Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8BD147C947DB64C5F81687C80D51E9C754CCE613.cer
File:                     8BD147C947DB64C5F81687C80D51E9C754CCE613.cer (raw, json)
Hash identifier:          SACMPXbYE7cLxiYWG/Y0Wb3zh7XOUFWVY0XNEYvquno=
Subject key identifier:   8B:D1:47:C9:47:DB:64:C5:F8:16:87:C8:0D:51:E9:C7:54:CC:E6:13
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       718917F7291413E0D64C5D82085E65BCE0C07614
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/8BD147C947DB64C5F81687C80D51E9C754CCE613.mft
caRepository:             rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2024 15:55:44 +0000
Certificate not after:    Wed 05 Mar 2025 16:00:44 +0000
Subordinate resources:    AS: 28665
                          IP: 177.12.0.0/18
                          IP: 177.136.128.0/19
                          IP: 189.1.128.0/20
                          IP: 2804:f88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:89:17:f7:29:14:13:e0:d6:4c:5d:82:08:5e:65:bc:e0:c0:76:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  6 15:55:44 2024 GMT
            Not After : Mar  5 16:00:44 2025 GMT
        Subject: CN=8BD147C947DB64C5F81687C80D51E9C754CCE613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:69:28:11:56:fb:a1:64:0d:64:67:3b:e5:
                    c0:cb:19:cb:2e:ce:47:02:2b:f9:d4:6d:76:2e:61:
                    82:b2:1c:ec:fb:e7:5f:63:8d:33:6e:07:ab:07:0d:
                    23:b6:dc:23:f5:6e:5b:ad:64:ef:dd:3f:d3:53:6c:
                    16:68:e6:12:fd:ff:11:10:0d:25:36:b4:c6:64:5f:
                    2c:c8:4a:f6:06:f5:1f:e6:11:43:e1:a3:ff:92:6d:
                    08:3d:42:71:8e:55:43:e7:86:15:94:59:7b:d5:2b:
                    d7:05:de:fc:f1:a8:64:ff:34:43:e5:ea:70:b0:34:
                    38:8b:6a:1f:8e:be:a9:74:a0:31:42:fb:e2:7a:d9:
                    64:23:ff:e3:48:ea:08:18:68:d9:d0:4d:da:18:fa:
                    df:99:26:c6:a2:d1:69:0e:0a:5a:df:8a:5c:87:9d:
                    d2:16:20:f2:60:4a:07:95:bb:ab:79:5e:7d:54:17:
                    70:57:bb:a3:7a:cb:a9:8f:33:03:74:26:24:62:e3:
                    fb:08:70:0d:78:fe:2f:e6:56:e5:f4:88:39:ec:91:
                    ba:92:a1:3a:43:64:25:00:c5:90:5c:69:53:02:2a:
                    e9:77:cb:15:4a:8d:b5:f3:3e:20:a3:a9:71:34:ea:
                    6a:c4:1d:df:f7:91:95:9b:0f:ed:0f:20:e8:69:9d:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:D1:47:C9:47:DB:64:C5:F8:16:87:C8:0D:51:E9:C7:54:CC:E6:13
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/8BD147C947DB64C5F81687C80D51E9C754CCE613.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.0.0/18
                  177.136.128.0/19
                  189.1.128.0/20
                IPv6:
                  2804:f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28665

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:92:0f:59:b2:eb:c6:e1:5a:06:cc:e4:70:a1:ad:d7:7f:
         ed:21:01:57:2b:f2:e6:87:65:a8:28:34:df:a1:1f:35:72:06:
         b3:ed:a0:4c:72:49:a8:7e:69:e6:33:69:46:1f:21:e2:73:bd:
         78:c9:4b:28:65:6d:17:70:d0:01:9c:b0:33:fe:d3:8d:c5:fb:
         b6:cc:63:bf:ad:b5:b9:af:b2:a5:85:4f:4a:67:7c:45:c4:a8:
         ce:fe:3f:44:03:5e:2a:a8:9a:f0:a0:4f:c3:a8:05:00:45:25:
         f8:d7:4e:d6:c6:97:96:e7:58:5f:ce:6e:0e:d3:86:40:e1:d2:
         3a:bc:18:74:12:57:7d:54:a5:6c:67:d3:23:b9:54:ff:e4:7b:
         8c:ea:09:b7:64:a1:fa:a2:4f:a7:83:e7:a0:ca:74:93:eb:b5:
         d5:ff:a2:9d:b4:71:55:91:03:fd:7e:dc:cd:ca:35:cb:84:6a:
         f6:c5:05:a0:7d:13:92:85:be:33:e1:a2:12:73:18:ca:25:ae:
         0f:94:96:7b:72:02:64:77:eb:c6:d6:54:56:e4:83:46:e3:a8:
         e8:d9:78:25:16:32:cb:1d:41:cb:15:20:a7:04:66:2e:73:d2:
         52:00:86:b6:c4:35:35:69:05:ca:a5:ce:f2:0f:f5:52:6b:5c:
         f0:73:55:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org