Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8BD19EBA02DD8EDC2EC3846B0B6CE22A8CF98027.cer
File:                     8BD19EBA02DD8EDC2EC3846B0B6CE22A8CF98027.cer (raw, json)
Hash identifier:          E/4Zyhha8SFZJ+bgb2x3oxhHvESIYpfcHPE0TolGZnk=
Subject key identifier:   8B:D1:9E:BA:02:DD:8E:DC:2E:C3:84:6B:0B:6C:E2:2A:8C:F9:80:27
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       396A674D26E9508B7956FD28D89D5474C536087B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/8BD19EBA02DD8EDC2EC3846B0B6CE22A8CF98027.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 22:10:57 +0000
Certificate not after:    Tue 04 Mar 2025 22:15:57 +0000
Subordinate resources:    AS: 61917
                          IP: 45.188.152.0/22
                          IP: 167.250.56.0/22
                          IP: 179.124.132.0/22
                          IP: 2804:16cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6a:67:4d:26:e9:50:8b:79:56:fd:28:d8:9d:54:74:c5:36:08:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  5 22:10:57 2024 GMT
            Not After : Mar  4 22:15:57 2025 GMT
        Subject: CN=8BD19EBA02DD8EDC2EC3846B0B6CE22A8CF98027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:59:fc:54:8b:d0:61:e9:62:60:87:73:f5:04:
                    26:42:ac:25:ac:18:eb:25:50:9c:b3:02:1e:c3:9b:
                    f6:2b:a0:ca:4c:59:c5:92:c1:41:c0:7b:cf:8a:3a:
                    ca:39:1c:4a:bd:a2:67:ff:30:fb:51:cf:f4:ff:4e:
                    52:ca:83:a0:e7:30:76:24:f5:2e:5d:81:97:fa:ff:
                    66:38:e9:46:42:56:53:1a:7a:da:f6:e4:1d:90:ef:
                    f4:c8:c6:00:66:f0:07:40:60:50:01:98:38:9e:f5:
                    06:b6:f6:7a:9b:64:13:10:e5:2c:56:43:54:08:b6:
                    db:f4:e8:c7:3f:bb:69:67:f4:79:ed:84:c0:d5:a3:
                    af:34:3c:3f:f2:e2:44:05:36:a5:4a:5f:0a:87:71:
                    b7:c4:8e:bb:7c:c2:30:48:ad:cf:0a:04:ac:c1:ab:
                    64:73:d2:d8:5a:54:df:b7:ad:6d:0c:fd:33:8b:5a:
                    ec:7d:e8:5f:53:36:58:3f:c3:3a:52:2c:53:23:3a:
                    3c:50:ab:17:f4:82:d9:31:96:22:78:fe:8d:36:65:
                    b8:77:4e:09:08:c0:93:1e:8c:70:12:3e:84:02:3a:
                    ef:46:85:0f:7d:c0:11:c7:02:c1:48:cc:06:1f:4a:
                    35:72:70:80:29:dd:92:3a:d5:ef:d4:f0:a7:9d:22:
                    29:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:D1:9E:BA:02:DD:8E:DC:2E:C3:84:6B:0B:6C:E2:2A:8C:F9:80:27
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/8BD19EBA02DD8EDC2EC3846B0B6CE22A8CF98027.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.152.0/22
                  167.250.56.0/22
                  179.124.132.0/22
                IPv6:
                  2804:16cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61917

    Signature Algorithm: sha256WithRSAEncryption
         13:30:8b:9a:0d:48:cc:aa:cb:f7:1f:67:81:2e:e9:a8:21:60:
         fa:61:d5:81:50:82:8b:9c:46:0b:0c:95:96:6e:4c:dc:ac:ea:
         3f:51:e6:5c:75:fb:61:36:10:d8:f0:83:b8:61:3b:fc:31:6f:
         55:df:74:c7:be:a8:2d:37:47:1b:e7:ec:85:07:99:ea:dd:b8:
         15:31:68:2e:58:21:e7:4f:65:eb:fe:47:b8:d8:21:b7:c8:4e:
         c8:2b:f1:da:92:44:86:14:a4:77:e9:61:5c:b5:70:45:62:21:
         82:43:95:6a:2f:ae:53:b2:87:67:da:03:2e:5d:ec:50:c2:cb:
         cf:f4:22:f4:cb:bc:09:d5:64:09:db:d0:b6:3e:74:6c:12:87:
         5b:ad:b2:32:07:ec:36:83:95:ca:0e:60:2c:f7:79:9d:51:fc:
         e2:fa:09:be:94:62:f8:f8:bf:d5:6e:db:d3:a0:71:4b:7e:bd:
         c6:35:f6:6c:9a:4e:7f:e9:12:c7:8a:cd:9b:77:f0:a9:b9:87:
         02:67:e9:9b:3e:07:06:fa:fe:96:1e:07:08:69:f2:f8:bd:ea:
         ec:43:d7:18:1d:16:6a:c4:16:e5:a9:5c:61:44:c2:b3:c0:31:
         b5:f9:ce:53:92:9d:70:6a:4e:05:82:d0:5e:8a:16:3d:a9:6d:
         db:42:35:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org