Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C289C81E0A7D427A417A67438FE25FEE8C8B797.cer
File:                     8C289C81E0A7D427A417A67438FE25FEE8C8B797.cer (raw, json)
Hash identifier:          ejcvRIQNj0uMNP/zwK0RKBa6e8COSf2nNq2hs8SVZ2o=
Subject key identifier:   8C:28:9C:81:E0:A7:D4:27:A4:17:A6:74:38:FE:25:FE:E8:C8:B7:97
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6FE2494B42DED2B7AA9779E51F8FC6F47C5A48A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/8C289C81E0A7D427A417A67438FE25FEE8C8B797.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 06 Aug 2022 16:25:45 +0000
Certificate not after:    Sat 05 Aug 2023 16:30:45 +0000
Subordinate resources:    AS: 262656
                          IP: 138.121.208.0/22
                          IP: 2804:25d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e2:49:4b:42:de:d2:b7:aa:97:79:e5:1f:8f:c6:f4:7c:5a:48:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  6 16:25:45 2022 GMT
            Not After : Aug  5 16:30:45 2023 GMT
        Subject: CN=8C289C81E0A7D427A417A67438FE25FEE8C8B797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:37:1f:5d:6e:63:88:8a:5d:1a:52:ae:72:
                    77:ed:1b:62:83:2d:e2:70:5f:4b:48:8f:e3:cd:a1:
                    f8:4e:0e:ed:6e:3e:7a:ae:7d:f1:31:a5:a5:8e:66:
                    a4:01:9e:f9:08:60:72:3b:97:d1:52:0e:5f:fc:6a:
                    bd:de:fa:8c:00:b0:98:c8:71:09:27:2d:72:1c:9d:
                    77:4c:f1:f8:15:81:3f:46:34:d3:f5:73:e1:9c:07:
                    0b:65:10:94:dc:67:1d:1e:17:6b:ab:5c:53:9d:95:
                    94:cd:5d:3a:18:35:e8:18:e9:78:43:48:ab:2e:14:
                    3d:ad:0d:2d:e9:36:20:2c:c2:3c:7b:18:55:b5:56:
                    53:f8:09:16:18:1e:b8:8a:d3:82:28:b0:4f:12:e9:
                    d9:42:7d:8b:94:81:92:55:ff:73:b9:7b:c2:33:4c:
                    fe:b6:7a:55:3b:d5:c8:78:e6:59:a0:a1:e4:e8:5a:
                    81:88:f2:4e:49:cd:57:79:81:8b:07:1a:eb:25:89:
                    25:9c:34:76:db:c1:e6:77:b1:58:40:03:35:e0:16:
                    a8:38:59:e7:0d:fb:9e:1a:9b:8d:e2:a3:35:cd:a7:
                    29:1d:21:ee:bd:fb:03:f2:c8:28:9e:92:52:eb:32:
                    ee:90:a1:89:6a:f1:3f:b0:9a:35:6e:df:b9:a0:d3:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:28:9C:81:E0:A7:D4:27:A4:17:A6:74:38:FE:25:FE:E8:C8:B7:97
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/8C289C81E0A7D427A417A67438FE25FEE8C8B797.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.208.0/22
                IPv6:
                  2804:25d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262656

    Signature Algorithm: sha256WithRSAEncryption
         65:29:eb:02:8a:fa:5c:4b:23:86:2d:45:68:06:f2:69:04:93:
         e9:60:74:cd:b9:b1:97:6f:3c:5e:87:98:e6:50:26:9b:4c:0c:
         b1:e7:10:9b:3a:75:0c:c0:22:e6:41:62:2d:59:15:7e:82:4c:
         69:ae:b7:2d:dd:ab:af:59:ee:1c:46:69:ec:8e:fa:f8:69:0d:
         de:7d:c2:a4:fb:5f:35:8b:26:d7:1f:c4:97:36:8e:5d:37:2e:
         29:67:55:1f:14:a3:22:2c:a6:2c:e3:90:cc:02:62:c0:1a:b4:
         90:f7:d4:4b:32:a4:4b:d5:6c:f6:ca:4b:ce:2e:b3:89:a2:56:
         ea:8d:3d:4b:2b:7b:ab:92:83:37:c3:c2:f1:5f:c1:ca:8a:1a:
         81:17:b5:c4:d9:39:62:b3:a8:cc:ca:e0:f5:59:1f:2e:dc:7f:
         d3:a0:cb:81:12:49:88:51:68:ce:86:75:c2:94:ed:8a:a4:68:
         3d:b9:a8:56:98:1f:b1:65:46:b0:47:25:77:60:73:fe:08:a4:
         d1:68:6c:20:dd:41:5c:a9:99:bb:c3:8c:b3:95:b4:28:93:06:
         23:c4:ed:80:c6:11:4e:6e:43:43:e9:80:54:8b:b0:9c:34:2f:
         b1:4c:e1:87:3b:b9:b4:70:3c:2c:a1:7d:e9:8c:d0:2a:85:68:
         2d:19:1f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org