Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer
File:                     8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer (raw, json)
Hash identifier:          lA5Esn8jTgAlWEbF8LEYYKa2vh5EA7SKI0dZdw1ECHk=
Subject key identifier:   8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       050DC8DEF8BA1E4CBFC884572A5AD54A1CD60DC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Jan 2024 17:58:31 +0000
Certificate not after:    Thu 09 Jan 2025 18:03:31 +0000
Subordinate resources:    AS: 267575
                          IP: 45.70.160.0/22
                          IP: 167.249.160.0/22
                          IP: 177.74.104.0/22
                          IP: 2804:4384::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0d:c8:de:f8:ba:1e:4c:bf:c8:84:57:2a:5a:d5:4a:1c:d6:0d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 11 17:58:31 2024 GMT
            Not After : Jan  9 18:03:31 2025 GMT
        Subject: CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:dd:6b:df:45:0a:d6:9e:0c:96:93:21:05:09:
                    f8:22:b2:81:51:bf:80:21:d8:6a:76:5d:23:b0:a4:
                    fc:69:50:c1:a4:06:f5:89:86:57:75:da:48:c7:a1:
                    53:e8:48:92:4e:43:b8:2b:92:f0:b5:52:97:cd:ae:
                    17:ad:fb:6b:46:1a:6b:65:79:92:36:2b:ba:b9:aa:
                    1b:0b:78:b2:33:60:48:36:83:09:c6:8b:35:92:c0:
                    07:45:06:a4:18:1c:17:5d:f6:e6:6e:46:f1:25:01:
                    55:3e:23:09:da:8a:85:a9:8c:f3:31:a0:55:92:7a:
                    07:c4:ea:b2:96:33:d5:23:08:11:5c:82:d9:0a:7b:
                    6f:16:bb:71:79:e4:c7:b8:fe:1b:02:9e:3a:10:a6:
                    b2:c0:0f:01:27:e5:95:f5:5e:00:c0:c2:fe:31:19:
                    06:d4:ae:3a:e4:a7:02:8f:ee:45:d4:6a:ec:46:26:
                    15:b0:ba:e3:d8:35:21:93:4a:f7:1e:3f:18:ff:cf:
                    e8:9f:cd:b4:4c:09:09:90:79:70:25:b4:aa:cf:1c:
                    3b:59:e6:c2:3c:c1:07:78:28:95:c5:8c:56:f3:79:
                    53:8d:ab:b0:fb:62:75:44:cf:b0:8d:24:db:54:9f:
                    f2:40:e5:39:24:90:d7:cd:dc:b4:92:f0:fb:e7:9c:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.160.0/22
                  167.249.160.0/22
                  177.74.104.0/22
                IPv6:
                  2804:4384::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267575

    Signature Algorithm: sha256WithRSAEncryption
         3b:f8:4a:fd:c9:57:d5:a7:c5:2d:b9:bf:90:a4:f9:a9:05:e2:
         9c:f0:a7:aa:19:15:69:0d:04:ea:97:58:5e:24:2d:25:d8:17:
         ab:59:83:2a:41:cb:0a:a5:d9:1b:2a:ef:6b:6a:76:a4:9f:b0:
         f7:d5:65:a7:18:bc:55:8c:b5:50:d2:bf:40:65:5b:c7:aa:f3:
         31:c4:2a:7f:05:62:22:70:29:ed:f0:be:80:45:ee:06:6b:1b:
         c5:08:f4:e0:5b:a4:31:ce:ab:db:0f:fc:50:32:28:bf:cf:d0:
         48:7a:77:27:74:8f:7b:59:46:6e:31:b8:6a:3d:60:bb:42:1b:
         8d:fd:b0:dd:f6:1e:ba:c4:9d:f6:c4:aa:d6:92:8f:c5:a8:9c:
         68:6d:9f:f8:e5:ae:97:76:9b:47:c7:b4:57:3d:a4:0d:97:3e:
         72:f0:7c:29:c1:1d:9f:40:08:54:cd:60:5a:0f:e8:f1:e4:c3:
         83:50:14:3c:14:12:39:d0:2f:1b:af:e6:56:94:5d:77:c3:76:
         f1:9c:91:25:08:ca:bf:2e:a1:23:08:3a:b4:7e:30:4e:fe:41:
         98:cd:08:02:25:0b:d5:b4:1a:a5:b4:01:91:74:c8:52:b7:fd:
         f0:a3:b9:a4:ee:c1:25:cb:1a:64:74:47:4d:f3:08:c6:11:ba:
         38:34:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org