Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer
File:                     8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer (raw, json)
Hash identifier:          JO7rWbL4mGrj5ES6W52yhioY3UHAr2llrsttSlOnQYw=
Subject key identifier:   8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       358BF8B6445DD316BB69817C01C887EE724D22FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 24 Mar 2024 16:52:59 +0000
Certificate not after:    Sun 23 Mar 2025 16:57:59 +0000
Subordinate resources:    AS: 263411
                          IP: 179.97.24.0/21
                          IP: 2804:15cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8b:f8:b6:44:5d:d3:16:bb:69:81:7c:01:c8:87:ee:72:4d:22:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 24 16:52:59 2024 GMT
            Not After : Mar 23 16:57:59 2025 GMT
        Subject: CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8f:38:53:fb:13:27:0c:41:21:90:2c:88:ea:
                    9d:3e:92:1c:d1:01:5d:8b:e1:0a:3c:db:ff:b7:45:
                    71:0d:b5:8a:66:46:a0:06:81:80:5b:cc:bb:a1:e9:
                    b6:31:97:99:91:46:be:8c:c2:99:d6:30:ca:86:1e:
                    ee:ce:fc:4a:1d:0e:b2:fd:ab:ed:c2:e3:29:3e:b7:
                    dd:77:de:94:39:18:3b:dc:e6:de:9f:f6:e2:db:bd:
                    e6:71:ea:79:5a:85:5d:3b:42:86:d7:79:01:c0:64:
                    c7:22:02:e5:63:08:9e:00:2b:55:71:e3:df:b7:5e:
                    84:c8:28:99:b2:c8:33:3f:12:ac:03:48:b7:1c:52:
                    65:83:2b:91:bd:27:90:5e:da:b7:55:e8:16:8e:c4:
                    fb:f9:df:87:85:b3:09:fb:b1:03:c0:19:70:93:96:
                    44:e5:3d:3e:46:61:6b:44:63:c4:21:03:f4:32:8e:
                    d2:0b:fa:27:37:e8:a9:12:fb:3c:dc:e1:2f:13:12:
                    fb:58:56:2f:ae:35:07:58:9b:5d:9f:bf:2c:27:87:
                    df:f2:fa:7b:09:02:8a:5f:31:3b:75:cc:2f:b8:e3:
                    12:05:70:a1:1e:4d:6b:ce:6d:a1:27:66:78:56:e6:
                    9d:5d:b3:a6:2f:97:c0:87:d0:f8:73:0d:5c:c6:f4:
                    92:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.24.0/21
                IPv6:
                  2804:15cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263411

    Signature Algorithm: sha256WithRSAEncryption
         2b:13:47:f5:66:17:32:86:cf:37:59:9b:e4:ec:53:60:60:e5:
         d3:f2:c0:bb:fa:07:b1:9d:d1:2f:9e:01:84:b7:45:12:2d:02:
         a0:87:0c:a3:bc:33:0b:df:86:2b:66:b1:53:d2:75:c8:dd:20:
         d0:b5:7e:9c:f4:ba:45:14:c2:21:91:51:0b:63:84:d7:6b:81:
         e0:fa:41:4e:4b:82:97:c9:c3:23:de:c0:99:4d:dc:ee:54:e0:
         fe:87:1d:bc:84:4e:92:d1:a0:7b:44:cd:46:dc:ad:87:38:cb:
         fd:57:a6:6e:8e:40:93:3a:11:2a:4c:0d:36:63:e7:de:f2:03:
         31:d8:9f:e0:21:a0:50:23:8a:ca:03:d3:a2:58:20:bd:de:a6:
         80:25:b8:b1:68:60:e2:00:e2:95:4c:b7:9a:17:cb:cc:6b:79:
         ce:15:cc:7e:27:d9:8c:b5:0b:9e:63:59:27:10:52:2f:29:94:
         10:4e:ea:39:3d:e9:ac:fe:91:1a:51:bd:a3:fe:50:68:64:af:
         c9:d1:d5:44:1f:a1:89:ad:90:a8:1d:b1:31:f3:25:15:2b:eb:
         c6:67:ab:be:64:6e:ec:b5:a4:d0:05:4e:bf:7f:47:b8:bb:78:
         a8:7b:bf:18:e4:1c:62:53:ec:04:69:3f:5b:45:e9:56:7c:a7:
         e1:2b:2c:fe
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUNYv4tkRd0xa7aYF8AciH7nJNIv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjQxNjUyNTlaFw0yNTAzMjMxNjU3NTlaMDMxMTAvBgNV
BAMTKDhCRDI1NzBCNUJFRDU1N0M0MTlCRUJDRUE0RkI5NUFEODM2OEY3RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVjzhT+xMnDEEhkCyI6p0+khzR
AV2L4Qo82/+3RXENtYpmRqAGgYBbzLuh6bYxl5mRRr6MwpnWMMqGHu7O/EodDrL9
q+3C4yk+t9133pQ5GDvc5t6f9uLbveZx6nlahV07QobXeQHAZMciAuVjCJ4AK1Vx
49+3XoTIKJmyyDM/EqwDSLccUmWDK5G9J5Be2rdV6BaOxPv534eFswn7sQPAGXCT
lkTlPT5GYWtEY8QhA/QyjtIL+ic36KkS+zzc4S8TEvtYVi+uNQdYm12fvywnh9/y
+nsJAopfMTt1zC+44xIFcKEeTWvObaEnZnhW5p1ds6Yvl8CH0PhzDVzG9JJNAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSL0lcLW+1VfEGb
686k+5Wtg2j3+TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9XcWcydENyTk1TQlB5N2RvRnQxQm5KNlUya0N0d0RLTWV5
ek01S0JMSHdrLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9XcWcydENyTk1TQlB5N2RvRnQxQm5KNlUya0N0d0RLTWV5
ek01S0JMSHdrLzAvOEJEMjU3MEI1QkVENTU3QzQxOUJFQkNFQTRGQjk1QUQ4MzY4
RjdGOS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDs2EYMA0EAgACMAcDBQAo
BBXMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQE8zANBgkqhkiG9w0BAQsFAAOC
AQEAKxNH9WYXMobPN1mb5OxTYGDl0/LAu/oHsZ3RL54BhLdFEi0CoIcMo7wzC9+G
K2axU9J1yN0g0LV+nPS6RRTCIZFRC2OE12uB4PpBTkuCl8nDI97AmU3c7lTg/ocd
vIROktGge0TNRtythzjL/Vembo5AkzoRKkwNNmPn3vIDMdif4CGgUCOKygPTolgg
vd6mgCW4sWhg4gDilUy3mhfLzGt5zhXMfifZjLULnmNZJxBSLymUEE7qOT3prP6R
GlG9o/5QaGSvydHVRB+hia2QqB2xMfMlFSvrxmervmRu7LWk0AVOv39HuLt4qHu/
GOQcYlPsBGk/W0XpVnyn4Sss/g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org