Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA.cer
File:                     8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA.cer (raw, json)
Hash identifier:          Csb0fVSJTsXluZG39BhWIgYBiGyzO2mwrUYB5o6d2ks=
Subject key identifier:   8B:BE:5E:26:7C:AF:7D:2A:92:11:7C:EC:D7:B8:76:6C:83:7E:ED:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C3AAB9F6236598FAC5A429D8FB7E75C5869907B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Nov 2023 13:51:38 +0000
Certificate not after:    Fri 08 Nov 2024 13:56:38 +0000
Subordinate resources:    AS: 269578
                          IP: 45.189.52.0/22
                          IP: 2804:66b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3a:ab:9f:62:36:59:8f:ac:5a:42:9d:8f:b7:e7:5c:58:69:90:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 13:51:38 2023 GMT
            Not After : Nov  8 13:56:38 2024 GMT
        Subject: CN=8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:cd:43:8e:02:01:c0:19:7d:5e:59:62:b3:
                    64:87:11:b0:3e:b9:e4:cd:58:84:85:bd:11:54:19:
                    57:02:d3:90:d1:34:fd:28:8d:e4:62:22:92:2a:c5:
                    44:2f:c8:75:c9:f0:cf:3b:c0:dd:38:d0:e3:3a:17:
                    e0:fc:37:0a:b4:2c:bf:f3:c2:84:bc:f7:8c:59:19:
                    8d:60:13:9f:3d:f2:c5:c4:f4:04:63:dd:70:f9:cc:
                    81:35:ce:5b:63:98:72:c5:c2:ab:61:43:b1:7c:4c:
                    54:55:7a:b8:87:b5:f5:b1:f0:dc:d6:a0:1d:62:a9:
                    2f:03:da:3e:94:c6:dd:a2:a0:77:65:16:58:e5:9b:
                    34:ce:ca:77:18:5d:d5:23:5b:1b:5b:d3:a7:99:53:
                    a3:8b:06:c6:50:8a:d5:2a:cf:a2:02:43:6e:3f:cd:
                    e5:98:2e:40:ce:35:b6:57:99:94:6f:4e:d5:14:84:
                    39:a1:88:7d:40:50:70:65:5f:2f:ee:fc:8b:73:b2:
                    56:92:b8:c7:e7:dd:2a:5d:e0:3b:22:50:d0:f4:96:
                    6f:59:e7:bc:5b:a6:8c:82:c5:33:58:b9:f3:c2:04:
                    f3:36:c5:c9:7b:5f:72:3b:6c:fc:ec:9c:91:c9:38:
                    f3:59:d2:1e:52:19:78:0b:29:a5:f5:72:60:2d:30:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:BE:5E:26:7C:AF:7D:2A:92:11:7C:EC:D7:B8:76:6C:83:7E:ED:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.52.0/22
                IPv6:
                  2804:66b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269578

    Signature Algorithm: sha256WithRSAEncryption
         0a:22:4f:b5:d8:0c:8a:75:9d:bd:dc:f1:12:f0:fb:a9:ea:7e:
         21:f2:9a:9e:21:8a:ea:6d:d1:49:87:25:70:4d:bd:5b:0f:98:
         63:5a:cd:94:83:94:bf:c5:f8:0a:d0:ac:9c:56:79:f6:1a:16:
         96:ed:a2:19:4d:a3:72:5a:09:99:f0:7b:04:6a:8c:28:54:07:
         46:0c:d5:35:92:0a:83:5b:4a:ae:3d:81:e5:0f:2e:11:9a:29:
         7e:c5:a8:fd:8e:cb:8e:20:7e:0a:fe:1e:a6:f8:4f:a2:4a:07:
         39:b5:c1:ac:9d:7a:70:d0:69:51:e3:21:60:a7:2c:84:22:e9:
         07:a7:91:08:8c:6b:c3:c1:b5:ac:da:13:42:50:7b:6f:9f:71:
         7e:60:82:29:b7:14:63:35:8d:bd:f8:f4:e0:7c:91:8e:b4:0f:
         a4:00:59:4b:38:d7:14:02:5a:7b:2d:fc:64:0a:cc:a9:10:03:
         88:e6:85:47:0e:65:ac:fd:7d:64:53:89:f2:19:f3:84:c3:d0:
         31:6d:f2:a8:bd:12:10:73:ef:52:bf:22:5e:cd:56:f8:6b:84:
         41:a9:73:15:a8:7b:b8:f0:cd:29:bc:e4:9c:25:af:70:62:fa:
         85:3b:49:19:d2:99:cf:bb:fd:ef:c9:b2:54:42:78:68:64:59:
         26:4d:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org