Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C83252FCA7F9D20F2532F9FDE7DA76E1C75F808.cer
File:                     8C83252FCA7F9D20F2532F9FDE7DA76E1C75F808.cer (raw, json)
Hash identifier:          FNMRynLpxxScFG4jW6D93fXcrlv+OtwtJwdxOb8RqTo=
Subject key identifier:   8C:83:25:2F:CA:7F:9D:20:F2:53:2F:9F:DE:7D:A7:6E:1C:75:F8:08
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E908E4EADCE038C102A01CCC4BAC17E0DC480AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/8C83252FCA7F9D20F2532F9FDE7DA76E1C75F808.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 15:18:30 +0000
Certificate not after:    Wed 18 Dec 2024 15:23:30 +0000
Subordinate resources:    AS: 267249
                          IP: 45.232.56.0/22
                          IP: 2804:4a90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:90:8e:4e:ad:ce:03:8c:10:2a:01:cc:c4:ba:c1:7e:0d:c4:80:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 15:18:30 2023 GMT
            Not After : Dec 18 15:23:30 2024 GMT
        Subject: CN=8C83252FCA7F9D20F2532F9FDE7DA76E1C75F808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:be:bf:7f:80:e2:a4:31:f1:0c:28:41:b6:
                    e9:e2:e9:91:a8:da:72:ad:fa:39:02:78:1f:d1:86:
                    45:d3:bc:a4:23:a9:2f:33:d1:de:40:cf:c9:a5:2d:
                    30:a9:17:5b:3c:f5:fe:77:65:04:f4:de:60:be:1a:
                    3e:a3:e6:86:ff:6c:3f:c7:73:2d:dc:86:48:e6:3f:
                    66:7f:d5:70:9f:dd:ff:68:2c:12:e9:31:3c:4e:d1:
                    cc:b3:9d:bb:70:59:86:ee:64:13:6d:d3:ec:6b:f0:
                    2f:b5:28:83:fd:5b:c5:af:84:df:33:72:26:3a:34:
                    09:b7:2a:4c:08:e1:db:8c:08:37:42:cc:70:a0:b4:
                    5e:ac:16:1e:36:e3:64:ec:c6:10:74:e9:57:52:07:
                    3a:65:05:c0:69:e6:36:cb:04:bd:46:1d:5e:1c:57:
                    64:c3:f1:a2:f3:d9:c6:61:82:24:d0:91:36:0f:1f:
                    e2:a9:49:98:44:be:89:93:32:c1:a0:17:30:f9:19:
                    9a:c7:32:5a:8e:73:fb:be:21:b3:b8:49:c1:05:b7:
                    1d:e3:3c:c0:96:d9:59:ab:12:18:51:b1:df:1d:0b:
                    29:9c:a8:8b:16:8d:8c:ca:cb:86:91:68:93:6c:bf:
                    b4:8c:c5:32:20:fb:f9:8c:a4:f1:aa:15:57:bf:b3:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:83:25:2F:CA:7F:9D:20:F2:53:2F:9F:DE:7D:A7:6E:1C:75:F8:08
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/8C83252FCA7F9D20F2532F9FDE7DA76E1C75F808.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.56.0/22
                IPv6:
                  2804:4a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267249

    Signature Algorithm: sha256WithRSAEncryption
         6f:24:27:27:c5:c4:0b:be:d3:55:7b:28:14:cc:da:a7:35:b1:
         0f:c9:5d:5c:93:41:b4:b8:bf:be:ab:f7:61:cf:54:b4:92:6b:
         6c:1a:1d:18:39:65:72:c1:63:f0:a9:0f:bd:df:e1:f4:ca:ae:
         bb:61:d5:f7:30:45:3e:49:f4:6c:25:9d:92:15:ca:d4:04:57:
         93:c8:20:85:3c:62:14:cf:a4:28:eb:ff:ce:94:d4:da:fe:2c:
         a8:1f:87:02:d5:d3:c4:b4:a0:c6:76:c4:ce:ef:ff:6f:cd:ce:
         57:21:1b:ed:c1:3e:5e:09:a0:78:3f:87:c6:c8:47:4c:70:35:
         bc:58:ef:80:7f:13:c7:af:7f:44:aa:bc:bc:f7:6f:f1:c2:88:
         45:c3:b6:1d:fe:c5:8d:3e:d0:be:ee:08:25:d4:05:ab:e5:e6:
         18:7b:2c:ce:11:d7:cc:d5:e4:83:b6:7d:9e:11:e8:cb:ef:f6:
         37:70:f8:40:2c:1e:00:71:13:31:32:e0:b2:0f:4e:96:fb:3f:
         62:e1:7c:d8:23:d1:8a:f4:58:9a:1b:ab:6c:d0:d3:fa:f4:ec:
         86:11:7f:39:67:a3:c1:3c:3f:0d:6c:d5:64:ec:db:23:81:f6:
         c6:5d:46:b2:83:12:26:25:2b:39:8d:23:01:4b:b5:ba:48:3c:
         e2:83:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org