Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8D23638689C9A42F600D59615C7D7177B63F1781.cer
File:                     8D23638689C9A42F600D59615C7D7177B63F1781.cer (raw, json)
Hash identifier:          qTIW7YtcS4JMP9wRTfzqL6W3iIM9UfJttRohVNFXvU4=
Subject key identifier:   8D:23:63:86:89:C9:A4:2F:60:0D:59:61:5C:7D:71:77:B6:3F:17:81
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2EFEA92CE0AEF7242AC4AD173A2A748B36AEBB9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/8D23638689C9A42F600D59615C7D7177B63F1781.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Feb 2022 19:17:50 +0000
Certificate not after:    Fri 03 Feb 2023 19:22:50 +0000
Subordinate resources:    AS: 266151
                          IP: 160.238.104.0/22
                          IP: 2804:3b78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fe:a9:2c:e0:ae:f7:24:2a:c4:ad:17:3a:2a:74:8b:36:ae:bb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  4 19:17:50 2022 GMT
            Not After : Feb  3 19:22:50 2023 GMT
        Subject: CN=8D23638689C9A42F600D59615C7D7177B63F1781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:57:89:86:b3:4e:a7:f2:cc:a5:b1:7e:7d:13:
                    7c:5a:93:aa:bb:08:7c:33:d8:93:fc:5f:4e:0e:96:
                    97:fa:76:04:5f:a2:90:b0:eb:c3:9c:ab:df:e3:a9:
                    21:01:94:fe:f0:e3:34:b9:aa:53:ec:8b:c7:b7:87:
                    96:5c:d0:53:8b:e9:9f:b5:c4:96:c9:bd:a6:1f:13:
                    4f:32:30:bc:b2:1a:7c:5e:ea:12:86:d2:2d:1c:43:
                    d9:72:d8:b6:1a:c4:b2:6b:e1:96:1c:f7:fb:26:9e:
                    98:57:d1:72:b1:05:77:ee:c5:a9:a2:f9:26:4c:25:
                    e7:c8:bc:62:e0:26:62:0c:1b:f0:94:23:0c:db:78:
                    c4:a9:80:66:71:c5:1b:0c:b9:fa:e0:26:47:78:22:
                    93:b5:79:41:ad:56:74:a3:6d:9e:c1:f6:de:af:fe:
                    7e:a9:3c:8c:98:5c:38:08:22:3a:f4:74:32:df:b0:
                    3c:e6:95:15:cf:c2:6f:44:f6:60:04:cc:e6:bc:40:
                    38:90:e1:a2:7f:d3:9a:a1:cf:10:47:bc:4f:cd:8d:
                    48:f3:9d:ef:28:25:9b:a6:b8:13:87:e4:6e:20:60:
                    39:9e:2b:a8:d3:e8:91:94:f7:22:fd:f1:84:52:46:
                    7b:87:17:91:e5:ef:fa:e4:86:5f:b3:62:68:41:2d:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:23:63:86:89:C9:A4:2F:60:0D:59:61:5C:7D:71:77:B6:3F:17:81
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/8D23638689C9A42F600D59615C7D7177B63F1781.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.104.0/22
                IPv6:
                  2804:3b78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266151

    Signature Algorithm: sha256WithRSAEncryption
         b8:37:46:1a:fd:0f:d4:bc:fd:1f:e3:82:40:37:c3:61:72:1f:
         8b:2b:a8:4c:67:07:96:12:c6:29:6c:58:03:02:ce:e6:eb:5e:
         b1:4e:69:ae:45:67:93:c2:88:a4:3b:0c:c4:8a:19:b2:e5:2b:
         ef:24:2b:2d:fb:9f:ae:8c:48:c9:5a:13:b4:9e:45:aa:dd:94:
         0c:aa:73:2e:30:32:10:26:c2:22:35:23:8e:23:27:ba:20:9f:
         69:86:59:4b:08:b4:84:7d:bb:d1:0c:3a:50:ed:0c:99:bb:bb:
         a4:76:0f:93:b0:76:86:ae:74:dd:02:0a:d5:51:dd:6e:41:8f:
         52:90:f8:19:8f:8f:a6:4a:f6:a9:3d:2a:f5:6a:78:51:48:e1:
         1d:3d:a4:ba:4b:34:8d:9c:e8:e4:ea:03:2c:58:3a:56:68:0b:
         3d:e1:ed:e3:7c:3a:61:3e:93:c6:1a:85:8c:67:6c:ad:57:3f:
         fc:61:8f:9e:73:11:15:5c:cf:a1:5f:c2:e2:50:0b:a3:12:15:
         27:df:19:5d:dd:50:9a:0b:67:e8:b8:c0:8f:05:d7:a4:79:dc:
         29:0a:5f:8f:18:a8:39:a8:a2:86:bd:ba:c0:86:31:2f:44:b4:
         cc:e4:db:40:08:4a:26:68:f1:e5:66:cd:27:2b:77:59:2f:2b:
         e3:66:35:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org