Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer
File:                     8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer (raw, json)
Hash identifier:          NPANCQd0cVCPxCYG7s5ka10nPgt7JMYrGW7VF6WK7y0=
Subject key identifier:   8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       032243DE5774049429B0A9EFDDF65F12E22C1CD5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Nov 2023 11:35:09 +0000
Certificate not after:    Wed 27 Nov 2024 11:40:09 +0000
Subordinate resources:    AS: 264527
                          IP: 138.0.4.0/22
                          IP: 138.186.236.0/22
                          IP: 2804:2104::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:22:43:de:57:74:04:94:29:b0:a9:ef:dd:f6:5f:12:e2:2c:1c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 11:35:09 2023 GMT
            Not After : Nov 27 11:40:09 2024 GMT
        Subject: CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:49:e8:41:42:38:52:40:b1:b8:b5:5d:12:
                    1e:e8:51:57:98:b4:f8:14:be:f9:22:f8:39:ff:f7:
                    7b:98:05:6e:3d:1d:07:49:47:14:62:dc:c2:cb:ff:
                    8b:74:a9:9b:0a:3c:b1:bf:5c:c0:87:af:b1:c4:a5:
                    4f:b7:9e:01:5c:8a:af:37:8c:40:93:c3:3c:e8:0f:
                    69:8e:da:2d:4c:4e:97:18:9a:ec:b4:9b:e4:c2:ef:
                    86:77:44:59:3f:15:4a:46:22:6f:37:0a:19:58:92:
                    ad:49:a3:95:8c:5a:05:9c:0e:9b:46:26:bc:cd:13:
                    0e:d9:b2:85:8e:84:5c:ab:62:8a:16:60:4f:5d:e1:
                    56:12:74:a4:ab:b7:d6:19:54:28:8f:66:6e:5a:8d:
                    9b:98:76:a6:f2:5d:2d:a5:75:3b:73:95:a7:35:22:
                    dd:cc:35:91:88:45:bf:09:17:b7:f3:d8:c8:65:aa:
                    c3:35:cb:c4:76:cc:e5:77:d9:b6:7c:73:1a:6f:f7:
                    d0:41:97:d0:e0:43:b3:2e:2e:17:ec:ed:ae:1f:cf:
                    0e:b6:d2:d1:c7:e9:a3:45:61:47:65:02:94:e9:fc:
                    68:e4:99:69:0f:9a:d7:15:71:0c:bd:98:f9:8f:de:
                    26:f7:2f:f3:75:17:32:ed:0a:ef:37:d6:24:e6:53:
                    3b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.4.0/22
                  138.186.236.0/22
                IPv6:
                  2804:2104::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264527

    Signature Algorithm: sha256WithRSAEncryption
         12:89:a7:5d:76:e4:62:44:70:82:2b:60:8b:a7:d0:3d:fb:e9:
         92:29:10:89:d0:6c:0f:af:46:1c:00:a7:d5:00:a2:2d:bf:b0:
         e0:84:a7:8b:7f:90:79:49:58:b7:a4:73:f0:3c:50:fa:e9:90:
         1e:50:96:6c:af:27:67:31:72:c9:c6:bb:22:86:a8:9a:96:66:
         aa:37:dc:4d:ad:fc:d9:dc:8a:ac:04:8d:f5:8a:c9:b6:9b:fb:
         f9:31:fb:1d:12:95:e4:5e:48:44:44:12:b0:31:ba:ec:fe:bd:
         2b:6c:15:3c:09:f7:ac:e7:a3:f1:65:8c:bf:e4:d7:45:48:1c:
         88:2f:c9:7d:a8:9c:5f:29:de:0c:db:82:1c:3e:54:3b:fd:b7:
         10:99:23:b3:dd:ca:dc:c2:4d:30:12:7f:c3:d4:55:8e:08:4a:
         09:c9:96:08:90:60:de:99:0e:be:f9:cf:21:bc:bd:70:91:73:
         38:29:75:df:d6:19:5a:0d:28:71:f2:b1:86:f3:fc:eb:70:57:
         76:8b:67:d5:66:2c:52:65:9b:c6:7d:88:d6:e1:c6:ec:1f:e0:
         61:0f:0b:c9:c5:77:53:76:87:56:b0:9d:10:0b:44:d3:67:1e:
         a6:51:ff:d2:11:70:11:f3:3d:fe:a1:6f:e9:6a:dc:19:8f:5b:
         5c:a0:b0:cb
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUAyJD3ld0BJQpsKnv3fZfEuIsHNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjkxMTM1MDlaFw0yNDExMjcxMTQwMDlaMDMxMTAvBgNV
BAMTKDhDMDBGMzFCQzQ1Njg3RUY2QkE4MkI3QzBCNzlFRjQyMjI0OEY2MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMknoQUI4UkCxuLVdEh7oUVeY
tPgUvvki+Dn/93uYBW49HQdJRxRi3MLL/4t0qZsKPLG/XMCHr7HEpU+3ngFciq83
jECTwzzoD2mO2i1MTpcYmuy0m+TC74Z3RFk/FUpGIm83ChlYkq1Jo5WMWgWcDptG
JrzNEw7ZsoWOhFyrYooWYE9d4VYSdKSrt9YZVCiPZm5ajZuYdqbyXS2ldTtzlac1
It3MNZGIRb8JF7fz2MhlqsM1y8R2zOV32bZ8cxpv99BBl9DgQ7MuLhfs7a4fzw62
0tHH6aNFYUdlApTp/GjkmWkPmtcVcQy9mPmP3ib3L/N1FzLtCu831iTmUzvzAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMAPMbxFaH72uo
K3wLee9CIkj2FjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BdWRyN29rM0QxYXBCQ1RMSnA0U0tja0NTQUpOTUFxY2RM
S3pHWUhQZk5GeS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQXVkcjdvazNEMWFwQkNUTEpwNFNLY2tDU0FKTk1BcWNk
TEt6R1lIUGZORnkvMC84QzAwRjMxQkM0NTY4N0VGNkJBODJCN0MwQjc5RUY0MjIy
NDhGNjE2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKKAAQDBAKKuuwwDQQC
AAIwBwMFACgEIQQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAlPMA0GCSqGSIb3
DQEBCwUAA4IBAQASiaddduRiRHCCK2CLp9A9++mSKRCJ0GwPr0YcAKfVAKItv7Dg
hKeLf5B5SVi3pHPwPFD66ZAeUJZsrydnMXLJxrsihqialmaqN9xNrfzZ3IqsBI31
ism2m/v5MfsdEpXkXkhERBKwMbrs/r0rbBU8Cfes56PxZYy/5NdFSByIL8l9qJxf
Kd4M24IcPlQ7/bcQmSOz3crcwk0wEn/D1FWOCEoJyZYIkGDemQ6++c8hvL1wkXM4
KXXf1hlaDShx8rGG8/zrcFd2i2fVZixSZZvGfYjW4cbsH+BhDwvJxXdTdodWsJ0Q
C0TTZx6mUf/SEXAR8z3+oW/patwZj1tcoLDL
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org