Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.cer
File:                     8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.cer (raw, json)
Hash identifier:          pHjKhSNtARUMqvnZHwhoCeYQ/nQ2X/hOpi5LvJi64fE=
Subject key identifier:   8C:4B:87:0C:E1:B8:CA:58:C4:F0:5E:95:45:47:78:8D:89:A7:BD:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7684E3719018366328961602E77AA00DDECB889F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Oct 2023 15:45:13 +0000
Certificate not after:    Mon 14 Oct 2024 15:50:13 +0000
Subordinate resources:    AS: 263530
                          IP: 143.137.64.0/22
                          IP: 191.253.68.0/22
                          IP: 2804:135c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:84:e3:71:90:18:36:63:28:96:16:02:e7:7a:a0:0d:de:cb:88:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 16 15:45:13 2023 GMT
            Not After : Oct 14 15:50:13 2024 GMT
        Subject: CN=8C4B870CE1B8CA58C4F05E954547788D89A7BDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:51:ca:de:94:79:44:1e:b6:4a:68:b5:00:
                    f9:a4:85:86:08:b1:61:94:fa:aa:4a:63:a4:8a:88:
                    72:38:c4:ac:0b:77:b7:96:99:4d:ec:8d:a8:51:46:
                    bf:b0:f3:75:7d:65:5f:ac:c7:d8:6d:44:b8:83:d6:
                    c2:ae:71:4b:cc:80:2b:5e:4c:3b:66:19:86:01:41:
                    ce:1c:4f:c1:8e:6d:e4:31:04:34:2d:15:3c:cb:52:
                    05:3d:f7:4d:fd:c1:c6:91:f1:46:a7:f2:ab:8c:61:
                    22:b7:a3:00:27:1e:70:c3:4a:54:2f:c9:76:93:37:
                    cf:91:c3:8d:0e:d7:43:2a:eb:1a:71:4c:95:66:ff:
                    39:de:57:f4:fe:b1:72:f0:d2:87:9d:a6:d1:66:9b:
                    3f:2d:9d:24:18:1f:8f:1b:14:b8:a4:24:30:18:65:
                    06:74:6a:b3:bb:eb:39:f0:76:a0:cb:44:5b:06:bc:
                    8b:25:cc:aa:c3:78:cd:50:41:f9:b3:46:02:73:74:
                    af:84:bf:9b:50:c8:41:8f:c1:1e:f9:f5:3a:84:61:
                    b5:3f:23:af:06:fe:01:4c:8a:b1:e5:d6:0a:e0:f4:
                    3a:4d:e6:de:56:fb:29:ec:8b:5b:ec:aa:12:54:ef:
                    ba:e5:0a:2d:0e:bd:44:3e:39:a5:52:38:ae:f3:2d:
                    25:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:4B:87:0C:E1:B8:CA:58:C4:F0:5E:95:45:47:78:8D:89:A7:BD:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.64.0/22
                  191.253.68.0/22
                IPv6:
                  2804:135c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263530

    Signature Algorithm: sha256WithRSAEncryption
         93:8f:b1:37:c1:a1:bf:fd:f7:f5:3a:d3:ad:b6:a6:83:02:d4:
         90:59:a9:29:fc:ca:80:e2:53:5b:a0:80:b5:e7:d6:d6:04:81:
         58:64:38:6d:0f:f4:15:8f:49:c0:ce:85:07:a1:85:06:cc:cd:
         f0:6e:88:f4:37:87:57:ae:05:65:c3:05:c6:38:fb:37:a9:b0:
         ec:c5:99:50:b4:e5:4d:84:a5:8a:7f:3e:af:fd:f3:9c:1e:42:
         cd:a7:8b:f9:91:f2:43:a1:b4:6f:2f:f7:ce:45:d9:a5:42:fc:
         c5:7d:60:a4:59:83:97:94:4e:cd:8e:76:b8:cc:4e:22:f4:ad:
         47:93:99:ae:0b:83:7f:9a:93:44:a0:69:f3:00:51:8d:60:4e:
         86:b2:8b:da:2d:03:65:f1:18:24:30:1e:08:7d:8d:5d:9e:69:
         14:ef:16:df:45:d2:2d:ec:eb:dd:7b:06:50:5a:55:f5:0b:6c:
         de:52:6a:4d:09:25:49:99:39:24:31:d2:0f:f6:21:0b:8e:40:
         86:d2:a4:eb:0d:ec:01:16:eb:50:a2:a8:2d:5b:80:e4:34:ee:
         e0:cc:a7:cd:b8:d0:36:02:77:a8:fb:cd:0a:e4:63:49:bc:38:
         f6:fe:5c:a3:98:32:ab:66:28:c0:0e:c0:55:b3:f6:87:6e:f4:
         61:93:99:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org