Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8D821820313E72C5F7613F5BB368DA0ECE7A9BBA.cer
File:                     8D821820313E72C5F7613F5BB368DA0ECE7A9BBA.cer (raw, json)
Hash identifier:          fgfQs6elZP50R7fM1FqhXfTBGQietmvALxTpF9j6D+U=
Subject key identifier:   8D:82:18:20:31:3E:72:C5:F7:61:3F:5B:B3:68:DA:0E:CE:7A:9B:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       467D301EA63C9496B36EF205F58750ECC00E5D72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/8D821820313E72C5F7613F5BB368DA0ECE7A9BBA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 00:26:53 +0000
Certificate not after:    Tue 23 Jul 2024 00:31:53 +0000
Subordinate resources:    AS: 52913
                          IP: 167.249.4.0/22
                          IP: 170.150.76.0/22
                          IP: 170.246.164.0/22
                          IP: 177.23.168.0/21
                          IP: 179.127.40.0/21
                          IP: 190.109.80.0/22
                          IP: 2804:1088::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7d:30:1e:a6:3c:94:96:b3:6e:f2:05:f5:87:50:ec:c0:0e:5d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 00:26:53 2023 GMT
            Not After : Jul 23 00:31:53 2024 GMT
        Subject: CN=8D821820313E72C5F7613F5BB368DA0ECE7A9BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:37:40:6e:48:61:73:7f:e2:ee:5a:5c:07:
                    3a:ab:16:81:e5:ec:bb:94:32:07:82:e6:60:e4:5d:
                    cf:8b:8c:df:a4:1a:b2:88:be:b2:17:33:38:fd:88:
                    bc:a4:66:88:52:d9:00:7d:23:7b:1e:7c:33:9c:54:
                    2e:9b:02:79:42:73:c5:e5:88:46:b5:35:94:1d:94:
                    fd:53:55:1a:f2:8b:3a:74:a6:a0:6b:03:a5:d5:19:
                    f4:66:73:66:10:81:be:3a:40:b5:9e:28:04:d8:fd:
                    b7:c1:57:cb:cc:41:74:a4:eb:f0:0e:84:9a:97:c2:
                    cf:78:23:79:4a:9f:ff:19:12:8b:c9:1c:64:62:34:
                    76:da:5d:5a:2b:7a:17:79:0a:41:b5:cc:fb:2f:3e:
                    24:ed:4d:77:53:7d:03:82:0c:90:68:c6:e9:6e:bd:
                    d6:b7:8f:df:6d:d7:7d:ab:7a:e3:ac:04:4d:56:c3:
                    b6:91:c3:4f:91:bc:c6:b5:16:0b:78:8a:ad:aa:52:
                    92:e3:be:58:19:bd:f4:82:35:3c:4e:1f:49:23:ee:
                    81:a3:b5:2e:7d:6a:82:51:be:19:1a:1f:a7:4a:18:
                    75:50:15:64:4b:d1:ce:2b:77:2a:18:1e:bc:f9:89:
                    38:8e:4b:78:50:96:b8:a2:94:59:49:b4:10:5f:3d:
                    ab:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:82:18:20:31:3E:72:C5:F7:61:3F:5B:B3:68:DA:0E:CE:7A:9B:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/8D821820313E72C5F7613F5BB368DA0ECE7A9BBA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.4.0/22
                  170.150.76.0/22
                  170.246.164.0/22
                  177.23.168.0/21
                  179.127.40.0/21
                  190.109.80.0/22
                IPv6:
                  2804:1088::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52913

    Signature Algorithm: sha256WithRSAEncryption
         9e:c1:08:25:46:b9:47:8d:43:2d:92:4e:d4:f7:8a:ff:fb:7e:
         fd:ff:68:ac:92:56:ec:02:fd:15:74:ec:18:2d:27:a1:59:06:
         c1:7b:11:18:5e:9c:77:26:de:75:ac:30:7a:38:de:7e:f3:7c:
         e0:0b:9c:2f:05:7b:bb:04:9a:c4:89:40:57:90:86:2b:7b:21:
         93:2b:37:8a:65:d0:4a:8d:33:04:54:f3:96:4f:25:10:8c:99:
         11:77:0e:85:a9:06:7f:f9:7c:1d:92:11:69:6b:eb:62:77:17:
         47:bc:01:a5:80:ae:87:7d:cc:69:da:c1:cd:6d:d5:e4:b9:9d:
         67:90:4d:ea:5b:de:0d:13:a6:03:bd:db:11:03:11:f7:44:f7:
         ca:67:52:66:ff:84:4a:df:72:80:71:8f:0a:7b:85:c2:8f:c3:
         f9:d1:18:56:57:e6:8a:69:fe:89:d2:8e:34:a7:c0:70:c7:e8:
         00:ad:c7:b6:59:3d:9c:b5:a9:10:af:fb:d3:2e:c1:b1:f3:74:
         b2:cb:a3:e9:28:ad:a6:27:37:e6:f5:4f:06:97:62:24:6c:00:
         fc:d4:2d:e4:75:21:9b:0d:c6:ff:f2:10:94:b6:58:48:91:e1:
         9d:5c:e4:a0:b6:8e:ad:c2:8e:bd:24:75:18:26:79:d7:b0:15:
         3a:50:cd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org