Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8CB7B55A266F50744D46DF21945D94488062F90B.cer
File:                     8CB7B55A266F50744D46DF21945D94488062F90B.cer (raw, json)
Hash identifier:          u4QdFUOcak2TkGfdUg0VLxQu73AMpkQUV+wCwSIPiqc=
Subject key identifier:   8C:B7:B5:5A:26:6F:50:74:4D:46:DF:21:94:5D:94:48:80:62:F9:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       546D8C18726DA2D011380420DA8BC1FBADDB0EEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/8CB7B55A266F50744D46DF21945D94488062F90B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Oct 2021 14:00:26 +0000
Certificate not after:    Fri 21 Oct 2022 14:05:26 +0000
Subordinate resources:    AS: 270692
                          IP: 177.128.52.0/22
                          IP: 2804:6fe8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6d:8c:18:72:6d:a2:d0:11:38:04:20:da:8b:c1:fb:ad:db:0e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 22 14:00:26 2021 GMT
            Not After : Oct 21 14:05:26 2022 GMT
        Subject: CN=8CB7B55A266F50744D46DF21945D94488062F90B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:85:2f:7b:d4:f6:06:40:59:57:ed:41:0a:
                    11:7a:5a:0c:4b:7f:45:63:63:6c:c0:28:6d:41:f1:
                    ac:13:80:6c:ac:a5:50:37:de:3c:4b:7e:5b:23:b4:
                    ca:a9:b5:1c:66:75:f8:e6:49:31:ab:b0:26:78:8d:
                    e5:86:34:78:20:13:5c:70:61:6b:34:0d:d7:17:13:
                    2a:41:e8:53:c0:e8:24:fa:55:56:7a:13:79:5e:94:
                    89:ad:d0:ed:b2:8c:e8:e8:93:2a:41:03:6f:9f:96:
                    2a:e7:9d:d5:e9:18:ff:db:8d:59:b6:56:68:a0:aa:
                    ce:66:75:dc:66:ce:95:46:1f:83:7f:1c:b3:51:60:
                    ab:86:79:31:dc:b9:12:76:58:cc:db:a7:d6:71:86:
                    13:d7:85:b1:52:08:b7:17:63:1e:3d:65:f4:ed:b5:
                    27:fb:ea:8e:92:b9:42:e4:36:f0:da:12:91:15:58:
                    fc:3a:c2:ba:be:dc:6b:5d:97:f2:4f:30:91:cb:f7:
                    de:68:eb:7c:21:cc:7c:5a:f1:b6:e3:cf:87:87:b4:
                    b7:0f:ee:a4:9e:9b:4b:22:4d:81:87:f4:9f:fa:c1:
                    34:60:99:53:29:9e:3e:5a:f6:4d:80:e1:92:a4:b2:
                    47:83:29:ef:6a:19:83:91:98:72:b4:04:18:b0:4e:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:B7:B5:5A:26:6F:50:74:4D:46:DF:21:94:5D:94:48:80:62:F9:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/8CB7B55A266F50744D46DF21945D94488062F90B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.52.0/22
                IPv6:
                  2804:6fe8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270692

    Signature Algorithm: sha256WithRSAEncryption
         03:77:33:2c:2c:38:1a:f0:16:51:94:d5:45:97:12:94:7f:df:
         d7:48:09:8e:75:25:35:08:9a:27:62:59:3a:13:83:85:6e:82:
         0b:d7:4f:5c:70:2d:95:e2:78:47:a2:91:1d:2b:3e:1c:71:de:
         75:8f:f1:e7:14:80:38:1d:34:ad:3c:e3:fc:5a:c9:60:45:ff:
         4c:68:2f:1f:04:38:b4:93:f2:3f:0e:e8:65:2b:bd:af:89:96:
         9e:e6:63:00:3d:21:3a:6d:65:a6:a4:8c:2c:16:02:c5:3e:fa:
         c0:e8:60:78:e6:9d:52:79:7f:0f:48:8c:5e:9c:e1:a5:ef:c4:
         12:7e:66:2e:6b:86:fb:59:c4:11:a0:1f:b6:8a:6a:40:67:ce:
         fb:a5:fe:e8:7a:ef:05:0e:62:c0:c9:0f:ca:32:05:b3:48:bf:
         7c:c0:6d:4e:66:88:5b:5f:15:a9:0e:72:59:7f:0d:ab:0d:81:
         19:f4:60:7d:39:07:0a:93:10:fa:85:f7:16:78:ab:0b:81:65:
         40:93:88:fd:32:37:7a:82:06:3b:50:3b:e0:68:8b:0d:87:ec:
         58:d3:c2:2b:51:b4:85:cb:25:70:5b:f2:da:ec:12:31:d4:23:
         61:5a:ac:77:86:b0:ea:d2:90:fc:7e:0e:b6:6b:60:2a:ec:fe:
         e8:64:88:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:11:54 2025 by rpki-client