Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C82F765CC710D7E2CA750E73CF161ADF599A011.cer
File:                     8C82F765CC710D7E2CA750E73CF161ADF599A011.cer (raw, json)
Hash identifier:          5eQ7DOE3fQwcMpJT9twDUASQDpg7WGERnktW1OujbIo=
Subject key identifier:   8C:82:F7:65:CC:71:0D:7E:2C:A7:50:E7:3C:F1:61:AD:F5:99:A0:11
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4CCBC73718B9035DEDEC4485AA1BDBB5358280E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/8C82F765CC710D7E2CA750E73CF161ADF599A011.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 14:01:24 +0000
Certificate not after:    Tue 16 Apr 2024 14:06:24 +0000
Subordinate resources:    AS: 61785
                          IP: 201.131.152.0/22
                          IP: 2804:194c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:cb:c7:37:18:b9:03:5d:ed:ec:44:85:aa:1b:db:b5:35:82:80:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 18 14:01:24 2023 GMT
            Not After : Apr 16 14:06:24 2024 GMT
        Subject: CN=8C82F765CC710D7E2CA750E73CF161ADF599A011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:70:73:df:1c:71:7f:31:34:3e:25:14:64:1f:
                    43:6c:ce:1c:c2:07:96:ae:88:c8:46:d2:12:65:ab:
                    ec:36:02:a8:97:4c:cb:4c:53:cb:be:fe:37:c3:69:
                    ff:24:43:8d:d9:44:8a:f0:5b:1a:c4:0b:06:97:4f:
                    bf:f0:e6:e7:72:ba:4a:9a:e2:2a:f6:5e:55:3c:86:
                    fa:cf:cf:68:76:bc:ba:6c:1c:4b:56:7a:2b:79:5e:
                    90:bc:80:c2:9b:04:4e:5c:99:3a:d7:1b:07:c9:58:
                    2f:44:87:88:cb:3b:ca:15:11:68:e8:db:f8:be:61:
                    ca:02:02:9c:6e:b2:84:6e:fd:f4:cc:50:37:5a:5a:
                    73:ee:e5:4e:45:7b:eb:73:67:1c:f6:00:72:69:18:
                    f3:1f:d1:98:57:93:70:62:05:a5:b4:32:5e:30:70:
                    00:f1:a8:29:95:f4:5f:7f:56:af:6c:a6:7a:a4:a6:
                    aa:59:c2:f5:30:34:d8:ee:95:e8:77:a5:dc:ad:57:
                    2a:ce:75:7f:9c:f2:51:55:89:cc:bf:3f:8e:0b:35:
                    8e:cd:48:1d:c9:86:61:13:96:1d:b3:89:2a:93:44:
                    17:95:a1:d6:75:80:fb:98:a3:49:2e:f2:dd:04:36:
                    2e:36:ac:33:a4:61:b8:94:4d:92:7f:60:ed:f0:2f:
                    f9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:82:F7:65:CC:71:0D:7E:2C:A7:50:E7:3C:F1:61:AD:F5:99:A0:11
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/8C82F765CC710D7E2CA750E73CF161ADF599A011.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.152.0/22
                IPv6:
                  2804:194c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61785

    Signature Algorithm: sha256WithRSAEncryption
         00:75:c9:60:3a:71:61:ba:47:ce:40:99:d3:10:25:aa:ff:42:
         7f:1c:fc:24:49:3a:ce:63:78:fc:af:0b:4f:2a:f7:d8:c9:52:
         bc:86:17:3d:e8:1a:99:01:2f:7b:45:8c:4a:17:34:0d:ff:a2:
         b7:20:a9:b6:fa:fe:58:6e:42:4c:27:ea:fa:f2:e1:79:e8:d1:
         db:ab:18:38:b6:a4:99:cb:b4:82:22:05:f6:67:02:e2:5f:f9:
         42:d1:15:cc:6a:7a:86:4e:de:d0:f2:86:3a:34:ed:85:db:21:
         9f:77:88:96:8e:43:1a:a4:09:e6:8a:6a:04:77:b4:81:2c:93:
         83:72:34:73:d8:b3:e5:cf:be:94:27:40:b0:be:c2:79:ef:2a:
         8a:14:8d:89:be:83:a2:66:0e:ba:5e:fd:12:95:98:d6:f7:d4:
         dd:f5:49:65:59:e2:89:9e:8f:19:10:d8:85:c4:b3:96:49:a6:
         05:74:f1:e6:05:e0:7d:d3:bd:7a:ce:7d:b3:74:d5:eb:b6:fa:
         16:93:b5:db:ca:72:50:b5:dd:f8:b0:f0:9f:30:3f:ee:2d:b7:
         4a:3c:2b:64:7a:64:8a:17:ed:68:8a:03:e6:ec:66:ec:1e:ab:
         23:82:ff:26:2c:3e:85:db:71:2c:ec:48:f9:ad:76:b6:22:e4:
         08:3b:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org