Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372.cer
File:                     8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372.cer (raw, json)
Hash identifier:          lgrHlzxsRaPs41w6FqwZK6kgqAaP1FWfx1dX8YYWoRA=
Subject key identifier:   8B:5A:0B:B8:12:E6:DF:7D:ED:B8:59:93:29:C2:B1:4B:B7:C0:03:72
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       445242C8BEE7A7BCA9167736701A459ACC62A0FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jul 2023 21:55:12 +0000
Certificate not after:    Mon 22 Jul 2024 22:00:12 +0000
Subordinate resources:    AS: 265300
                          IP: 168.121.68.0/22
                          IP: 200.106.132.0/22
                          IP: 200.125.176.0/22
                          IP: 2804:2dbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:52:42:c8:be:e7:a7:bc:a9:16:77:36:70:1a:45:9a:cc:62:a0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 21:55:12 2023 GMT
            Not After : Jul 22 22:00:12 2024 GMT
        Subject: CN=8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:f5:c5:d3:dd:d2:7c:b1:71:d7:07:a3:fb:
                    99:d5:de:70:38:6a:ed:31:3d:97:4f:b4:65:b2:e3:
                    e9:4d:e4:b4:7e:d8:0d:69:9d:c9:4c:bd:6d:4b:b0:
                    4b:22:75:ae:4b:66:fc:94:58:89:13:8f:be:c1:97:
                    37:28:7b:68:49:86:0b:49:45:46:0a:24:26:32:4b:
                    bc:e6:ff:9c:a4:28:2f:c9:15:09:45:44:5f:dd:e3:
                    be:20:ca:99:b7:36:a7:e5:89:d2:bf:91:f1:f3:97:
                    ab:eb:5a:75:a1:6b:0d:49:91:3e:8d:1a:ed:47:4c:
                    01:8e:8b:1d:51:c3:aa:15:6f:d6:aa:27:99:2e:d8:
                    60:67:02:30:91:63:36:69:a0:b3:cc:16:8c:70:15:
                    88:04:f8:ec:91:76:ea:b0:4e:48:14:c1:b3:5f:85:
                    b4:be:e3:95:4d:27:2b:91:91:73:5e:c3:05:48:39:
                    66:a4:e5:3d:d6:ce:6d:5d:27:a2:59:bd:f7:a2:5b:
                    fb:9d:0a:96:24:bb:bd:6a:0c:2c:23:63:13:5f:c4:
                    16:bf:d5:4b:a0:a3:6a:81:e2:1b:c9:76:84:11:6b:
                    a9:d3:0d:fb:a3:ad:fa:9e:35:95:91:df:a0:57:84:
                    d8:1d:99:b0:da:c9:d0:89:f9:d8:7e:6e:a6:63:83:
                    78:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:5A:0B:B8:12:E6:DF:7D:ED:B8:59:93:29:C2:B1:4B:B7:C0:03:72
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22
                  200.106.132.0/22
                  200.125.176.0/22
                IPv6:
                  2804:2dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265300

    Signature Algorithm: sha256WithRSAEncryption
         b7:29:0f:94:c8:c5:d8:33:c0:de:45:7f:e2:6a:7e:b2:f6:1b:
         13:1e:4b:31:32:4a:3d:eb:8c:7a:62:97:d7:35:07:08:a0:63:
         28:f1:2c:6b:7e:51:25:40:f9:e6:df:1d:eb:6e:91:d4:5d:ec:
         7b:38:38:d2:d3:01:01:d5:8b:98:b6:04:25:67:39:9d:b1:cc:
         7b:9f:17:55:79:de:b8:9e:97:8d:f3:fe:7c:a3:fc:9a:6d:9f:
         4c:dc:5b:33:6b:3a:66:99:73:18:e9:ae:01:b8:70:72:94:14:
         81:8a:0e:9a:62:bc:e4:1f:56:0b:e4:1a:ef:3f:7e:00:7d:02:
         5e:75:d1:b2:74:fb:3a:ef:94:66:24:ee:a6:95:0f:44:5c:f0:
         ab:14:fa:58:90:2c:74:25:7e:87:1a:18:b7:b8:36:62:c8:b0:
         73:c2:82:2a:90:b4:17:57:cb:04:7b:d1:81:62:ff:06:20:6d:
         e6:fd:d5:d7:6d:d2:99:07:e4:de:1f:37:a1:e8:92:ab:51:d9:
         f4:2d:00:23:dc:45:ec:91:48:4f:31:ad:3f:37:11:d0:93:90:
         7f:5e:4d:c0:c2:10:0d:7d:3e:32:3a:fa:3d:d7:70:f7:95:a2:
         31:e6:06:2f:47:43:6e:f9:ef:da:4f:c4:4a:07:9a:54:90:fe:
         ab:c4:36:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org