Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB.cer
File:                     8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB.cer (raw, json)
Hash identifier:          wL9Etvvh8c1eskBHuqsNQrCwLbEpaLdniUfMj/lBxAs=
Subject key identifier:   8D:EA:A3:66:A5:02:5F:2C:71:8D:F5:BD:C1:5A:5D:48:79:1A:D3:FB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20638021703058E5A033EF1BCEB8545E80FAD7C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 17:08:49 +0000
Certificate not after:    Tue 21 May 2024 17:13:49 +0000
Subordinate resources:    AS: 272449
                          IP: 2804:815c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:63:80:21:70:30:58:e5:a0:33:ef:1b:ce:b8:54:5e:80:fa:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 17:08:49 2023 GMT
            Not After : May 21 17:13:49 2024 GMT
        Subject: CN=8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:bc:43:22:74:f4:89:4b:ba:18:fa:73:d2:
                    61:2a:a5:b9:ed:05:8f:49:11:e5:d7:bc:41:58:9c:
                    28:cf:75:0c:21:35:ae:3d:07:95:26:88:f8:b6:5d:
                    da:01:f5:1f:02:94:43:1e:b0:a2:e5:32:25:f1:98:
                    44:36:38:60:c4:29:f5:f3:16:38:8a:35:c0:2c:9c:
                    55:b3:a3:8a:f7:33:da:80:f3:08:43:6f:48:85:65:
                    98:91:cd:52:07:26:69:0e:a4:b7:e6:e6:f8:16:be:
                    3b:2e:70:8a:b2:0e:96:40:47:69:8e:c0:92:ed:40:
                    3b:1c:c9:45:46:ca:4b:a2:fa:24:69:02:6c:61:95:
                    62:de:0e:77:47:26:53:ab:df:54:e9:38:34:17:2c:
                    c3:d1:eb:e7:97:26:3a:cc:af:03:bb:b6:4f:4f:5f:
                    05:12:d8:77:ff:d5:92:2f:20:03:ae:8d:a0:55:38:
                    48:11:dd:2e:9d:ba:e1:00:fd:4f:74:ea:d1:22:fd:
                    ec:74:56:a1:02:f8:e9:a8:6d:89:b2:36:c1:29:45:
                    19:47:92:9d:b5:7c:0e:99:d4:65:d4:59:6e:51:c6:
                    a8:39:39:c5:70:07:85:99:85:e2:bc:2f:cd:00:25:
                    a6:56:96:4e:58:55:ac:5c:d0:35:16:b3:0f:50:f9:
                    ee:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:EA:A3:66:A5:02:5F:2C:71:8D:F5:BD:C1:5A:5D:48:79:1A:D3:FB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:815c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272449

    Signature Algorithm: sha256WithRSAEncryption
         ad:d8:31:bc:b0:fe:17:2d:de:46:46:15:57:7a:f9:d6:be:00:
         92:62:68:b2:29:6b:de:d6:f4:f8:fa:a8:88:46:af:b0:7d:1c:
         a6:5c:ed:c8:7b:dd:fd:a7:fd:56:3f:de:8a:47:6e:e5:f1:51:
         88:c4:e8:7e:1f:b7:4f:37:a1:16:02:b2:15:82:ac:ab:9b:5c:
         21:bc:cc:2d:06:32:7f:a1:84:7e:c4:25:34:f3:dc:6c:fe:31:
         16:77:e0:9b:26:28:8c:a0:64:21:e2:d1:4c:9e:89:48:52:b5:
         b9:98:3c:55:b4:8c:98:18:76:d3:70:bf:88:21:a3:38:eb:7d:
         87:30:2d:d3:3a:4a:42:2d:44:9f:98:af:6a:d3:05:aa:73:83:
         26:2e:5a:4b:5e:52:f8:a0:13:39:ab:33:82:ec:39:ed:df:7a:
         e2:3f:9d:02:35:14:d0:eb:ee:84:24:e5:5d:60:6a:c6:21:81:
         d7:9c:ab:f2:43:6d:d9:f7:09:dd:fe:f2:3a:cc:21:70:46:b5:
         3c:06:99:9e:80:56:77:56:24:7a:4d:73:d3:d4:14:cc:ae:c4:
         d5:38:31:c7:03:7d:ef:f8:7b:38:8e:99:1d:17:c8:ce:60:07:
         71:9c:3b:d3:02:e9:a8:f1:59:f5:78:2b:79:8b:d2:e7:d3:40:
         e3:42:c7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org