Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8CBCAC3B0E788951E9F93CC5201AE086BF135E81.cer
File:                     8CBCAC3B0E788951E9F93CC5201AE086BF135E81.cer (raw, json)
Hash identifier:          G+jNLRovSl/NFgxvhotoEd86FMs7mOKkztQCAscApNM=
Subject key identifier:   8C:BC:AC:3B:0E:78:89:51:E9:F9:3C:C5:20:1A:E0:86:BF:13:5E:81
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       45E9F9608491D48932E76A02F8A4ECF7D4F6B18B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/8CBCAC3B0E788951E9F93CC5201AE086BF135E81.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Jul 2023 00:23:28 +0000
Certificate not after:    Mon 15 Jul 2024 00:28:28 +0000
Subordinate resources:    AS: 268824
                          IP: 45.172.200.0/22
                          IP: 2804:5b30::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e9:f9:60:84:91:d4:89:32:e7:6a:02:f8:a4:ec:f7:d4:f6:b1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 17 00:23:28 2023 GMT
            Not After : Jul 15 00:28:28 2024 GMT
        Subject: CN=8CBCAC3B0E788951E9F93CC5201AE086BF135E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:1f:a8:fa:11:ae:e1:d7:ee:9c:37:81:eb:
                    75:f7:7b:27:5c:58:e2:87:09:02:ea:3b:ef:0d:bc:
                    6e:49:0b:09:d8:70:6a:2d:81:13:6b:4a:91:3e:41:
                    5a:92:be:e7:b8:fb:09:d3:49:03:d8:a0:51:09:1f:
                    2a:1b:05:eb:3d:57:a3:dd:55:b4:fb:be:79:fb:9c:
                    20:45:39:92:98:b4:f6:40:1d:65:12:25:45:99:bd:
                    fd:cb:7a:c9:da:ea:30:ab:7c:d7:23:6a:87:25:3d:
                    7c:ed:85:1e:95:df:be:83:8a:2a:27:6c:98:46:fc:
                    d5:3b:4e:54:85:e6:b7:4b:c7:87:5e:28:74:95:95:
                    c7:71:12:cc:4a:7c:9c:d1:2f:f3:34:93:1f:13:f2:
                    7b:6f:81:eb:a4:78:19:78:01:21:41:19:36:03:f2:
                    3c:6c:43:b4:f8:d8:92:18:5e:70:32:e3:b2:ca:ea:
                    f1:d3:85:86:2f:80:e1:60:f3:53:4f:05:55:9d:de:
                    94:a2:05:0a:ec:d7:41:87:60:7f:9f:e3:a2:08:1a:
                    a4:9a:c5:9e:e4:34:32:07:55:3e:bf:0b:3b:fa:4b:
                    78:6c:86:58:9c:fe:3f:42:c7:a5:e9:04:44:52:c8:
                    be:ae:05:31:33:de:c7:2f:ae:8c:f1:94:ed:52:5c:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:BC:AC:3B:0E:78:89:51:E9:F9:3C:C5:20:1A:E0:86:BF:13:5E:81
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/8CBCAC3B0E788951E9F93CC5201AE086BF135E81.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.200.0/22
                IPv6:
                  2804:5b30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268824

    Signature Algorithm: sha256WithRSAEncryption
         65:23:89:b5:ba:25:df:65:e1:ed:8b:36:5d:7d:c2:52:4c:dc:
         e9:de:07:01:6d:00:40:4c:76:7e:88:4b:a0:c1:c6:f8:64:45:
         e8:d4:71:bc:a0:84:ec:67:70:d6:65:6e:32:0e:2e:5b:be:38:
         62:cd:73:a9:19:1e:39:8b:b4:b1:2e:46:0b:32:77:1a:f0:c6:
         2a:f0:45:20:a5:c7:4c:24:35:64:26:bd:81:ca:4e:20:cd:f9:
         b6:28:fe:97:c8:4c:4d:1a:5d:b8:49:61:39:bc:f2:00:2f:44:
         0e:4d:9f:bd:61:a3:23:0a:9d:c3:29:00:83:b6:b0:56:35:1a:
         7b:cd:ae:82:4a:be:0b:4c:bd:96:ff:98:bb:42:41:d2:21:07:
         f7:d0:64:6c:eb:78:13:1a:b2:0d:64:0f:02:a8:88:88:70:34:
         f4:ed:f6:33:39:77:e7:fc:23:0b:bf:54:65:ce:3c:af:bb:b8:
         da:62:4c:a1:12:64:af:ad:55:c4:44:df:67:a6:39:15:aa:0f:
         a1:04:2c:fa:1a:5e:d2:0a:45:5e:77:21:8d:01:1b:d3:15:5b:
         0d:8b:67:c4:a7:71:87:55:05:3b:0f:e3:5d:1b:df:49:ca:10:
         92:51:6e:09:a7:62:d7:6d:11:fa:c5:b8:de:e6:63:2b:c1:97:
         50:91:75:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:49 2025 by rpki-client