Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8BE97E0C5EC896C2EFC300814387EF242B57439E.cer
File:                     8BE97E0C5EC896C2EFC300814387EF242B57439E.cer (raw, json)
Hash identifier:          EMK06fq5eXt52rFWLPTx73SYDl77VkyaP14hvYXKgz0=
Subject key identifier:   8B:E9:7E:0C:5E:C8:96:C2:EF:C3:00:81:43:87:EF:24:2B:57:43:9E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67E202255C60F119E8B036C3300B94D674B288DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/8BE97E0C5EC896C2EFC300814387EF242B57439E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Oct 2023 17:29:23 +0000
Certificate not after:    Wed 09 Oct 2024 17:34:23 +0000
Subordinate resources:    AS: 266483
                          IP: 170.83.156.0/22
                          IP: 2804:3884::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e2:02:25:5c:60:f1:19:e8:b0:36:c3:30:0b:94:d6:74:b2:88:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 11 17:29:23 2023 GMT
            Not After : Oct  9 17:34:23 2024 GMT
        Subject: CN=8BE97E0C5EC896C2EFC300814387EF242B57439E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:52:91:1d:31:76:1d:25:ec:e0:35:7a:63:59:
                    4f:45:76:44:63:d9:5e:1b:c3:b0:c1:c0:1e:05:08:
                    57:55:fb:a5:39:e4:d4:f6:5e:7f:fb:6d:35:eb:0a:
                    a0:1f:25:af:0e:3e:fa:77:e5:3e:61:33:c5:03:bd:
                    b2:2d:6e:23:9c:43:47:79:a7:82:35:f6:34:94:3a:
                    e9:ad:ac:f6:51:8e:36:6e:88:4a:cb:29:ed:06:26:
                    94:ca:ef:b5:51:ba:29:c2:ec:01:50:21:44:b2:3a:
                    2d:f1:6f:ea:f8:23:23:2c:50:c7:de:64:96:c7:74:
                    d8:6f:7f:e9:d5:9e:0f:bc:8b:02:84:5d:81:7c:53:
                    1d:30:79:a6:25:c9:27:8e:79:b6:ee:96:42:71:e8:
                    ed:86:b9:93:65:53:49:73:1d:5b:b8:b0:a5:6c:43:
                    4f:b8:76:53:07:19:07:89:09:d3:5b:78:cd:d0:93:
                    a3:8f:6d:ca:ba:55:a0:69:7d:0f:0c:16:b1:ce:dc:
                    d5:d8:c8:fd:1e:dc:28:3b:67:31:32:e8:12:9c:18:
                    c1:c7:a2:fb:e7:f0:01:e1:cc:e1:76:9f:df:f9:ca:
                    6d:5d:5b:df:b2:8e:b6:d8:ee:0d:da:b4:ea:57:e8:
                    c6:fc:a9:a5:43:1a:1d:7f:75:f3:c3:57:ce:1f:e9:
                    a6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:E9:7E:0C:5E:C8:96:C2:EF:C3:00:81:43:87:EF:24:2B:57:43:9E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/8BE97E0C5EC896C2EFC300814387EF242B57439E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.156.0/22
                IPv6:
                  2804:3884::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266483

    Signature Algorithm: sha256WithRSAEncryption
         4b:38:b7:75:ab:05:f1:48:ea:e2:f1:2a:34:c2:e7:69:a4:01:
         3d:04:37:ec:b7:2b:ca:48:1c:57:2d:a4:29:9f:be:90:74:fa:
         5a:fc:7e:08:be:38:88:c3:d8:c9:d2:d9:c1:a9:ca:da:3f:f6:
         aa:91:9c:e2:2f:1c:2b:16:0b:d5:cd:45:7f:af:c8:f0:3a:85:
         ab:d1:31:89:9c:1f:a3:d2:14:20:1d:37:55:25:fa:34:75:5d:
         bf:9c:f8:b3:8a:4b:5c:65:0e:25:7e:34:83:08:1c:bf:58:ca:
         3b:e9:b0:5a:df:6b:99:03:3f:46:fa:d2:20:6c:db:b3:e7:b9:
         9d:be:ec:e6:94:bd:1b:a1:eb:b9:ef:ef:91:6f:d3:ca:c4:a9:
         43:16:ab:74:a9:e8:a9:82:f5:a3:6d:7e:82:78:de:b6:27:9a:
         70:7e:2b:06:fc:9e:65:05:a8:7e:1e:ae:a2:f1:cc:55:c6:45:
         98:85:85:f5:01:8b:5d:cf:be:dd:ce:4e:4b:04:d1:c3:1b:33:
         f2:35:f3:a3:c4:44:0f:fe:52:e3:b5:33:28:91:3b:96:57:7a:
         87:68:69:fd:05:b6:43:21:76:d5:06:a7:94:00:a9:0f:d4:6e:
         2c:14:53:ce:21:6a:84:55:b0:b3:8f:9f:a5:3c:17:4f:4d:a8:
         a8:4e:d4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org