Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C640215B4A3135C445A51C4CFC346EC4CDEF6B6.cer
File:                     8C640215B4A3135C445A51C4CFC346EC4CDEF6B6.cer (raw, json)
Hash identifier:          JA57LzDXEZC2tnfdQueIxvTq8cBtaNFH4/ETZv7mlmc=
Subject key identifier:   8C:64:02:15:B4:A3:13:5C:44:5A:51:C4:CF:C3:46:EC:4C:DE:F6:B6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7171E3F225BA0282F8617047509D049FDEC6ECB5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/8C640215B4A3135C445A51C4CFC346EC4CDEF6B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Aug 2023 16:03:53 +0000
Certificate not after:    Mon 12 Aug 2024 16:08:53 +0000
Subordinate resources:    AS: 52772
                          IP: 177.39.156.0/22
                          IP: 2804:259c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:71:e3:f2:25:ba:02:82:f8:61:70:47:50:9d:04:9f:de:c6:ec:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 14 16:03:53 2023 GMT
            Not After : Aug 12 16:08:53 2024 GMT
        Subject: CN=8C640215B4A3135C445A51C4CFC346EC4CDEF6B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:16:25:0d:97:d6:36:6b:b5:ea:1f:37:e2:
                    e3:c3:07:9b:fe:ed:06:50:82:7b:51:3e:2d:e3:f4:
                    4f:c5:fb:67:62:21:31:24:ef:9d:23:8e:8e:c7:de:
                    61:4e:11:36:8c:94:6f:7b:d3:bd:0e:ee:47:53:25:
                    1b:6e:8f:a2:51:c4:b5:90:f9:2d:fb:d5:2f:49:82:
                    9a:44:83:4e:7a:8e:44:da:e9:ea:76:fc:71:a6:1d:
                    9a:fb:98:ac:7c:66:55:0c:89:29:26:14:e7:bf:9b:
                    9b:d1:b7:91:1c:48:21:bb:9a:15:e0:c1:42:f5:d5:
                    68:8e:11:c1:69:45:c6:c2:7a:00:e5:18:00:2f:28:
                    d3:56:3b:75:c9:72:dc:71:0d:2f:64:7b:e9:88:dd:
                    8b:2b:1b:fc:4a:7c:9a:74:2f:b0:ce:cb:a8:32:8c:
                    bb:eb:fb:e6:06:5a:15:6f:ad:96:57:80:3c:f3:11:
                    f7:c0:6c:c3:eb:34:06:aa:42:4b:84:5a:1a:73:61:
                    eb:82:a4:9f:62:2c:4a:c8:80:58:b1:0a:72:04:bd:
                    47:72:96:39:44:11:3a:e0:b6:51:b5:52:16:5e:ff:
                    4c:b8:34:b9:1b:9d:78:89:3c:b5:0b:53:4f:0d:11:
                    cc:c8:1d:a9:41:47:13:7a:ba:94:78:c2:90:cb:c1:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:64:02:15:B4:A3:13:5C:44:5A:51:C4:CF:C3:46:EC:4C:DE:F6:B6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/8C640215B4A3135C445A51C4CFC346EC4CDEF6B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/22
                IPv6:
                  2804:259c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52772

    Signature Algorithm: sha256WithRSAEncryption
         17:04:5d:c3:8f:0b:bc:b0:8a:fb:0e:4d:ea:3a:26:44:cc:de:
         75:6e:e8:d1:68:ff:96:5a:72:fd:3c:4f:30:d6:60:5e:0d:aa:
         ee:69:0a:2d:5e:be:f2:a1:01:5e:29:09:f9:9b:14:e2:80:cb:
         42:a7:67:e7:cc:4b:d3:3e:0e:34:86:6f:cb:b1:d2:6e:85:72:
         d8:b8:a5:a5:e1:6c:e2:90:a3:1e:d6:6c:2e:30:97:0b:3b:dd:
         05:4a:3e:ec:5a:fe:a9:b6:71:39:f2:76:45:39:4c:4c:d4:c4:
         11:f7:74:77:91:ab:32:35:a6:bf:b3:6d:b3:28:86:bd:87:a4:
         96:ac:22:2e:76:07:1f:5b:87:ff:1a:51:cf:cc:0d:69:6e:91:
         0f:27:7c:a1:76:9d:49:96:4b:48:24:4c:b8:10:d2:da:85:1d:
         f2:fb:c3:ed:a9:d3:9c:c9:64:c8:a5:9f:8f:27:26:4c:10:35:
         2a:7d:ed:82:a2:03:31:8e:0d:d8:52:f5:f8:11:9e:43:96:f0:
         01:81:d3:0b:37:5a:71:78:ed:c0:d4:e2:3a:79:30:ba:1a:2f:
         43:8d:a6:b4:a0:e0:af:cf:78:d9:85:bc:07:7b:78:68:7b:30:
         fe:74:8a:90:a2:39:c7:ba:1f:87:4c:36:d5:a2:99:d7:0d:4e:
         dd:ea:ca:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org