Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.cer
File:                     8C5E36B81EEC513AEFC77A52B60D451BC4B02974.cer (raw, json)
Hash identifier:          yzRJXnz92KeKGIdHbHwW2cFF/bsLe9F+QcLy0LVP6aY=
Subject key identifier:   8C:5E:36:B8:1E:EC:51:3A:EF:C7:7A:52:B6:0D:45:1B:C4:B0:29:74
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27DC9BB21585339C1EAC1F547E3FC0AFBED0B913
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.mft
caRepository:             rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Nov 2023 04:48:36 +0000
Certificate not after:    Wed 06 Nov 2024 04:53:36 +0000
Subordinate resources:    AS: 271623
                          IP: 138.121.36.0/22
                          IP: 2804:7e6c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:dc:9b:b2:15:85:33:9c:1e:ac:1f:54:7e:3f:c0:af:be:d0:b9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  8 04:48:36 2023 GMT
            Not After : Nov  6 04:53:36 2024 GMT
        Subject: CN=8C5E36B81EEC513AEFC77A52B60D451BC4B02974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:a1:8a:f6:08:f4:72:7d:8c:4a:ac:fc:0c:
                    49:37:10:42:a6:da:9e:af:f7:4e:02:aa:e4:12:08:
                    5d:94:a5:1c:2e:ad:90:9e:d4:51:f3:0f:23:b0:15:
                    03:db:e2:cd:0a:b1:75:7f:c3:77:55:79:54:10:f9:
                    0d:4a:45:46:e4:96:c4:24:f2:ad:cc:6e:0e:c9:f1:
                    cc:e8:db:8c:b9:59:9a:0b:4a:fa:7e:6e:77:0c:ac:
                    bf:79:2e:da:5b:a6:09:e5:cd:2c:02:1e:fc:4b:2f:
                    f1:ac:6b:aa:1c:ad:3d:e5:18:4e:0a:4e:8b:76:5a:
                    9a:a4:29:ab:0a:79:be:fa:6a:83:5c:4b:f5:63:18:
                    57:1d:ef:95:fe:1e:62:de:f7:1d:c3:14:b6:ce:44:
                    1b:e3:e8:79:4c:31:7f:ef:31:7b:59:2f:11:09:5c:
                    bc:29:83:46:6e:91:ce:68:f3:26:cd:fa:ff:99:ef:
                    25:5f:4b:fc:c4:bf:c3:64:03:d8:bd:a9:9e:86:0d:
                    1e:d5:5e:aa:f8:b7:76:e1:18:10:6d:19:d0:cf:f7:
                    ed:64:ea:75:cc:8a:6b:5b:80:c2:55:40:02:aa:d6:
                    f0:84:1e:1e:73:a7:8f:9b:00:2c:26:bd:80:62:30:
                    65:45:5e:92:a8:5b:5a:68:d3:d6:15:c5:ab:9b:d5:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:5E:36:B8:1E:EC:51:3A:EF:C7:7A:52:B6:0D:45:1B:C4:B0:29:74
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.36.0/22
                IPv6:
                  2804:7e6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271623

    Signature Algorithm: sha256WithRSAEncryption
         35:72:6f:9b:6c:eb:1d:68:42:81:43:33:6d:e4:c7:67:f6:3e:
         62:94:01:1c:00:6c:a8:d0:62:39:09:7a:a5:44:57:33:1d:69:
         f4:26:6b:ea:ee:9f:4f:ac:9f:ef:bd:1e:27:5d:5a:68:66:b3:
         df:45:d6:c5:95:17:33:77:72:86:e0:7a:82:50:49:fc:03:5c:
         fe:d4:19:a5:a0:56:c1:6f:21:69:9a:e1:cb:b1:c7:9e:de:20:
         82:3c:f6:f2:7d:db:9c:bf:2a:be:27:20:49:ec:6f:88:59:bc:
         fd:37:d1:63:af:0b:d3:ca:d0:01:38:04:d0:2e:7b:99:4a:db:
         ad:f6:44:62:64:86:fd:8e:89:fd:93:98:07:9f:a4:00:fe:c8:
         1e:66:1f:89:00:23:47:a7:8d:23:4f:af:b3:3a:10:48:ae:32:
         4a:99:d1:05:7e:a1:3f:6b:74:27:50:8c:cc:91:89:72:b6:03:
         e5:26:59:43:7f:9a:4e:9b:dc:ad:69:86:b6:2c:65:cc:f8:5d:
         93:15:de:88:c5:35:1c:4e:d3:c5:ac:cf:17:98:1f:b2:2d:75:
         ee:ab:d6:9a:b9:a2:b6:1d:be:7f:c1:5b:96:e7:b4:b4:47:47:
         82:32:dd:60:6c:38:75:4d:0f:eb:d3:ca:b0:37:28:af:20:14:
         64:57:f5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org