Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8BDC3395A20790E2B58712C45CC172352B05BB02.cer
File:                     8BDC3395A20790E2B58712C45CC172352B05BB02.cer (raw, json)
Hash identifier:          W/aTO5FmBDxSztsIPR1SHpBMk0sqYY1IbEkBm53tXAs=
Subject key identifier:   8B:DC:33:95:A2:07:90:E2:B5:87:12:C4:5C:C1:72:35:2B:05:BB:02
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       491B6B69A6862F2DE41B36ABA084306CF6656CD7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/8BDC3395A20790E2B58712C45CC172352B05BB02.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Oct 2023 12:23:02 +0000
Certificate not after:    Fri 11 Oct 2024 12:28:02 +0000
Subordinate resources:    AS: 270742
                          IP: 177.221.148.0/22
                          IP: 2804:70b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1b:6b:69:a6:86:2f:2d:e4:1b:36:ab:a0:84:30:6c:f6:65:6c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 12:23:02 2023 GMT
            Not After : Oct 11 12:28:02 2024 GMT
        Subject: CN=8BDC3395A20790E2B58712C45CC172352B05BB02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4a:42:4b:4f:ca:b1:9f:8f:5b:cd:18:45:1d:
                    ce:f4:17:65:df:fa:c6:a3:56:d6:33:d3:7c:53:a2:
                    b6:dc:35:17:cd:a6:e0:c7:00:95:51:63:e7:bb:7b:
                    dc:b2:1e:11:fe:e2:7e:c9:1c:16:99:c4:34:c8:6b:
                    5b:9c:0d:cd:6d:6e:12:21:8a:7f:69:03:ac:95:b2:
                    7c:c8:eb:13:d0:01:98:c0:2e:39:7e:16:69:66:ec:
                    21:1e:d9:e7:ec:df:14:3f:4a:25:61:7e:54:d8:a7:
                    15:24:ee:5e:b4:b4:31:37:7f:20:d3:57:fa:d2:3f:
                    c9:02:30:cd:65:e8:02:0c:0d:2f:df:14:fb:e6:f6:
                    71:ca:dd:9c:2e:3d:1b:d7:5b:0d:23:f5:14:b7:7c:
                    2a:aa:44:01:ba:a4:11:55:c9:cb:4b:30:c7:a2:dd:
                    5b:c6:e6:6d:1a:0d:e2:af:94:26:fe:1f:c8:e2:c6:
                    0d:b2:f4:a3:8d:78:1f:b9:28:8e:f5:be:ae:b9:38:
                    28:83:c8:c4:56:35:ec:e0:19:c1:70:5c:44:41:e0:
                    99:7f:5a:26:2e:df:57:a5:6e:63:f7:6b:b8:df:56:
                    80:94:fe:c2:56:3d:bc:1d:36:00:8b:9d:42:e2:cc:
                    fa:cd:e7:61:00:f8:bd:da:f0:44:45:a1:8d:e3:c1:
                    4c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:DC:33:95:A2:07:90:E2:B5:87:12:C4:5C:C1:72:35:2B:05:BB:02
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/8BDC3395A20790E2B58712C45CC172352B05BB02.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.148.0/22
                IPv6:
                  2804:70b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270742

    Signature Algorithm: sha256WithRSAEncryption
         00:6e:3e:6b:a5:89:94:0a:b8:49:28:18:a4:9a:fe:55:2b:22:
         07:af:61:3c:64:9a:90:a9:c1:dd:17:ae:36:e6:cd:45:29:f5:
         c4:f8:c8:99:50:36:e6:cc:1b:7d:85:08:fd:54:67:23:1a:7f:
         63:72:40:72:ce:a8:86:4c:6d:a4:b0:aa:af:43:78:bd:69:32:
         04:cb:bd:06:56:81:49:6d:27:8e:a8:38:e8:45:54:c1:02:fc:
         26:f0:d7:10:9d:86:e1:a9:4b:c3:53:a5:8a:fb:69:b6:71:10:
         fe:58:d9:7f:28:d4:a6:54:98:58:fd:38:ef:99:d1:bb:a7:d5:
         f3:04:28:55:59:59:55:7f:5e:29:38:77:05:f0:e3:e0:17:c2:
         35:da:39:cc:f6:a3:2a:ee:21:4f:ad:8c:8f:45:a9:4a:59:4b:
         4c:45:e2:3a:fc:06:e3:53:91:42:51:d5:ae:7f:68:a4:5c:93:
         99:36:1b:ae:a7:2b:8b:ad:cc:f8:10:dd:37:bf:d8:dc:7b:ce:
         e7:48:83:d0:c6:fd:a5:2b:b3:1e:cf:97:13:09:82:bf:e1:9e:
         30:05:f7:7c:cc:77:7b:43:1b:e6:76:29:45:7d:08:fb:ea:6a:
         ec:92:72:07:ee:ee:7f:0f:47:e3:d5:26:66:2e:55:38:fb:d9:
         35:cf:1b:9c
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUSRtraaaGLy3kGzaroIQwbPZlbNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTMxMjIzMDJaFw0yNDEwMTExMjI4MDJaMDMxMTAvBgNV
BAMTKDhCREMzMzk1QTIwNzkwRTJCNTg3MTJDNDVDQzE3MjM1MkIwNUJCMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNSkJLT8qxn49bzRhFHc70F2Xf
+sajVtYz03xTorbcNRfNpuDHAJVRY+e7e9yyHhH+4n7JHBaZxDTIa1ucDc1tbhIh
in9pA6yVsnzI6xPQAZjALjl+Fmlm7CEe2efs3xQ/SiVhflTYpxUk7l60tDE3fyDT
V/rSP8kCMM1l6AIMDS/fFPvm9nHK3ZwuPRvXWw0j9RS3fCqqRAG6pBFVyctLMMei
3VvG5m0aDeKvlCb+H8jixg2y9KONeB+5KI71vq65OCiDyMRWNezgGcFwXERB4Jl/
WiYu31elbmP3a7jfVoCU/sJWPbwdNgCLnULizPrN52EA+L3a8ERFoY3jwUxvAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSL3DOVogeQ4rWH
EsRcwXI1KwW7AjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83WmtxR05OM2FRaTJ0U2o5aTJ6SlZYdGQ1NTZRS3N3Rldh
Y1dUb1BmZ2taay8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN1prcUdOTjNhUWkydFNqOWkyekpWWHRkNTU2UUtzd0ZX
YWNXVG9QZmdrWmsvMC84QkRDMzM5NUEyMDc5MEUyQjU4NzEyQzQ1Q0MxNzIzNTJC
MDVCQjAyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKx3ZQwDQQCAAIwBwMF
ACgEcLAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCGWMA0GCSqGSIb3DQEBCwUA
A4IBAQAAbj5rpYmUCrhJKBikmv5VKyIHr2E8ZJqQqcHdF6425s1FKfXE+MiZUDbm
zBt9hQj9VGcjGn9jckByzqiGTG2ksKqvQ3i9aTIEy70GVoFJbSeOqDjoRVTBAvwm
8NcQnYbhqUvDU6WK+2m2cRD+WNl/KNSmVJhY/TjvmdG7p9XzBChVWVlVf14pOHcF
8OPgF8I12jnM9qMq7iFPrYyPRalKWUtMReI6/AbjU5FCUdWuf2ikXJOZNhuupyuL
rcz4EN03v9jce87nSIPQxv2lK7Mez5cTCYK/4Z4wBfd8zHd7QxvmdilFfQj76mrs
knIH7u5/D0fj1SZmLlU4+9k1zxuc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org