Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C7C27A1C145FD776B884D81617F329537CD80D3.cer
File:                     8C7C27A1C145FD776B884D81617F329537CD80D3.cer (raw, json)
Hash identifier:          G+kBGyL1VJz6z3BKRtYY0nmdIokytE9tYofuqcgBXi4=
Subject key identifier:   8C:7C:27:A1:C1:45:FD:77:6B:88:4D:81:61:7F:32:95:37:CD:80:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       384732E9D35EC723AD5618E026EC4573B985FF93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/8C7C27A1C145FD776B884D81617F329537CD80D3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 18:02:20 +0000
Certificate not after:    Wed 12 Feb 2025 18:07:20 +0000
Subordinate resources:    AS: 264971
                          IP: 200.219.149.0/24
                          IP: 2801:80:1920::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:47:32:e9:d3:5e:c7:23:ad:56:18:e0:26:ec:45:73:b9:85:ff:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 18:02:20 2024 GMT
            Not After : Feb 12 18:07:20 2025 GMT
        Subject: CN=8C7C27A1C145FD776B884D81617F329537CD80D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:ae:b6:9e:87:8f:cd:6d:92:5c:c7:99:d0:
                    95:6d:37:d2:4d:c0:51:75:01:34:6e:54:57:6a:ed:
                    2a:90:5e:c5:46:9d:5a:66:aa:1d:b2:84:35:17:80:
                    63:90:44:65:c3:51:99:84:ad:9c:ce:59:aa:19:09:
                    aa:9c:5d:4b:07:de:5b:37:f3:bd:7c:88:e3:1e:ba:
                    31:c4:77:d8:0b:5a:58:37:57:47:83:76:85:9d:7b:
                    5d:b0:4a:8b:8b:fb:5d:85:ee:6c:31:2c:b4:56:1c:
                    f6:9d:02:ef:cf:ae:65:79:eb:18:c5:76:c7:95:78:
                    26:d9:c7:f1:5a:ca:d0:ed:44:78:57:f9:e7:ca:a7:
                    31:5f:04:df:bb:c7:03:78:ad:39:22:25:bb:09:29:
                    5d:1a:11:96:05:80:09:42:85:51:74:5f:56:97:93:
                    cc:b6:76:96:74:15:b3:c6:80:82:7f:00:64:4a:74:
                    91:9b:31:ba:81:98:a7:44:2d:57:14:49:22:4c:a8:
                    26:5b:2b:e0:fb:6b:7c:4e:85:e1:92:c8:cd:81:f1:
                    ae:bf:ce:b7:c6:ef:ee:cd:bf:11:21:b5:43:ff:e9:
                    42:a0:b5:00:8d:f5:68:d2:65:40:d7:37:0c:8f:47:
                    35:6f:b6:ba:8e:92:2e:d8:1f:4e:62:ae:ff:ef:d1:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:7C:27:A1:C1:45:FD:77:6B:88:4D:81:61:7F:32:95:37:CD:80:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/8C7C27A1C145FD776B884D81617F329537CD80D3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.149.0/24
                IPv6:
                  2801:80:1920::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264971

    Signature Algorithm: sha256WithRSAEncryption
         80:44:2f:e1:eb:71:c3:2a:bb:8e:ca:b0:e5:1f:3e:f6:bb:87:
         9e:6e:bf:d0:86:a8:24:76:3a:ca:ac:3b:c7:14:62:e7:49:ae:
         a2:b6:09:ab:51:d9:a3:5e:29:ec:ed:c7:a5:1a:83:eb:9e:34:
         f5:5b:c0:7c:85:f2:2f:06:b4:9f:9b:0d:65:50:fd:5b:79:b1:
         d3:ef:7e:55:c8:a1:01:23:c3:18:d6:29:d6:98:67:57:f1:bf:
         99:ed:8b:90:69:bb:2c:e3:a8:e6:3b:89:72:4c:de:bc:a6:63:
         bb:1b:02:88:9b:28:e1:cf:9a:54:1f:a0:45:31:df:9d:44:c2:
         34:e6:51:ed:ec:02:8b:cf:7a:0b:32:97:e6:4d:a7:ee:7c:69:
         e4:95:20:fb:d2:61:13:03:73:be:b9:fe:16:2c:70:9c:05:02:
         c4:1c:49:13:bf:5e:3e:3a:05:9f:b0:3a:58:40:87:ec:81:3e:
         43:ee:32:28:bf:dc:c8:46:3b:76:57:96:0a:65:aa:2d:39:29:
         6d:b4:f0:af:45:7c:f8:f1:a8:2f:5b:d1:25:9f:13:5d:63:cf:
         1f:9f:0c:61:69:07:dc:41:39:af:fd:1a:a1:78:35:3f:27:7c:
         5c:80:63:50:ab:f6:5a:ef:ce:5e:38:f6:a1:71:0e:ce:45:00:
         62:9d:a3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org