Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.cer
File:                     8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.cer (raw, json)
Hash identifier:          D/qRslbmVCE/2EY5r48+XL+2DF+Jf9rHRgfZKD4nWPo=
Subject key identifier:   8C:A6:EB:3C:7D:A6:39:0F:45:D1:21:FB:13:DB:C8:FC:33:00:A1:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E276AFEE46E9F59770A6A562E13D8C8A1B282B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 11:22:20 +0000
Certificate not after:    Tue 05 Nov 2024 11:27:20 +0000
Subordinate resources:    AS: 272658
                          IP: 2804:86a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:27:6a:fe:e4:6e:9f:59:77:0a:6a:56:2e:13:d8:c8:a1:b2:82:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 11:22:20 2023 GMT
            Not After : Nov  5 11:27:20 2024 GMT
        Subject: CN=8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:86:81:26:0a:c0:ce:31:cc:8b:3a:98:1a:
                    33:c8:65:29:8b:35:72:7f:90:e5:94:4c:f7:5f:38:
                    c8:48:b7:d9:b9:60:00:11:0c:35:d6:8a:c2:60:b1:
                    4b:24:22:09:17:f5:ed:50:98:f5:e0:2a:6e:ef:32:
                    22:76:98:55:be:30:f5:36:91:a3:52:37:5e:09:ea:
                    ca:1c:05:6c:79:35:5b:d7:bf:4a:6c:db:e1:10:84:
                    13:e5:3c:16:75:28:12:8a:59:15:27:8f:a9:73:f9:
                    3c:6e:f6:10:05:e0:9f:87:96:46:3e:f8:c9:a2:36:
                    62:c7:3e:2c:a1:22:c0:c9:05:b9:d5:a7:9c:95:f9:
                    93:35:e0:4e:bc:86:f6:ce:52:9d:ec:f8:8c:91:a3:
                    72:18:18:1f:a7:50:85:51:96:28:7f:e8:07:64:92:
                    71:91:b7:61:c7:e7:5d:d8:04:e3:86:5d:59:23:a6:
                    0a:b8:44:5b:19:cf:72:8f:0b:62:0b:c6:ee:86:05:
                    27:12:66:df:85:7d:c8:8b:f3:72:3f:50:07:52:a2:
                    1e:4e:87:fd:f7:94:2f:92:2c:32:06:4e:69:5b:e1:
                    94:c0:db:6e:d2:e6:d8:7c:36:43:2f:c3:cf:ca:18:
                    a4:a4:20:e9:db:f3:c2:59:8e:0d:7e:2a:37:ac:af:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:A6:EB:3C:7D:A6:39:0F:45:D1:21:FB:13:DB:C8:FC:33:00:A1:23
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272658

    Signature Algorithm: sha256WithRSAEncryption
         10:7f:a1:e6:17:02:d7:ee:04:4b:bd:81:a6:01:2d:34:85:ac:
         65:de:1a:34:be:35:91:6f:52:db:63:51:35:9b:2b:13:f5:6d:
         c8:e0:d7:85:18:6f:ea:00:d2:d9:cd:5a:8a:0c:de:d2:d2:4f:
         eb:8c:e0:fa:ba:4d:2d:b8:8d:dc:4a:fd:bd:e8:33:50:d2:41:
         65:a7:e8:9d:55:ef:0a:0a:bf:27:a0:e5:4c:86:8b:32:5d:60:
         26:fa:37:75:df:40:49:57:18:63:b9:e9:69:ab:a3:cc:38:1e:
         9b:ec:65:ca:09:97:98:ac:00:c8:9f:8f:2d:16:8f:c9:d0:60:
         f8:32:0e:c8:56:0e:57:11:59:5e:b5:89:7f:96:45:a6:48:de:
         36:13:16:b2:36:42:9d:f0:34:02:20:3b:cf:f2:46:f2:f0:47:
         05:03:f7:4f:30:e8:c3:06:63:2f:17:e5:88:07:d7:fa:87:bb:
         5a:df:25:ac:77:a9:e8:aa:ad:83:43:6d:3f:b8:65:44:8c:c4:
         48:b3:40:0d:18:46:9a:fc:4b:0b:21:95:29:24:8b:58:07:c0:
         39:e0:c5:f9:93:f2:e7:3e:a9:17:93:5f:8a:28:a2:a1:8f:57:
         e8:ee:73:01:ce:e8:71:20:5b:3c:b5:70:66:25:bf:b7:02:2f:
         8e:77:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org