Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.cer
File:                     8C2C77205EE6970E9E8839D552B00BD6F1128E95.cer (raw, json)
Hash identifier:          Fywd2Kx7VwiOoI5Mug7rCF6L3r13hAGCE4zYOPWWO/c=
Subject key identifier:   8C:2C:77:20:5E:E6:97:0E:9E:88:39:D5:52:B0:0B:D6:F1:12:8E:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       62DC6797E0FBD1A5EDC1ECFB115E0924234485CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 20:36:26 +0000
Certificate not after:    Mon 10 Mar 2025 20:41:26 +0000
Subordinate resources:    AS: 263924
                          AS: 264491
                          IP: 131.255.176.0/22
                          IP: 138.219.52.0/22
                          IP: 168.232.172.0/22
                          IP: 170.247.252.0/22
                          IP: 2804:2074::/32
                          IP: 2804:27d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:dc:67:97:e0:fb:d1:a5:ed:c1:ec:fb:11:5e:09:24:23:44:85:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 20:36:26 2024 GMT
            Not After : Mar 10 20:41:26 2025 GMT
        Subject: CN=8C2C77205EE6970E9E8839D552B00BD6F1128E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e9:e3:3f:01:b1:4c:e5:c4:6f:eb:d7:61:b1:
                    a1:e4:65:ef:86:16:ca:a5:64:ce:55:71:53:db:54:
                    88:e0:2e:2d:3d:58:98:a3:c3:45:38:92:85:c9:28:
                    13:a6:18:4a:4a:80:fd:6f:92:94:dc:52:b4:22:69:
                    ea:08:bb:20:b3:06:7d:d7:0b:25:23:39:4f:f8:08:
                    b0:45:7a:e4:9e:c1:33:a5:2f:7f:60:e8:b2:1e:1e:
                    79:13:eb:a9:38:2a:6b:3d:ab:11:f0:13:49:d6:6b:
                    b7:90:13:09:7d:28:68:93:9e:e5:90:ac:7e:d5:36:
                    db:d8:85:d4:2d:b1:11:ac:58:7f:27:28:64:fc:7a:
                    9c:65:c7:c8:1c:b6:53:99:a9:da:73:87:49:e0:45:
                    38:30:07:55:fb:4d:28:89:48:e6:d7:16:41:64:e2:
                    89:92:c3:70:0a:c0:87:b1:c4:8b:6e:e8:19:c1:cb:
                    9a:2f:b9:66:a7:9a:28:05:41:63:a1:cb:75:9a:9a:
                    3c:27:87:02:15:27:2c:46:ac:6a:a1:ab:1e:8b:29:
                    9d:1a:ed:fc:48:b7:a1:50:d6:4d:63:6b:f5:28:3c:
                    f3:3a:86:ab:a5:6f:c1:0c:e0:85:10:9f:5b:5d:1e:
                    72:20:6a:68:6c:e5:3b:be:a8:ea:5a:96:bc:9d:aa:
                    e6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:2C:77:20:5E:E6:97:0E:9E:88:39:D5:52:B0:0B:D6:F1:12:8E:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.176.0/22
                  138.219.52.0/22
                  168.232.172.0/22
                  170.247.252.0/22
                IPv6:
                  2804:2074::/32
                  2804:27d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263924
                  264491

    Signature Algorithm: sha256WithRSAEncryption
         83:cd:f6:88:71:a8:35:59:4b:c8:d7:e6:c7:c8:f5:0a:57:86:
         f5:41:82:81:79:be:5f:9a:53:0c:ed:74:e9:05:99:b3:9c:af:
         71:02:9f:4b:d6:79:5f:35:f1:f7:f2:25:4e:6c:e7:f6:1f:7e:
         9b:e8:00:c9:e0:d3:2e:8b:6d:4e:52:7f:6e:e3:79:13:53:63:
         c2:08:47:3c:ba:a0:47:fa:82:3a:58:2b:ee:f4:59:6f:5d:33:
         4d:23:58:f5:da:80:98:84:08:5f:ea:6d:23:90:39:a0:99:fb:
         4c:52:73:90:c4:1f:ff:40:e5:29:0e:da:e6:b6:43:06:67:5c:
         86:41:e9:53:00:a4:b7:8d:1a:c0:f1:ac:ec:8a:ea:4b:a7:bd:
         b8:bc:46:92:14:27:1a:04:10:8f:86:bd:cd:5a:d0:63:08:4b:
         ff:e5:f2:69:1f:3e:96:54:fe:a6:84:dd:02:52:f4:7d:57:b6:
         a4:d9:e6:1d:17:51:50:05:48:d2:f7:9a:38:d9:e3:8d:77:2b:
         c7:5b:f6:2f:a2:1f:23:c2:8f:ae:27:49:00:31:27:59:6a:44:
         74:81:2b:9a:f7:2c:20:3e:07:08:6e:bc:99:36:fa:95:07:61:
         21:1a:85:11:71:38:36:5f:4c:e7:ba:8c:35:a6:ee:df:5f:45:
         83:e7:41:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org