Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C8978E01D071BE963A342A2ADB78684F8732C36.cer
File:                     8C8978E01D071BE963A342A2ADB78684F8732C36.cer (raw, json)
Hash identifier:          dJFytFhGVxpDqY6vZRjYkWfv4qt7MozOqAAxVno2wEc=
Subject key identifier:   8C:89:78:E0:1D:07:1B:E9:63:A3:42:A2:AD:B7:86:84:F8:73:2C:36
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1FB616C64B0442F84EC8379032CED46906F1385D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8C8978E01D071BE963A342A2ADB78684F8732C36.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Sep 2022 07:17:18 +0000
Certificate not after:    Tue 05 Sep 2023 07:22:18 +0000
Subordinate resources:    AS: 263641
                          IP: 168.205.60.0/22
                          IP: 179.127.152.0/21
                          IP: 2804:1094::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b6:16:c6:4b:04:42:f8:4e:c8:37:90:32:ce:d4:69:06:f1:38:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 07:17:18 2022 GMT
            Not After : Sep  5 07:22:18 2023 GMT
        Subject: CN=8C8978E01D071BE963A342A2ADB78684F8732C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:22:2c:6e:72:a8:fb:a8:dd:aa:52:59:58:
                    db:38:d4:db:bd:de:cb:e6:71:23:35:72:be:ac:48:
                    05:96:cd:6d:78:ee:5a:85:44:55:c9:7b:fb:6c:3a:
                    88:00:0e:c1:90:f4:81:04:b6:16:02:22:b2:48:db:
                    b1:d8:85:ce:5f:b0:6e:00:9e:a2:40:c1:91:1a:7a:
                    69:44:39:fc:9c:1a:ae:be:75:46:fb:6c:bf:11:de:
                    3b:f8:ae:58:c7:39:68:57:ad:ec:5c:cb:af:d1:ce:
                    df:30:4f:b7:3c:ab:d0:6a:ae:33:ad:b0:7f:2f:42:
                    a7:19:95:aa:fe:77:7d:fc:66:ce:5b:b7:6b:df:ad:
                    cf:f7:e4:8d:37:0b:d2:d2:c6:3c:a2:f8:c4:3a:7c:
                    5d:99:bf:94:5c:c2:86:3c:71:53:10:0f:82:be:93:
                    ed:ea:a2:f1:9d:57:7d:4c:ff:6e:0c:85:68:b4:66:
                    ca:ba:30:6e:cf:c0:69:1d:75:5c:8a:60:89:05:44:
                    66:1d:3e:ef:c4:f5:d5:44:32:75:e1:db:1f:8c:45:
                    cf:0d:1a:07:f5:68:a7:53:6b:d2:9f:98:d1:d1:a0:
                    38:e6:b5:70:7e:c2:96:e6:09:1c:ab:01:71:52:38:
                    29:1a:a8:92:a5:16:e0:2a:d5:72:6c:27:7b:d6:34:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:89:78:E0:1D:07:1B:E9:63:A3:42:A2:AD:B7:86:84:F8:73:2C:36
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8C8978E01D071BE963A342A2ADB78684F8732C36.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.60.0/22
                  179.127.152.0/21
                IPv6:
                  2804:1094::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263641

    Signature Algorithm: sha256WithRSAEncryption
         97:07:81:ec:5b:79:b8:57:ad:65:88:5a:7c:a5:de:42:69:c5:
         b8:d9:92:9d:4b:0f:d0:ef:91:c9:e4:43:c1:7e:81:eb:30:ca:
         f0:01:77:61:f9:3a:c5:6c:7d:19:0d:c6:18:6e:76:de:d5:64:
         04:db:7d:12:35:ec:3f:c8:23:6e:63:bb:03:ef:fa:01:f1:b9:
         fc:1a:28:8c:a6:14:47:92:8a:b6:aa:ef:bb:f9:78:6a:d0:a5:
         6b:b5:7f:7a:b5:42:85:c0:1b:75:ff:5d:13:25:89:80:d4:02:
         8d:32:44:70:b4:a9:ed:b9:19:ec:7d:c1:21:f1:25:d5:42:87:
         97:03:87:d7:d3:55:8f:68:e6:3b:0f:6f:64:84:72:32:b0:bb:
         ad:5e:aa:0c:ad:53:2c:ec:1b:66:18:aa:db:3f:74:f2:e8:76:
         9e:90:5a:67:1b:29:3b:2b:32:6c:c0:5e:16:a6:2b:7d:47:29:
         38:14:09:d6:c2:6f:de:4d:b5:c3:83:e1:49:ab:26:b1:04:89:
         af:93:e9:a6:0d:ed:3c:9a:d0:76:b2:ef:ef:29:e6:ec:9d:5f:
         b6:53:d3:69:24:ae:28:19:f8:9d:39:a6:42:cd:ed:d8:5b:7a:
         c2:5f:16:61:4a:dc:7f:97:6c:7f:86:4c:dc:87:6d:42:fc:ac:
         88:86:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org