Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8D00F02DE4FBD6E2F6F43B059CB1D59A9169C6CA.cer
File:                     8D00F02DE4FBD6E2F6F43B059CB1D59A9169C6CA.cer (raw, json)
Hash identifier:          6zONaS/QBBHdWmHv4VkJU7DTj2bTIRf6rmbcbaB0boU=
Subject key identifier:   8D:00:F0:2D:E4:FB:D6:E2:F6:F4:3B:05:9C:B1:D5:9A:91:69:C6:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3AE6B966BC6ECC9BB6A43918A4897F666A4DE0FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/8D00F02DE4FBD6E2F6F43B059CB1D59A9169C6CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 May 2023 01:24:28 +0000
Certificate not after:    Wed 22 May 2024 01:29:28 +0000
Subordinate resources:    AS: 52634
                          IP: 177.124.188.0/22
                          IP: 2804:d7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e6:b9:66:bc:6e:cc:9b:b6:a4:39:18:a4:89:7f:66:6a:4d:e0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 24 01:24:28 2023 GMT
            Not After : May 22 01:29:28 2024 GMT
        Subject: CN=8D00F02DE4FBD6E2F6F43B059CB1D59A9169C6CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:28:4c:db:c3:6b:c5:43:25:3d:cf:eb:99:
                    47:62:a3:50:68:1c:8d:63:11:92:89:f6:c2:94:fc:
                    75:56:96:5f:d8:c3:d8:5a:e7:3d:44:d5:f9:86:43:
                    fe:bf:d5:03:a8:52:fa:1d:ab:1d:31:78:f2:49:63:
                    31:23:ee:6f:68:4e:da:ad:86:b7:ca:1f:fe:01:9d:
                    8c:43:3d:39:b7:18:66:64:c8:fe:65:1e:79:87:e1:
                    09:e9:1b:5e:9e:62:dd:95:1b:94:a1:e2:03:4e:2c:
                    3e:4e:75:e0:78:c5:70:6d:12:0e:a2:e4:28:c0:ad:
                    d3:28:99:09:ef:6a:53:d1:c8:d4:0d:04:57:46:e3:
                    96:dc:27:e9:99:44:7f:28:dc:31:f4:02:57:2f:51:
                    dd:11:26:e7:d4:ba:7e:b7:ee:8b:13:2d:eb:09:12:
                    ea:e4:57:a0:09:bd:ee:c6:57:84:62:74:66:d1:40:
                    67:c3:3a:54:2d:2e:7e:a4:35:60:aa:77:32:62:a0:
                    10:a3:09:91:66:b6:e2:25:0d:61:17:0e:91:b5:3e:
                    f9:dc:ef:e6:cf:e9:b2:8f:2d:06:43:e0:e3:a2:e9:
                    d1:27:08:d7:90:6f:be:d8:6c:d7:e3:a2:32:65:ae:
                    ed:fb:6a:80:57:32:d1:87:5c:e7:a0:87:6c:49:4f:
                    1e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:00:F0:2D:E4:FB:D6:E2:F6:F4:3B:05:9C:B1:D5:9A:91:69:C6:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/8D00F02DE4FBD6E2F6F43B059CB1D59A9169C6CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.188.0/22
                IPv6:
                  2804:d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52634

    Signature Algorithm: sha256WithRSAEncryption
         31:a5:a9:1a:20:f3:ce:fe:ca:2b:43:d9:3a:67:a8:c9:bb:05:
         21:5f:57:af:a3:06:9c:31:bf:3f:a1:09:e7:cc:1d:59:8f:48:
         22:67:1a:22:d7:aa:bc:be:16:a4:e3:07:5b:8d:33:d6:17:0a:
         1f:89:09:81:82:b0:1b:9d:fa:6a:a4:aa:eb:c3:31:6e:97:95:
         78:5a:cf:71:69:80:ba:ea:d9:6f:bf:cd:c2:32:36:7f:c7:a7:
         d2:93:f0:14:b3:e9:b2:e7:ef:52:d2:0e:47:50:e2:cb:4e:b9:
         57:44:94:db:5f:de:c8:ba:07:52:fd:83:37:6e:72:35:6a:c2:
         37:51:76:e8:12:ce:a6:5a:a9:58:5f:ea:bb:70:e0:f2:0e:e4:
         58:8b:f8:f5:29:05:7e:7a:3b:78:25:00:a3:f1:2f:e9:f0:59:
         4e:b9:7e:d1:29:c4:50:7c:0c:e1:ca:8c:72:d0:d6:e1:5f:86:
         31:e0:f1:da:3b:86:50:6f:8e:65:4e:e4:54:6c:3b:f4:83:00:
         39:46:d8:e7:98:65:06:25:d8:b5:e0:0a:84:20:a4:ab:10:0a:
         f5:f1:19:d9:f4:16:da:92:f2:91:b9:1d:83:a0:c2:69:32:16:
         50:9e:4b:6f:11:03:38:70:ca:1e:53:a4:cd:d6:24:d5:3b:de:
         f3:cf:55:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org