Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072.cer
File:                     8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072.cer (raw, json)
Hash identifier:          Beev8YCAYp0C8tWosGJUmjAbkt/QPGfXF9ft0Jmy8YM=
Subject key identifier:   8D:86:DE:FA:AD:82:E3:F5:FE:08:D6:8C:CC:6E:A2:0E:CF:88:40:72
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       034C531A26ED0579D311239DA73A7CAA3A380AA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/0/8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 06:43:16 +0000
Certificate not after:    Fri 01 Nov 2024 06:48:16 +0000
Subordinate resources:    AS: 269649
                          IP: 45.189.20.0/22
                          IP: 2804:67c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4c:53:1a:26:ed:05:79:d3:11:23:9d:a7:3a:7c:aa:3a:38:0a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 06:43:16 2023 GMT
            Not After : Nov  1 06:48:16 2024 GMT
        Subject: CN=8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bf:14:d6:83:fa:29:2a:68:96:7f:c9:30:75:
                    8a:3c:88:5e:5a:88:32:76:64:d9:05:42:24:97:43:
                    8d:38:0e:8a:f1:4f:09:84:7c:92:73:3f:17:cb:60:
                    32:24:d5:8c:6c:61:61:3c:ed:64:4f:7f:89:3c:91:
                    1d:09:65:91:ba:17:49:97:dd:0f:46:19:7a:24:79:
                    40:47:27:62:7a:81:c0:12:1e:8d:e3:5c:c9:ff:ca:
                    24:96:cc:11:09:ea:7f:d1:68:c3:ed:c2:fe:29:85:
                    19:8c:3d:90:42:c3:20:e2:a5:b1:09:5d:cb:fb:a7:
                    04:7b:7d:83:34:64:2d:9d:54:2c:42:c7:03:41:a8:
                    e0:0d:77:6b:6f:06:0e:44:7b:99:b5:4c:3e:27:04:
                    89:dd:89:0e:74:00:b6:ed:86:ef:2d:be:f5:9a:65:
                    b9:84:bb:7c:fb:7b:03:fe:15:64:88:e5:29:bb:42:
                    93:dc:cf:3b:66:4e:84:8c:ce:a1:20:cd:ad:bc:a3:
                    0b:e9:e4:2d:cd:59:74:fa:87:0e:6d:45:80:8d:85:
                    91:4f:d8:61:61:3f:60:28:05:19:4d:c9:28:c0:fe:
                    a5:0a:fa:5e:ee:fd:a6:a6:be:9c:51:7b:30:df:c3:
                    f2:cd:2a:b1:4c:d7:bd:a2:d6:90:5e:74:9b:08:87:
                    40:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:86:DE:FA:AD:82:E3:F5:FE:08:D6:8C:CC:6E:A2:0E:CF:88:40:72
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/0/8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.20.0/22
                IPv6:
                  2804:67c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269649

    Signature Algorithm: sha256WithRSAEncryption
         3b:57:a5:53:c0:c5:a4:c8:b8:69:9a:4d:b9:6a:a4:15:5f:33:
         3b:c6:f7:5d:61:54:a8:3b:30:0c:f4:00:23:37:b8:c8:28:e8:
         aa:aa:5d:dd:30:90:30:1f:cf:16:a8:13:b7:d7:29:66:40:f3:
         11:59:b4:3d:1c:d8:6c:28:c6:29:2a:d9:69:9c:03:7c:cf:00:
         24:b0:d9:20:c3:e4:6f:71:9d:c7:cf:87:82:6e:53:ce:7d:ca:
         bc:1a:27:a2:6f:9c:c8:20:bc:ce:6e:0e:6a:c4:d1:a6:05:da:
         49:66:11:2e:ae:ae:c8:3d:f6:5e:e8:7a:e9:08:b0:aa:a8:2f:
         70:b6:19:63:fd:ed:97:6a:15:e6:87:4e:6c:56:ca:39:76:f7:
         1b:a7:8c:30:bd:fe:7b:72:4e:47:22:ef:40:63:35:a6:5f:fe:
         77:fb:85:f1:c5:38:25:25:16:43:3f:47:9c:d9:75:8b:10:6a:
         09:97:0f:b1:98:2a:37:72:77:04:71:07:4d:bd:6b:36:4c:45:
         75:bc:b7:5b:e9:09:82:7a:8e:71:4b:e8:47:52:c7:db:fa:e9:
         47:8c:13:33:66:ca:cc:56:3e:c7:40:63:ff:ad:2f:c2:ae:28:
         52:b9:75:37:40:eb:88:e2:31:77:9a:45:76:4b:9e:03:93:01:
         cd:74:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org