Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer
File:                     8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer (raw, json)
Hash identifier:          lrR8M+RksUDL1mnLa0hBmAgj//l9zZQ8TYfWG4bNXuc=
Subject key identifier:   8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       45F204568807A7E3BEAB536A7CEC3D5B1D52AD1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/8C51D86B9680AA2A78981AECD45959BAEE0144E6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Mar 2023 10:41:57 +0000
Certificate not after:    Fri 01 Mar 2024 10:46:57 +0000
Subordinate resources:    AS: 53059
                          IP: 45.4.64.0/22
                          IP: 138.0.100.0/22
                          IP: 168.228.68.0/22
                          IP: 177.137.192.0/20
                          IP: 179.96.192.0/21
                          IP: 179.96.240.0/20
                          IP: 186.193.96.0/20
                          IP: 186.208.208.0/21
                          IP: 186.235.0.0/20
                          IP: 186.251.112.0/21
                          IP: 187.49.192.0/20
                          IP: 187.86.96.0/20
                          IP: 187.108.64.0/20
                          IP: 187.109.176.0/20
                          IP: 189.45.16.0/20
                          IP: 200.233.80.0/20
                          IP: 201.148.188.0/22
                          IP: 2804:2140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f2:04:56:88:07:a7:e3:be:ab:53:6a:7c:ec:3d:5b:1d:52:ad:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  3 10:41:57 2023 GMT
            Not After : Mar  1 10:46:57 2024 GMT
        Subject: CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:7d:b1:70:25:b6:e1:c8:57:a9:f7:45:2b:
                    be:09:6f:1a:f2:f6:df:6c:15:e0:ff:b8:46:21:fd:
                    d8:66:68:1d:e0:84:74:c0:a4:d3:42:fb:5c:a7:74:
                    7a:49:e6:02:be:d7:eb:8b:c8:24:54:3f:f2:91:ea:
                    e6:65:90:71:7a:c8:3a:56:d8:41:01:27:da:56:f7:
                    73:d7:38:fd:69:5b:fb:b2:48:de:4c:7b:85:d5:3e:
                    e3:74:8c:25:85:5e:a7:28:87:e7:1e:c9:2d:50:bc:
                    ed:91:74:d1:01:68:aa:69:52:6d:e7:30:d0:3a:47:
                    f8:ee:92:8d:22:6f:27:2c:fc:b2:92:63:55:6d:5c:
                    08:a9:e1:0a:f3:b1:40:ab:28:1c:b6:09:9b:ab:3b:
                    bd:07:b3:4e:84:f3:06:e9:2e:c9:c9:ad:d9:f6:be:
                    fd:15:43:1e:49:09:9c:ae:52:2d:bf:7f:60:34:b3:
                    46:1c:10:f3:19:84:00:49:77:76:d2:f2:6d:27:75:
                    40:11:28:f3:ab:57:1d:db:f8:c3:59:d1:ec:51:2c:
                    36:b4:4c:a8:9f:20:20:e6:0a:0f:4b:8f:0b:f2:65:
                    fd:1e:4d:fc:20:60:7e:76:09:7a:27:c9:f4:9b:2f:
                    92:89:50:fb:b0:6a:67:c0:1c:de:71:00:0e:ea:ff:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/8C51D86B9680AA2A78981AECD45959BAEE0144E6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.64.0/22
                  138.0.100.0/22
                  168.228.68.0/22
                  177.137.192.0/20
                  179.96.192.0/21
                  179.96.240.0/20
                  186.193.96.0/20
                  186.208.208.0/21
                  186.235.0.0/20
                  186.251.112.0/21
                  187.49.192.0/20
                  187.86.96.0/20
                  187.108.64.0/20
                  187.109.176.0/20
                  189.45.16.0/20
                  200.233.80.0/20
                  201.148.188.0/22
                IPv6:
                  2804:2140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53059

    Signature Algorithm: sha256WithRSAEncryption
         30:26:69:c1:cd:6a:9b:7d:2a:a7:21:a6:2e:bb:d8:d5:a7:76:
         59:b0:2b:3b:cb:f0:6b:96:9d:3e:41:70:5d:31:7d:eb:d1:fb:
         37:ff:e0:67:76:8e:61:1a:25:6f:88:7e:24:29:2a:99:b1:ec:
         48:5a:df:2d:60:36:17:9f:d6:fa:f0:4c:05:bb:25:d6:61:1f:
         12:36:ea:bc:bb:5d:57:40:c3:e9:6e:3d:83:f6:47:b9:4e:45:
         79:ee:78:da:11:5f:66:fc:d0:0b:c6:c2:a6:45:8b:de:71:48:
         ad:0b:37:0a:d3:9f:6b:e8:53:27:81:32:47:4e:f9:4d:e4:08:
         96:e2:dc:14:0f:b7:07:15:f3:b4:c9:23:30:a1:c7:bf:14:ed:
         a2:c0:b7:2d:22:36:9e:35:47:54:6b:ca:ac:36:47:8a:4c:94:
         91:18:d6:ed:f6:92:ee:08:b1:81:74:5f:5f:17:e3:f3:b5:86:
         f0:26:2d:4e:86:8e:5f:53:6e:ee:23:3f:c6:b9:18:e8:f5:49:
         8a:40:95:f5:d5:9e:24:7f:b6:36:88:dc:7d:bc:25:5c:ab:8d:
         28:f9:18:69:38:04:94:45:20:b0:45:f6:5c:f6:dc:c7:6f:42:
         0d:21:48:8d:54:47:26:ed:2a:c5:0a:37:69:ae:19:60:ef:ca:
         43:60:37:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org