Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer
File:                     8DF5F3E70EB9D6971638464E557907A395C47FAD.cer (raw, json)
Hash identifier:          QpBYVek5KSIG/5nHbwGENq43nJ/6y3sjq/y/I4EA3So=
Subject key identifier:   8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       40A3C0FD1D24CF5263E486318392E437B8DDDAE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 19:50:29 +0000
Certificate not after:    Fri 12 Jul 2024 19:55:29 +0000
Subordinate resources:    AS: 52731
                          IP: 177.84.248.0/21
                          IP: 2804:2890::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a3:c0:fd:1d:24:cf:52:63:e4:86:31:83:92:e4:37:b8:dd:da:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 19:50:29 2023 GMT
            Not After : Jul 12 19:55:29 2024 GMT
        Subject: CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:7a:00:e1:44:54:9d:0d:95:8e:fd:fc:d8:
                    8a:87:74:a5:de:7d:27:ae:53:5c:dd:ef:e9:a1:fe:
                    4d:c2:21:68:3e:77:a2:63:10:b0:7f:d2:fe:4e:a6:
                    51:4b:eb:3b:6c:57:d8:17:c2:44:4e:b8:45:10:3a:
                    b9:a3:4a:90:f7:22:3f:ed:0b:f1:b9:cc:d9:84:ef:
                    b2:91:db:03:49:14:8d:c7:32:e1:56:60:eb:29:66:
                    be:92:7a:b0:4c:11:c4:ec:bf:88:5a:6d:3c:ab:3f:
                    03:c8:97:b8:34:e1:ca:af:e7:f3:ef:54:f7:ac:ce:
                    d4:fc:0b:ae:7f:a0:f8:06:be:0e:6d:8e:f5:80:3a:
                    7d:07:50:80:8e:4b:65:e3:06:9c:d6:af:3c:b0:a0:
                    f3:93:5a:b7:61:da:47:4a:3c:9e:29:22:79:38:1b:
                    00:26:eb:a2:5f:13:ba:78:58:6a:af:96:68:a0:23:
                    fa:c6:d6:28:36:53:2e:15:75:84:cb:5f:5e:1a:5b:
                    5a:07:27:9a:66:9a:af:47:d1:03:68:74:c2:2b:4c:
                    bf:c0:91:61:0d:65:6a:5f:07:89:b1:b4:81:52:9c:
                    ad:b3:47:29:5c:c9:c6:e6:f5:6e:f6:2a:46:29:81:
                    62:2b:b0:d1:18:3c:e8:10:59:0b:a2:d8:ce:0f:ae:
                    75:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.248.0/21
                IPv6:
                  2804:2890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52731

    Signature Algorithm: sha256WithRSAEncryption
         1f:fb:3d:d2:66:d2:3a:08:8b:73:bc:2a:46:ff:51:70:e1:bc:
         f5:cf:4d:3c:40:c2:e7:93:95:59:8e:de:e6:61:c9:c8:93:81:
         0e:8f:71:c2:ff:6f:98:2c:67:e3:17:63:f5:84:76:1d:c1:63:
         8c:b2:e5:42:06:36:53:eb:6e:3c:6b:3f:6c:31:bd:f5:ac:1b:
         6a:8b:77:d2:4e:a4:76:fc:64:4b:76:ea:ce:17:cf:d3:a4:88:
         9d:a3:72:6a:c8:7f:f4:06:d7:b6:5f:68:22:7a:e4:ee:45:5e:
         ac:b2:be:a7:1a:35:a3:50:2c:23:4e:83:49:52:c6:5d:06:04:
         08:52:c3:4d:63:33:23:90:15:ba:87:cd:95:41:80:77:ad:b8:
         cb:18:f9:f4:ed:99:44:f4:0e:56:57:91:da:0c:19:fa:37:e8:
         0e:81:db:46:0e:85:d7:ec:ad:9d:df:59:6e:ac:04:0a:3d:36:
         30:3a:5b:c4:05:1b:8f:af:12:23:e5:e4:ba:fe:24:fa:dc:3f:
         c9:50:f0:d9:a9:29:bc:91:7e:55:2d:b2:c6:48:cb:d6:4d:d0:
         89:77:71:07:e2:1b:b9:58:22:43:79:56:d7:aa:8b:79:2d:2a:
         c5:cc:56:22:97:24:a4:46:6e:df:10:15:f0:f5:14:c3:92:d9:
         3e:95:04:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org