Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C89BC6D3C53BEE7DDAF59B90DB23875F359008B.cer
File:                     8C89BC6D3C53BEE7DDAF59B90DB23875F359008B.cer (raw, json)
Hash identifier:          MKmEyIp+mrzc06EyLJKK3q+0C83yWh2FFx+R8NdXce0=
Subject key identifier:   8C:89:BC:6D:3C:53:BE:E7:DD:AF:59:B9:0D:B2:38:75:F3:59:00:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12F883AEB136119EC7FE4239F0ACE6836E14150D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/8C89BC6D3C53BEE7DDAF59B90DB23875F359008B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 17:32:36 +0000
Certificate not after:    Mon 27 Jan 2025 17:37:36 +0000
Subordinate resources:    AS: 268563
                          IP: 45.163.168.0/22
                          IP: 2804:5318::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f8:83:ae:b1:36:11:9e:c7:fe:42:39:f0:ac:e6:83:6e:14:15:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 29 17:32:36 2024 GMT
            Not After : Jan 27 17:37:36 2025 GMT
        Subject: CN=8C89BC6D3C53BEE7DDAF59B90DB23875F359008B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:68:e9:47:06:61:97:d2:15:86:9c:66:d3:
                    b5:eb:77:45:68:95:e9:e9:d0:b2:ca:6f:5b:51:02:
                    a3:12:23:64:00:c9:13:53:e0:5a:70:61:15:96:99:
                    73:44:fb:9c:61:46:da:4e:a7:ee:93:6b:75:5d:c8:
                    c9:8a:1b:ad:7c:8b:f6:0a:f5:ae:fe:09:37:b6:80:
                    b7:22:07:d7:46:c2:0c:2c:45:af:f6:8e:c0:ba:35:
                    df:d1:a4:3c:60:f1:43:98:0e:bb:b5:6f:0f:6c:c9:
                    06:73:82:d5:ee:0a:f4:c9:18:0c:68:f0:dc:7c:0d:
                    ed:fb:89:c4:fd:a8:77:75:e4:84:34:04:7a:22:ec:
                    5e:65:68:3c:fc:6d:ce:cb:96:fb:44:7e:22:6a:3f:
                    c7:c9:e0:53:82:b2:33:6e:aa:c4:24:0c:41:df:6b:
                    fb:2a:ce:7c:98:fd:c8:68:19:14:db:22:6e:31:e7:
                    f0:9b:08:7a:bf:61:a1:9b:c0:54:59:ca:05:75:1a:
                    59:c3:5c:81:ac:d4:43:bf:bc:49:a9:97:0e:13:3e:
                    96:80:a0:61:ed:b7:a5:4b:ed:a3:e5:10:15:31:55:
                    25:f0:64:03:71:81:07:6e:0d:35:6d:89:67:48:c7:
                    14:fb:ec:d8:ba:1b:26:07:4a:8f:30:05:b1:4c:45:
                    52:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:89:BC:6D:3C:53:BE:E7:DD:AF:59:B9:0D:B2:38:75:F3:59:00:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/8C89BC6D3C53BEE7DDAF59B90DB23875F359008B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.168.0/22
                IPv6:
                  2804:5318::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268563

    Signature Algorithm: sha256WithRSAEncryption
         71:d9:56:35:7e:1d:a4:83:37:55:c2:9a:b9:23:2c:a6:7a:cf:
         16:64:4e:53:b2:14:75:92:f9:7e:e3:a2:46:4a:1b:bf:75:09:
         02:fa:90:07:c8:bf:f2:0e:79:ec:c8:16:ed:ac:1b:f9:77:f5:
         fb:1c:4a:59:68:ff:c2:3f:3e:1a:03:1c:ff:d6:31:75:68:b2:
         34:47:39:b0:2c:f0:88:89:21:7e:58:22:8a:f1:21:39:de:93:
         1d:84:ce:2c:8f:07:40:85:dd:77:53:d5:20:91:dc:fb:01:38:
         f7:1e:1e:06:de:16:e1:07:29:cd:df:bd:1c:da:ce:08:74:5c:
         c5:de:94:a6:75:93:57:b6:8a:f5:0c:d9:df:84:04:17:23:53:
         5b:51:74:66:db:a2:ca:73:a0:01:99:37:cc:af:1f:08:b6:32:
         4f:25:15:03:36:b8:31:15:07:9b:64:8b:3f:92:e7:bf:cc:fa:
         f6:29:b9:ec:2d:69:b7:24:9d:40:d8:d5:b4:61:8a:a5:da:e7:
         1a:b5:0e:7c:09:30:b6:1f:5e:08:c7:52:c4:88:57:af:32:34:
         cc:4a:04:b1:fb:05:90:cb:75:7d:f9:7f:7d:6a:f6:79:b4:79:
         de:2c:68:0f:09:29:12:40:e6:8d:12:b5:06:50:25:17:45:60:
         fa:99:5e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:49:52 2025 by rpki-client