Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8DC4B85108F4A684A65E90F0550453A66C62D87D.cer
File:                     8DC4B85108F4A684A65E90F0550453A66C62D87D.cer (raw, json)
Hash identifier:          RNIqMPd1fAknc6+1mJYUuMroXGX4UJbyWGicEABEwbw=
Subject key identifier:   8D:C4:B8:51:08:F4:A6:84:A6:5E:90:F0:55:04:53:A6:6C:62:D8:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5411BA4D737944B28E95AD0D31B018FD31996C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/0/8DC4B85108F4A684A65E90F0550453A66C62D87D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Jul 2023 23:05:05 +0000
Certificate not after:    Fri 19 Jul 2024 23:10:05 +0000
Subordinate resources:    AS: 263635
                          IP: 170.254.180.0/22
                          IP: 179.125.120.0/22
                          IP: 2804:106c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:11:ba:4d:73:79:44:b2:8e:95:ad:0d:31:b0:18:fd:31:99:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 23:05:05 2023 GMT
            Not After : Jul 19 23:10:05 2024 GMT
        Subject: CN=8DC4B85108F4A684A65E90F0550453A66C62D87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:db:2b:ab:e7:e5:0b:fb:38:56:8a:5a:d8:
                    80:99:f7:42:fa:9c:1b:90:53:8e:80:0b:0e:41:06:
                    2f:70:61:47:00:f8:ec:10:52:6b:fd:c5:cf:a9:09:
                    e9:42:c6:fd:c2:47:93:af:53:17:67:fd:05:48:ee:
                    b7:b6:7e:1b:b5:47:0d:04:03:7c:57:61:19:cc:4b:
                    b3:de:fa:50:59:07:48:e6:de:ff:27:cf:09:21:05:
                    0c:f5:c1:9d:28:7b:10:d1:e9:72:03:8b:7e:5e:be:
                    03:f7:ef:cd:b5:97:ab:39:69:af:d0:49:3d:ac:85:
                    1d:aa:f8:4e:00:2f:02:13:d7:d8:51:b0:b4:c1:46:
                    f5:c1:97:52:36:56:14:de:cd:89:d9:da:33:33:6f:
                    a8:9f:ab:ff:c8:22:d3:1d:55:f6:7f:c2:10:cd:0d:
                    4f:dd:1c:55:b7:d2:9e:c0:3b:3a:bd:21:18:aa:f6:
                    83:61:fc:d0:ca:dc:e3:3e:12:cc:8d:fc:51:37:5d:
                    80:cd:ec:72:fa:b1:b9:7a:9a:6f:08:60:fb:41:3b:
                    47:c1:59:11:55:d4:c0:8b:6b:57:c7:3c:a4:6b:27:
                    df:61:27:29:56:9d:0e:cf:dc:a9:57:de:fc:d8:5f:
                    4b:91:a4:4b:4e:49:22:93:14:a9:a1:2e:85:60:8e:
                    c0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:C4:B8:51:08:F4:A6:84:A6:5E:90:F0:55:04:53:A6:6C:62:D8:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/0/8DC4B85108F4A684A65E90F0550453A66C62D87D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.180.0/22
                  179.125.120.0/22
                IPv6:
                  2804:106c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263635

    Signature Algorithm: sha256WithRSAEncryption
         62:5f:7b:a4:b6:63:7a:25:39:29:d9:12:7b:4f:75:26:43:1b:
         56:3c:20:ca:70:a7:b3:58:7d:ac:57:8b:1d:34:69:54:e2:11:
         cc:c8:6e:56:62:ec:21:d9:23:e4:01:a4:1c:9b:53:53:20:04:
         04:6f:1a:d4:59:04:97:38:17:13:e6:9b:77:c3:76:1f:4f:ad:
         fd:e4:f3:e1:26:ad:ec:10:66:45:9c:96:7d:21:51:99:b5:16:
         ff:fd:bd:74:6e:f7:7e:46:1c:35:f0:7c:dc:c8:76:45:01:2c:
         bc:23:68:a5:6d:56:90:4b:b0:c1:9c:6d:c2:9a:11:08:31:71:
         08:a3:e5:b9:4a:05:47:e5:36:05:ca:1c:dc:af:c2:79:2c:91:
         f8:1a:fd:b5:e2:10:7a:c1:2b:be:eb:a2:0b:1c:4d:f2:90:d0:
         30:4e:05:89:ca:b9:ce:07:54:65:18:1c:62:b0:ba:e0:52:10:
         cf:09:bd:b7:23:2d:c4:0e:54:b7:a3:1d:c9:93:77:a2:07:fa:
         17:3c:25:3e:6e:0e:89:0f:41:18:98:c6:f5:62:09:16:ee:f7:
         8a:5e:c6:52:0e:1a:d5:65:03:91:11:77:26:44:13:5d:92:f5:
         c6:de:2e:c7:f3:7a:e1:4b:f7:9f:51:16:d9:de:6d:b3:7f:1a:
         5e:5c:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org