Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8D9EDFA41CEFC8D79B2527C6EA6C4DA0DEF23196.cer
File:                     8D9EDFA41CEFC8D79B2527C6EA6C4DA0DEF23196.cer (raw, json)
Hash identifier:          /i7gnK89+CkjgcaOzyVvldtI9eGlJA1jMN5W4dbuqjo=
Subject key identifier:   8D:9E:DF:A4:1C:EF:C8:D7:9B:25:27:C6:EA:6C:4D:A0:DE:F2:31:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F6CE42783E286A5274854F074AB50D07AB7BFEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/8D9EDFA41CEFC8D79B2527C6EA6C4DA0DEF23196.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Jan 2023 12:36:00 +0000
Certificate not after:    Fri 12 Jan 2024 12:41:00 +0000
Subordinate resources:    AS: 268440
                          IP: 45.161.20.0/22
                          IP: 2804:5140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6c:e4:27:83:e2:86:a5:27:48:54:f0:74:ab:50:d0:7a:b7:bf:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 13 12:36:00 2023 GMT
            Not After : Jan 12 12:41:00 2024 GMT
        Subject: CN=8D9EDFA41CEFC8D79B2527C6EA6C4DA0DEF23196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:4c:62:1a:22:98:15:80:38:f1:f8:92:0a:
                    26:34:85:00:64:f4:41:ce:8f:09:0d:1d:13:05:27:
                    b9:93:c6:3d:66:68:da:d0:c1:86:3b:70:4c:a9:32:
                    7b:46:4b:ef:47:26:4f:01:a0:f2:d7:d6:23:6b:fa:
                    c8:b3:64:c7:4b:30:f2:af:8c:60:6d:66:b9:9b:25:
                    4f:86:92:21:db:b9:52:ac:4b:bc:99:67:61:05:90:
                    39:d0:7b:74:ee:dc:54:d9:9c:84:6d:9b:24:11:ba:
                    d7:52:38:e5:b3:f9:70:1a:33:d4:e4:bc:52:b8:3b:
                    31:17:d0:44:37:7f:9a:5f:4f:9e:70:22:a0:55:e6:
                    8d:cb:f1:be:ab:aa:2b:b4:20:45:aa:2e:04:47:27:
                    74:40:83:48:2f:58:79:0a:9d:44:f2:4c:46:a4:a3:
                    8a:79:c6:13:b7:72:09:bb:d5:44:45:d5:67:e8:ed:
                    7f:ab:28:65:9b:0f:58:25:bd:0a:f8:85:b6:60:53:
                    0c:4a:a0:18:55:35:7f:58:e9:ec:0c:3f:72:c3:f9:
                    9d:e5:22:44:06:1c:45:28:a0:15:24:fb:d9:9a:9b:
                    f3:a8:55:a4:72:26:59:11:1c:27:40:f4:d1:f2:d6:
                    2e:bf:9a:e9:6a:6e:26:6f:49:8c:1e:f3:31:29:53:
                    3d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:9E:DF:A4:1C:EF:C8:D7:9B:25:27:C6:EA:6C:4D:A0:DE:F2:31:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/8D9EDFA41CEFC8D79B2527C6EA6C4DA0DEF23196.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.20.0/22
                IPv6:
                  2804:5140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268440

    Signature Algorithm: sha256WithRSAEncryption
         66:62:41:10:8d:f9:f2:57:2c:6c:e8:72:f1:0a:d4:cb:34:10:
         63:15:9f:9e:e4:5c:f9:eb:36:e4:e6:95:56:9b:90:b8:b9:c2:
         3b:7a:75:3f:57:0e:39:de:95:a5:35:12:57:fa:02:58:fc:f3:
         30:07:6f:e5:47:a1:27:31:a0:52:3b:c6:7d:e4:5d:9c:44:f9:
         51:51:c0:a9:5e:8b:ee:2e:f1:bd:1c:b6:a1:2a:ee:e2:26:03:
         35:bf:52:f9:37:a7:3a:3d:f9:fb:24:f4:76:82:2a:3a:ff:a4:
         91:be:35:e3:5f:7e:21:b1:a6:ec:3b:39:01:99:c5:87:60:cb:
         90:48:22:4e:c4:ff:ec:71:e8:09:47:05:62:86:af:54:e4:ef:
         a6:77:99:d9:93:b6:ac:54:02:da:69:2c:a0:72:41:09:08:fc:
         12:66:86:ad:ee:32:03:34:d2:55:54:d8:a1:a2:57:28:42:88:
         70:81:02:c9:87:81:ef:ae:78:3d:f7:65:bd:89:f4:08:54:fb:
         c5:3e:9c:5a:21:5e:75:a9:4a:92:28:38:5d:31:42:70:97:0e:
         e8:0f:ed:5a:49:94:ea:ff:33:ff:ea:15:54:d9:18:5b:28:cb:
         5a:5e:40:b4:10:fb:a5:00:c8:62:85:7a:fd:ce:e5:ca:91:15:
         e1:02:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org