Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8BDFC531CBB34B13539161393F5B006FA083108E.cer
File:                     8BDFC531CBB34B13539161393F5B006FA083108E.cer (raw, json)
Hash identifier:          3G9nEwXj4KVGxN5YJCgsqHaQjzM+t4e25g697bbTel4=
Subject key identifier:   8B:DF:C5:31:CB:B3:4B:13:53:91:61:39:3F:5B:00:6F:A0:83:10:8E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       318B3DE039DEBCDB9A11A5B443A908B6397DF150
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/8BDFC531CBB34B13539161393F5B006FA083108E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 19:15:13 +0000
Certificate not after:    Wed 18 Sep 2024 19:20:13 +0000
Subordinate resources:    AS: 268746
                          IP: 45.171.228.0/22
                          IP: 2804:5a10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8b:3d:e0:39:de:bc:db:9a:11:a5:b4:43:a9:08:b6:39:7d:f1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 19:15:13 2023 GMT
            Not After : Sep 18 19:20:13 2024 GMT
        Subject: CN=8BDFC531CBB34B13539161393F5B006FA083108E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:9d:6c:06:57:da:77:11:be:ab:6a:f9:7f:
                    3b:3a:1e:76:71:ba:57:c0:38:60:5e:88:86:31:7a:
                    eb:a8:7f:8f:b9:26:64:2d:ef:e1:22:92:58:b6:7b:
                    38:db:7a:83:6e:48:01:a1:d5:ca:31:c8:3b:d9:10:
                    73:50:b5:be:8d:41:db:97:e9:ee:9e:6b:43:db:8b:
                    7b:6c:ad:db:45:a5:85:4d:5f:77:3a:2f:a1:ca:00:
                    c9:48:08:45:53:1b:2a:62:c8:e0:4c:dc:97:ee:cf:
                    98:32:5b:b9:67:bb:8c:bd:05:9c:92:b8:69:6e:aa:
                    00:3a:ba:a8:83:77:0f:15:3c:dc:1d:5c:96:aa:1c:
                    e1:65:b5:f8:44:6a:30:50:f9:5b:07:ab:f7:3d:ee:
                    bb:21:0e:9e:ed:de:f3:d3:8d:0b:33:43:37:c2:bb:
                    1d:ae:33:9b:9c:71:bf:95:7e:00:83:0a:a7:68:a1:
                    6a:3e:0e:d4:7c:35:55:9f:2f:95:0e:fb:37:a6:ba:
                    16:b2:a9:74:10:8a:e7:4f:5b:9e:23:5e:5a:3c:10:
                    4a:c5:32:62:1b:9b:0f:61:48:e6:fc:d3:af:30:30:
                    57:3d:74:cf:e8:14:57:25:55:12:f4:38:b8:49:b9:
                    87:5c:6b:97:94:dd:ad:e6:b2:9b:76:c4:d9:fa:29:
                    c8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:DF:C5:31:CB:B3:4B:13:53:91:61:39:3F:5B:00:6F:A0:83:10:8E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/8BDFC531CBB34B13539161393F5B006FA083108E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.228.0/22
                IPv6:
                  2804:5a10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268746

    Signature Algorithm: sha256WithRSAEncryption
         21:8a:90:4b:85:b9:0b:f0:39:f8:a1:2d:01:9c:8d:cd:49:93:
         a0:c8:6f:3a:c1:e7:82:16:27:91:ae:06:34:09:29:75:1b:97:
         bb:fe:f3:61:22:56:e2:4e:92:1a:59:9d:c9:8d:f7:91:46:1d:
         c5:15:01:47:1d:d5:f0:1f:e3:84:27:31:c1:43:76:43:ed:26:
         67:13:40:e5:06:b7:df:dd:54:8d:19:5d:40:2a:40:c3:71:7d:
         bd:35:c1:35:e7:9a:35:ab:b1:d4:f9:10:11:5c:d7:9a:e1:ee:
         94:ec:0a:d6:d7:33:0b:b9:dc:2d:79:9f:65:15:e4:67:8c:ae:
         45:3a:57:97:7e:4d:78:69:d4:eb:5c:79:a6:95:67:87:f0:a4:
         36:da:e2:87:64:5a:63:98:e8:4c:20:57:8d:be:9b:96:b3:51:
         36:1c:dd:85:d0:c3:02:e4:85:6a:d3:5b:53:ec:0f:74:48:30:
         e4:1a:a0:6e:5b:8d:af:9d:66:f6:15:c2:8e:8e:d1:3e:91:46:
         a3:0d:30:2b:5b:dc:a4:5e:25:07:4e:50:82:16:9c:8d:07:d5:
         fa:45:30:37:c5:c0:a2:4d:17:c0:36:3f:9e:ba:4a:44:5b:05:
         f5:93:ad:8e:7b:27:b9:24:dd:b3:9f:2a:72:d6:51:fe:33:65:
         2a:62:d7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org