Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8CB5CED2B8D228EB7F8FF3598FA49FCE19031285.cer
File:                     8CB5CED2B8D228EB7F8FF3598FA49FCE19031285.cer (raw, json)
Hash identifier:          9Fi/xbg5WeS2IogokfwyysHjys0bS5Op0nRxUt/Euvc=
Subject key identifier:   8C:B5:CE:D2:B8:D2:28:EB:7F:8F:F3:59:8F:A4:9F:CE:19:03:12:85
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E0FE26905430FDA042DCF55F2AD693A82DCB019
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/8CB5CED2B8D228EB7F8FF3598FA49FCE19031285.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Apr 2023 15:12:04 +0000
Certificate not after:    Wed 24 Apr 2024 15:17:04 +0000
Subordinate resources:    AS: 267501
                          IP: 201.182.64.0/22
                          IP: 2804:4274::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:0f:e2:69:05:43:0f:da:04:2d:cf:55:f2:ad:69:3a:82:dc:b0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 26 15:12:04 2023 GMT
            Not After : Apr 24 15:17:04 2024 GMT
        Subject: CN=8CB5CED2B8D228EB7F8FF3598FA49FCE19031285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:a7:fb:94:f6:86:7f:b4:ae:90:e5:a4:fe:
                    a1:75:fc:f5:40:00:5a:91:16:96:34:8e:d2:81:70:
                    2d:a6:cb:06:35:4f:e1:b8:a6:00:a0:eb:9d:e3:1a:
                    14:ff:f3:63:d7:3b:d7:f4:4a:56:9a:5b:fa:43:2c:
                    e1:ae:1f:78:83:47:3a:fe:d0:54:d2:09:39:ca:45:
                    3f:43:9f:f6:df:b1:76:b0:5b:d9:38:ba:9c:76:74:
                    01:bb:3c:e3:cb:57:1b:42:09:cc:23:20:58:21:34:
                    e2:e3:c1:e5:f0:b9:df:41:9c:1a:61:84:2a:62:7d:
                    8a:2a:3e:96:dd:16:df:ad:e3:0b:99:03:c4:40:07:
                    b1:d8:15:69:b5:e0:93:d2:9e:f7:85:3d:a5:2c:08:
                    6a:47:99:55:db:67:52:bc:fd:f4:90:2f:99:86:4b:
                    7f:1f:46:50:75:8d:c1:28:bf:0e:3e:ac:8a:0e:71:
                    7c:26:a0:c4:3b:3f:00:95:1c:25:bf:33:05:f8:74:
                    2c:f9:a2:77:d8:41:b2:73:1b:a4:43:85:5a:bb:53:
                    24:25:ea:7e:fa:0c:a2:eb:2f:5d:a0:df:f3:c5:0e:
                    5b:29:c3:48:9d:98:ac:16:cc:cc:e4:92:0a:dc:7e:
                    fb:f3:8e:01:1e:81:9a:9f:0c:38:ab:f8:27:f3:4e:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:B5:CE:D2:B8:D2:28:EB:7F:8F:F3:59:8F:A4:9F:CE:19:03:12:85
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/8CB5CED2B8D228EB7F8FF3598FA49FCE19031285.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.64.0/22
                IPv6:
                  2804:4274::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267501

    Signature Algorithm: sha256WithRSAEncryption
         80:de:45:fd:ab:b3:c0:6c:95:23:49:a1:46:21:7b:52:1a:4c:
         63:7b:d4:c2:e3:5e:de:8b:e4:21:aa:2a:e1:b6:f0:18:9e:8e:
         12:5f:11:e8:1e:c9:fe:f3:ff:d4:51:3d:95:42:9f:aa:a6:35:
         b5:a7:5e:aa:8c:cd:a5:71:9a:c5:07:21:ee:56:d1:ea:3e:b7:
         28:10:6c:e8:58:b3:11:e5:0e:2b:ba:3a:6c:de:72:31:58:6a:
         83:fd:49:74:85:25:12:15:0e:cb:49:78:ff:b8:08:4f:41:3b:
         87:84:eb:37:d2:62:d2:76:fd:27:3e:03:59:85:e9:c5:1b:c1:
         33:92:2d:86:c8:70:1e:20:ad:d5:f9:75:7d:8a:6d:b8:e1:3a:
         b2:6f:12:8c:7c:f0:52:19:9c:a7:bd:fc:e2:d6:ff:e8:18:b4:
         7c:80:f6:4c:cc:f6:59:5f:6e:b9:77:74:49:ed:60:58:ed:b7:
         bb:db:31:3f:1c:d8:b9:ef:a2:26:86:6a:92:94:e6:58:bc:c9:
         7d:d4:0a:e5:24:c6:33:44:b3:a1:fd:21:3b:f9:d3:1c:74:67:
         73:24:60:64:11:4d:9c:59:14:82:4e:d9:87:0c:d9:ff:1d:1e:
         55:ea:10:15:a5:e8:c6:ca:dd:c4:10:b1:1e:9d:af:ea:92:12:
         54:66:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org