          OmIpuepv4mqvXyPo4/r2r1IxB09GoasuHq6x7c/o4i0=
Subject key identifier:   8B:38:3B:32:61:B2:6C:E8:08:16:D6:4F:95:88:2A:D7:90:6A:2A:79
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       476BA6286D0387D897193FF4E5BDEC4E59E9054F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4VBKFKkcDzXzqKdAjrseoRNvn8uUXNFPPhYj2KCDEAAy/0/8B383B3261B26CE80816D64F95882AD7906A2A79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4VBKFKkcDzXzqKdAjrseoRNvn8uUXNFPPhYj2KCDEAAy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jan 2024 12:38:07 +0000
Certificate not after:    Tue 14 Jan 2025 12:43:07 +0000
Subordinate resources:    AS: 269690
                          IP: 45.191.144.0/22
                          IP: 2804:6868::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6b:a6:28:6d:03:87:d8:97:19:3f:f4:e5:bd:ec:4e:59:e9:05:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 16 12:38:07 2024 GMT
            Not After : Jan 14 12:43:07 2025 GMT
        Subject: CN=8B383B3261B26CE80816D64F95882AD7906A2A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:69:f1:86:e5:55:68:b7:74:e0:54:06:c7:
                    d9:d4:01:99:f4:7a:ec:5f:10:7d:a9:35:fb:a6:20:
                    e2:ed:59:19:87:73:70:c9:82:ae:df:2d:4f:ce:05:
                    2e:0e:b5:92:cb:f2:d8:38:97:3b:62:6a:0e:9f:5d:
                    34:9a:bd:17:d5:82:cd:1f:1c:7e:b1:3f:1f:89:77:
                    cc:0e:95:73:10:22:a2:c4:81:b6:10:e6:94:91:90:
                    39:f2:9a:af:2c:3a:86:7d:d7:52:a1:65:8c:91:c8:
                    e7:04:c6:1f:96:00:86:51:30:bd:0e:c3:6e:9f:31:
                    53:f5:b2:f2:b0:a6:76:10:62:3c:1f:ee:91:9f:9d:
                    cb:d0:7d:b3:7a:e7:50:8c:3a:b5:5c:d2:9f:3e:61:
                    9c:ca:14:63:2a:2f:fd:04:41:3b:66:2b:b6:bd:06:
                    5d:f2:31:3e:50:4a:ac:e1:8d:39:0d:04:fc:83:c7:
                    95:3d:74:d5:60:c9:b1:3f:60:65:45:8c:96:eb:f3:
                    fd:4e:1d:9b:d5:8f:90:8a:0c:20:73:f3:8d:e6:7b:
                    19:ae:71:53:cb:69:61:18:42:4b:d6:7b:a2:4c:50:
                    4c:c7:71:47:bd:d0:4f:98:97:c0:ee:36:c0:55:cf:
                    ca:0c:60:69:c3:4e:ee:0b:cc:fc:a2:a4:59:ca:5f:
                    2e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:38:3B:32:61:B2:6C:E8:08:16:D6:4F:95:88:2A:D7:90:6A:2A:79
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VBKFKkcDzXzqKdAjrseoRNvn8uUXNFPPhYj2KCDEAAy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VBKFKkcDzXzqKdAjrseoRNvn8uUXNFPPhYj2KCDEAAy/0/8B383B3261B26CE80816D64F95882AD7906A2A79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.144.0/22
                IPv6:
                  2804:6868::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269690

    Signature Algorithm: sha256WithRSAEncryption
         5d:3a:49:85:a9:c9:f6:2d:b6:ef:b0:d4:d6:d1:49:6a:5a:3e:
         38:55:ef:1b:07:52:62:2d:03:f8:c4:17:4c:ea:c5:85:ea:11:
         76:66:2e:c4:00:af:b2:9f:bc:73:4d:22:28:f7:c9:77:29:4f:
         1f:4f:87:ff:92:8e:1e:b7:e8:31:4a:75:26:71:7c:af:ff:86:
         1a:ca:72:9b:67:11:a7:41:27:e2:96:de:99:f2:d8:6d:97:79:
         58:f1:73:75:9e:66:a0:1d:3d:e0:96:1d:ee:30:3a:ec:5d:2f:
         eb:cc:4a:ca:5a:17:3e:6d:5b:78:2b:ab:3a:fb:f7:d8:6b:68:
         ee:8e:ad:d4:cd:c8:40:c2:3b:bb:54:cd:c2:56:0a:ea:65:7f:
         52:91:f2:70:11:f0:90:26:7c:2c:41:e4:18:9d:5d:eb:a3:a1:
         59:d1:81:7d:ac:d2:73:5d:b6:4f:cb:a5:c6:48:f4:e1:87:59:
         46:1d:cf:1d:79:d8:21:11:5b:8e:05:6e:ec:08:d1:49:80:ad:
         2b:c0:e9:76:e1:39:0a:e9:25:7a:f8:fd:c2:2d:b2:82:20:a9:
         01:e4:db:1e:bc:6a:52:5f:96:56:19:b7:89:be:0c:9e:61:22:
         21:5f:48:d6:33:c8:64:00:03:b6:b6:7d:cb:42:d3:1d:79:19:
         a2:d2:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org