Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.cer
File:                     8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.cer (raw, json)
Hash identifier:          jsV93Wukkoi45+UMbjjbCyh7AFehDif+tx5n9jiLTSA=
Subject key identifier:   8B:A7:DE:98:7F:2B:31:4E:50:E3:2E:E2:33:7C:DC:8C:EC:19:40:6A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       43C9940653CE63DB22A7BE839B682C2BF51A6C8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Mar 2023 17:55:42 +0000
Certificate not after:    Wed 20 Mar 2024 18:00:42 +0000
Subordinate resources:    AS: 271456
                          IP: 181.233.112.0/22
                          IP: 2804:7bd0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c9:94:06:53:ce:63:db:22:a7:be:83:9b:68:2c:2b:f5:1a:6c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 17:55:42 2023 GMT
            Not After : Mar 20 18:00:42 2024 GMT
        Subject: CN=8BA7DE987F2B314E50E32EE2337CDC8CEC19406A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:3b:37:ef:f9:87:70:98:fb:85:2d:ae:dc:
                    75:d6:33:d8:d7:eb:db:4e:84:90:f7:2f:fc:9a:18:
                    83:7c:6d:6e:e2:cf:3b:1c:be:68:43:16:73:f5:9d:
                    19:1d:dc:3c:15:6e:ae:4c:2e:d0:b9:d5:ac:43:c1:
                    15:50:c3:48:2e:e8:09:82:ad:44:2f:66:81:11:6d:
                    a4:40:f9:31:62:f2:06:e2:84:4b:22:ff:b1:05:84:
                    9b:28:db:b5:19:5f:1f:1b:b5:44:23:59:f6:96:00:
                    de:da:38:f3:8f:84:01:81:ec:35:ac:ce:c0:50:ec:
                    af:13:f0:09:ab:13:79:43:ed:a9:2b:9d:22:ec:4e:
                    38:9b:6e:e4:c1:ef:0f:6e:31:c8:d3:70:a2:d3:ed:
                    91:bb:6f:da:1f:d3:20:3d:ad:ee:4d:6b:81:59:94:
                    a1:8b:54:b4:f2:3e:de:6b:fa:41:b2:94:3e:ef:32:
                    62:62:b9:41:32:dc:c0:1e:e5:e0:71:bc:76:08:6e:
                    87:05:45:fa:7c:a0:c7:80:3c:51:4a:e6:56:56:15:
                    3b:1c:40:dd:36:cd:46:02:72:b1:f1:49:2d:33:75:
                    dd:c3:0e:e2:d4:2a:b2:2d:87:70:ee:9f:48:fe:51:
                    aa:ab:f8:ae:f7:5c:00:bf:0b:e5:94:41:45:ec:c9:
                    69:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:A7:DE:98:7F:2B:31:4E:50:E3:2E:E2:33:7C:DC:8C:EC:19:40:6A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.112.0/22
                IPv6:
                  2804:7bd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271456

    Signature Algorithm: sha256WithRSAEncryption
         01:15:f3:b9:9a:ac:56:5f:9a:95:11:18:1a:a7:7a:5b:db:61:
         41:f0:ac:d8:a9:70:12:31:c9:47:f1:6b:aa:07:c8:8c:6f:fc:
         d2:32:53:64:15:18:4b:03:f8:85:e9:da:50:2a:fa:cb:ad:5b:
         5c:b4:20:15:8e:51:84:a0:84:3d:1e:05:ed:01:06:49:8d:5f:
         93:76:b2:0a:da:ef:71:7b:29:fa:56:09:7a:08:dc:51:08:e4:
         bf:27:df:5e:61:4d:1b:9b:6b:39:17:53:c1:d0:4e:99:84:7d:
         92:5f:25:3a:d8:ea:77:66:97:29:5c:7f:1f:09:5e:53:69:30:
         dc:1d:2e:03:db:99:06:63:04:1a:14:7f:23:9b:5e:4e:d1:52:
         26:e3:b3:a8:db:10:8e:55:b5:2c:2a:a2:ed:b9:08:5c:10:70:
         8a:a5:7b:c0:67:b7:e6:a3:b7:47:49:10:3d:c1:32:14:a1:c7:
         bb:e7:9a:04:49:f6:50:fd:24:bd:7f:7f:1e:4b:c5:70:f3:1c:
         13:37:81:7c:21:29:03:6c:46:c1:87:06:ae:b4:1a:23:d9:80:
         cc:45:53:bb:28:ce:d9:c6:54:fb:3f:42:54:cd:48:ee:a2:86:
         3d:34:58:95:f2:fc:77:f4:38:4e:dc:de:ab:25:be:e4:02:0b:
         aa:56:33:bb
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUQ8mUBlPOY9sip76Dm2gsK/UabI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMjIxNzU1NDJaFw0yNDAzMjAxODAwNDJaMDMxMTAvBgNV
BAMTKDhCQTdERTk4N0YyQjMxNEU1MEUzMkVFMjMzN0NEQzhDRUMxOTQwNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpNjs37/mHcJj7hS2u3HXWM9jX
69tOhJD3L/yaGIN8bW7izzscvmhDFnP1nRkd3DwVbq5MLtC51axDwRVQw0gu6AmC
rUQvZoERbaRA+TFi8gbihEsi/7EFhJso27UZXx8btUQjWfaWAN7aOPOPhAGB7DWs
zsBQ7K8T8AmrE3lD7akrnSLsTjibbuTB7w9uMcjTcKLT7ZG7b9of0yA9re5Na4FZ
lKGLVLTyPt5r+kGylD7vMmJiuUEy3MAe5eBxvHYIbocFRfp8oMeAPFFK5lZWFTsc
QN02zUYCcrHxSS0zdd3DDuLUKrIth3Dun0j+Uaqr+K73XAC/C+WUQUXsyWl9AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLp96YfysxTlDj
LuIzfNyM7BlAajAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GRDlKOTRLVjlYQTNnUnhYa3pkRHVqV0VCb25ZMlpOZGZ5
MXd3YVZUS1o4Sy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GRDlKOTRLVjlYQTNnUnhYa3pkRHVqV0VCb25ZMlpOZGZ5
MXd3YVZUS1o4Sy8wLzhCQTdERTk4N0YyQjMxNEU1MEUzMkVFMjMzN0NEQzhDRUMx
OTQwNkEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArXpcDANBAIAAjAHAwUA
KAR70DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJGAwDQYJKoZIhvcNAQELBQAD
ggEBAAEV87marFZfmpURGBqnelvbYUHwrNipcBIxyUfxa6oHyIxv/NIyU2QVGEsD
+IXp2lAq+sutW1y0IBWOUYSghD0eBe0BBkmNX5N2sgra73F7KfpWCXoI3FEI5L8n
315hTRubazkXU8HQTpmEfZJfJTrY6ndmlylcfx8JXlNpMNwdLgPbmQZjBBoUfyOb
Xk7RUibjs6jbEI5VtSwqou25CFwQcIqle8Bnt+ajt0dJED3BMhShx7vnmgRJ9lD9
JL1/fx5LxXDzHBM3gXwhKQNsRsGHBq60GiPZgMxFU7soztnGVPs/QlTNSO6ihj00
WJXy/Hf0OE7c3qslvuQCC6pWM7s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org