Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C04B2089B4DF8DD29B0A54059558960AEE66613.cer
File:                     8C04B2089B4DF8DD29B0A54059558960AEE66613.cer (raw, json)
Hash identifier:          H8D/8cm3E9RtDKe0AwM4WrSTp/ReQI/bZ6iiCkvwmoE=
Subject key identifier:   8C:04:B2:08:9B:4D:F8:DD:29:B0:A5:40:59:55:89:60:AE:E6:66:13
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A283B0602B9F60A8DF2F9638BFA19E17AF60016
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0/8C04B2089B4DF8DD29B0A54059558960AEE66613.mft
caRepository:             rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 May 2023 13:19:49 +0000
Certificate not after:    Mon 06 May 2024 13:24:49 +0000
Subordinate resources:    AS: 271101
                          IP: 179.48.216.0/22
                          IP: 2804:7648::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:28:3b:06:02:b9:f6:0a:8d:f2:f9:63:8b:fa:19:e1:7a:f6:00:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  8 13:19:49 2023 GMT
            Not After : May  6 13:24:49 2024 GMT
        Subject: CN=8C04B2089B4DF8DD29B0A54059558960AEE66613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:87:cc:1e:11:8e:1c:80:9c:ca:17:de:82:
                    0c:40:7a:b5:ce:61:a2:0b:e0:b4:40:b7:8b:75:4e:
                    33:96:29:7b:c3:fa:a5:82:1c:12:3f:b2:aa:ad:e6:
                    ce:f6:5c:e0:c4:32:59:07:9e:07:f8:55:7e:f1:d9:
                    8b:03:08:24:be:59:64:55:a5:5a:32:78:b3:39:e6:
                    55:ac:31:2f:55:6a:ed:d5:e0:95:b2:f6:10:c6:67:
                    b3:a1:79:df:40:41:75:2e:4f:32:2f:3e:36:cb:c4:
                    e8:c6:da:37:21:63:7a:de:08:bd:88:8a:ca:11:26:
                    a0:32:df:73:c5:24:40:dc:a0:41:35:7e:fe:79:52:
                    43:5e:e9:f6:1f:a4:3d:7b:22:e8:03:eb:54:ed:fb:
                    9c:b4:bb:0f:94:bc:08:27:f5:58:8e:e4:18:06:92:
                    4f:eb:0a:84:5a:83:58:1b:04:3a:63:52:f2:25:d9:
                    5d:73:39:8d:fc:2f:48:17:74:7c:33:ac:fe:2f:48:
                    0c:64:8b:74:06:67:d1:6a:37:ca:a6:cb:f6:65:4b:
                    7e:17:d9:e8:b5:75:87:36:e2:18:2b:bc:0b:4a:ad:
                    ee:c1:fc:b6:5b:58:e1:5f:44:33:6f:d5:9f:0d:5c:
                    ba:0e:dd:6e:d5:a5:cb:96:50:af:b5:29:ee:3d:36:
                    f7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:04:B2:08:9B:4D:F8:DD:29:B0:A5:40:59:55:89:60:AE:E6:66:13
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0/8C04B2089B4DF8DD29B0A54059558960AEE66613.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.216.0/22
                IPv6:
                  2804:7648::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271101

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:84:49:47:81:0b:7c:07:55:52:62:49:cc:c4:78:dd:8b:
         fa:76:55:fe:3e:6a:9c:95:f6:9e:ed:7d:b3:44:d7:e5:55:4d:
         60:35:5a:83:cc:41:57:f4:8e:39:fb:ed:d4:0c:99:cb:51:d1:
         fa:b5:e6:88:54:33:de:01:93:fd:06:64:80:4a:3a:09:ee:81:
         da:21:8b:f3:f5:c2:fd:79:d8:54:0b:94:92:f6:b3:4b:68:82:
         72:13:d1:ae:19:86:7e:f3:f9:51:4f:72:ad:3b:b7:8d:53:c7:
         d0:ee:df:80:bc:63:9a:7a:81:82:16:83:cd:c5:ba:c7:f6:07:
         13:fe:e0:1a:0f:f7:40:ce:9e:51:84:19:3f:39:67:e3:08:75:
         95:c5:90:56:18:a0:39:39:08:bd:45:77:9a:a7:93:05:86:47:
         b8:f3:d9:4e:17:da:de:53:bf:bd:05:47:9e:af:af:dd:68:20:
         be:1b:c4:a1:95:09:00:ce:0d:42:a9:5d:a2:eb:52:8f:46:a5:
         f2:4e:4a:5b:57:28:ac:21:4d:76:da:b7:c9:26:45:d3:3f:10:
         36:f2:fb:00:12:82:5c:a2:66:3b:f2:69:0b:3f:ce:b6:10:5c:
         04:7e:6f:08:dc:3b:58:fc:e4:08:2d:1a:56:68:ff:c8:1a:d0:
         c8:2c:7f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org