Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.cer
File:                     8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.cer (raw, json)
Hash identifier:          9Z65uscchC5dfrKgeoOm0VTDiFYuFyw3w3xuH9NugSM=
Subject key identifier:   8C:6E:A6:74:D5:B6:AA:95:8B:C9:F7:C3:4A:F1:B6:9F:8E:9D:79:EB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D00185C3BAA9346A973B36389D3379B19DF2CB2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 18:28:32 +0000
Certificate not after:    Mon 24 Jun 2024 18:33:32 +0000
Subordinate resources:    AS: 52904
                          IP: 177.11.184.0/21
                          IP: 191.241.160.0/21
                          IP: 2804:1168::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:00:18:5c:3b:aa:93:46:a9:73:b3:63:89:d3:37:9b:19:df:2c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 26 18:28:32 2023 GMT
            Not After : Jun 24 18:33:32 2024 GMT
        Subject: CN=8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:b1:a3:75:e5:3f:0f:5f:1c:e0:89:53:be:
                    92:87:7b:fe:f2:87:37:84:5a:76:b0:f2:91:57:3a:
                    3d:e3:c3:fb:ec:69:6b:07:8f:9f:93:f1:68:53:79:
                    df:b5:7e:ff:ce:55:b4:27:0f:1a:1e:ff:3a:62:c6:
                    57:09:3c:8b:b0:5f:36:c1:24:49:37:8e:71:6b:a8:
                    6e:10:4d:8e:96:40:68:3c:c9:44:8f:5e:38:3b:0c:
                    0c:31:fa:77:77:fa:a8:98:c1:30:bc:b1:cd:b7:52:
                    7b:ad:ab:0e:0b:4f:40:9a:46:cd:26:1e:5a:23:c4:
                    50:80:2a:77:5d:28:10:bc:14:15:d2:b5:04:dd:e9:
                    d2:e0:30:3d:1c:95:e7:f6:9c:b6:81:56:c1:fb:ad:
                    2d:34:0e:bd:5b:c4:01:36:8d:21:e7:03:70:72:ee:
                    29:50:d8:14:a2:0a:08:da:65:8a:52:9c:80:28:04:
                    63:4b:72:f1:04:eb:4f:9d:13:c9:b7:1a:7f:80:6f:
                    73:29:18:83:9f:38:ca:a3:e2:60:3e:2a:2b:8b:41:
                    6a:69:09:f4:d6:b9:9a:2b:d1:b9:e7:f2:b2:27:f3:
                    1b:07:08:84:32:13:0c:46:15:99:9c:8f:13:61:a8:
                    5e:a8:25:04:29:52:24:db:62:d1:af:33:b5:22:5d:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:6E:A6:74:D5:B6:AA:95:8B:C9:F7:C3:4A:F1:B6:9F:8E:9D:79:EB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.184.0/21
                  191.241.160.0/21
                IPv6:
                  2804:1168::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52904

    Signature Algorithm: sha256WithRSAEncryption
         0a:03:15:39:60:71:a2:c1:e4:03:98:82:0f:f3:e8:00:30:07:
         1c:5e:16:89:10:2d:20:e9:f6:97:73:d5:1d:0a:11:c0:cb:80:
         e7:e2:25:01:77:48:ac:9c:e9:db:47:cd:76:8b:30:80:69:57:
         f4:3b:62:b4:92:31:0e:7a:73:97:85:1e:d6:89:9c:7c:04:4d:
         1a:9b:86:dc:97:8b:b8:c4:79:ed:06:d6:90:9f:3c:89:15:b9:
         9e:62:e0:a8:a3:6b:50:5f:12:ab:65:a7:74:2a:9f:06:89:07:
         04:16:b1:da:4f:bd:ec:be:3f:09:8c:e0:ab:84:07:a9:39:73:
         78:13:cb:dd:c3:f7:15:c3:24:3c:f1:25:18:f6:b7:94:c0:42:
         76:40:aa:ac:d0:86:c6:a8:23:9b:2d:da:1b:12:f4:c2:d1:b3:
         a9:0d:15:1a:5b:ef:68:02:c3:ee:90:6a:fd:65:6e:97:a7:a4:
         eb:da:d9:2a:97:05:b7:36:64:76:ef:74:80:55:52:e5:c7:c7:
         38:c8:d2:06:ed:97:90:e9:f8:b1:8f:a9:a0:90:6e:eb:66:2e:
         e7:f5:02:e9:52:78:22:ed:90:54:9c:60:c1:42:7e:c3:48:eb:
         0c:40:6f:35:d1:d5:c3:e2:89:0b:a8:f6:c6:81:de:c1:f2:f0:
         a0:7a:0b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org