Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.cer
File:                     8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.cer (raw, json)
Hash identifier:          M28YVamwao1Xu1mLNdT2QwFNEGvjHucVra6atsy2I7c=
Subject key identifier:   8C:4B:B5:E5:1A:22:64:D0:EE:E9:A0:E7:E5:9C:EA:20:8B:0A:2F:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7AD74639A2A5BD09F300ABC8E7E085DAC58629B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Feb 2023 23:44:48 +0000
Certificate not after:    Mon 12 Feb 2024 23:49:48 +0000
Subordinate resources:    AS: 266586
                          IP: 45.7.148.0/22
                          IP: 2804:3e4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d7:46:39:a2:a5:bd:09:f3:00:ab:c8:e7:e0:85:da:c5:86:29:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 23:44:48 2023 GMT
            Not After : Feb 12 23:49:48 2024 GMT
        Subject: CN=8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a5:ba:18:ca:69:a2:7a:b4:b2:89:2b:09:38:
                    70:84:c9:5f:20:3e:28:4d:85:1b:dc:47:ca:94:2d:
                    28:ce:30:e9:94:ce:df:0b:ce:67:bd:6d:c5:91:db:
                    4d:fd:10:dd:01:f7:f0:f5:1e:05:53:b6:7c:a4:b0:
                    71:f1:ec:18:5f:2c:d5:cf:eb:14:1e:73:ce:e0:1f:
                    9f:6f:19:27:38:61:6d:95:79:48:40:a7:d4:75:67:
                    f0:c5:77:99:a2:c5:be:5a:c5:38:3e:b6:72:63:1c:
                    1a:31:e1:b7:0b:d2:9b:a9:3d:62:fc:90:2e:4d:d5:
                    b9:0a:ed:6c:14:9c:c1:63:42:03:2a:9a:8e:eb:6a:
                    e6:96:69:78:3e:66:79:3a:04:a4:2a:cf:8d:7a:a8:
                    a0:b2:3a:fe:34:b0:d7:fc:c8:eb:2f:36:23:d3:07:
                    c3:85:eb:4f:98:bf:24:a7:d3:c8:34:67:84:c0:30:
                    58:56:c1:8a:50:34:44:59:17:9a:01:d7:7f:bd:b6:
                    28:6d:d6:df:03:a4:fc:c4:c5:5c:16:24:c2:87:a5:
                    fc:6e:50:25:28:76:cc:dc:bb:59:e8:2e:60:cf:1d:
                    e4:c9:b3:17:a9:23:40:d8:65:bc:eb:dd:26:d3:96:
                    da:43:4b:7c:68:95:d8:2c:62:7d:cd:d9:e7:f6:0f:
                    6e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:4B:B5:E5:1A:22:64:D0:EE:E9:A0:E7:E5:9C:EA:20:8B:0A:2F:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.148.0/22
                IPv6:
                  2804:3e4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266586

    Signature Algorithm: sha256WithRSAEncryption
         2e:93:c9:1f:de:86:11:5f:09:32:bc:d2:d0:09:1e:ca:76:ae:
         62:6c:5f:5a:e7:41:8d:d1:44:bc:68:db:b8:bd:32:1a:33:3a:
         5e:d0:d8:a3:c5:41:60:05:0d:b5:52:68:34:e6:98:11:70:3f:
         29:32:c5:9f:3e:4f:4c:00:9e:30:06:86:1b:56:76:20:4d:e3:
         51:68:df:61:24:59:ea:5e:94:4d:55:bb:71:16:47:27:a8:e8:
         81:6e:7c:45:27:68:55:f5:08:67:c8:a2:36:f1:f1:84:95:cc:
         8d:32:5c:4f:06:1e:72:37:68:00:a2:57:3e:d8:67:da:75:f6:
         f7:f7:63:07:5c:29:68:35:05:52:e0:88:49:94:b6:a5:f4:6d:
         e7:83:aa:36:82:72:57:78:f0:46:9a:f8:41:da:1b:45:79:cc:
         c1:ea:d0:aa:5a:1f:66:ef:22:10:ab:97:1b:3a:4e:da:21:c0:
         4f:8c:e1:27:2c:c9:19:ba:e3:d0:24:34:69:76:11:87:27:9e:
         f2:74:e7:07:ea:e7:72:c9:91:34:3c:85:76:81:8b:19:bb:29:
         4a:f4:24:ec:3e:7e:04:59:50:95:93:b4:14:67:dc:c2:f5:01:
         48:98:84:7a:e4:fc:20:1d:75:00:ed:ec:49:3e:be:d1:7c:cf:
         79:b0:e1:6d
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUetdGOaKlvQnzAKvI5+CF2sWGKbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMTMyMzQ0NDhaFw0yNDAyMTIyMzQ5NDhaMDMxMTAvBgNV
BAMTKDhDNEJCNUU1MUEyMjY0RDBFRUU5QTBFN0U1OUNFQTIwOEIwQTJGRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmpboYymmierSyiSsJOHCEyV8g
PihNhRvcR8qULSjOMOmUzt8Lzme9bcWR2039EN0B9/D1HgVTtnyksHHx7BhfLNXP
6xQec87gH59vGSc4YW2VeUhAp9R1Z/DFd5mixb5axTg+tnJjHBox4bcL0pupPWL8
kC5N1bkK7WwUnMFjQgMqmo7rauaWaXg+Znk6BKQqz416qKCyOv40sNf8yOsvNiPT
B8OF60+YvySn08g0Z4TAMFhWwYpQNERZF5oB13+9tiht1t8DpPzExVwWJMKHpfxu
UCUodszcu1noLmDPHeTJsxepI0DYZbzr3SbTltpDS3xoldgsYn3N2ef2D25rAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMS7XlGiJk0O7p
oOflnOogiwov/jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IYWlpNmhOa3RCWW1LVzVKdWp6Z2VzamttQnJoSm02MmQ3
RGRialJjOWdWNS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IYWlpNmhOa3RCWW1LVzVKdWp6Z2VzamttQnJoSm02MmQ3
RGRialJjOWdWNS8wLzhDNEJCNUU1MUEyMjY0RDBFRUU5QTBFN0U1OUNFQTIwOEIw
QTJGRkUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0HlDANBAIAAjAHAwUA
KAQ+TDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEVowDQYJKoZIhvcNAQELBQAD
ggEBAC6TyR/ehhFfCTK80tAJHsp2rmJsX1rnQY3RRLxo27i9MhozOl7Q2KPFQWAF
DbVSaDTmmBFwPykyxZ8+T0wAnjAGhhtWdiBN41Fo32EkWepelE1Vu3EWRyeo6IFu
fEUnaFX1CGfIojbx8YSVzI0yXE8GHnI3aACiVz7YZ9p19vf3YwdcKWg1BVLgiEmU
tqX0beeDqjaCcld48Eaa+EHaG0V5zMHq0KpaH2bvIhCrlxs6TtohwE+M4ScsyRm6
49AkNGl2EYcnnvJ05wfq53LJkTQ8hXaBixm7KUr0JOw+fgRZUJWTtBRn3ML1AUiY
hHrk/CAddQDt7Ek+vtF8z3mw4W0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org