Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8DFB5AD75C622A76A4704A51C79EC932C3038AFC.cer
File:                     8DFB5AD75C622A76A4704A51C79EC932C3038AFC.cer (raw, json)
Hash identifier:          Dwt/KIE+zJjxKnErG8hXByuq2VU1A77FpGZINuI7rBs=
Subject key identifier:   8D:FB:5A:D7:5C:62:2A:76:A4:70:4A:51:C7:9E:C9:32:C3:03:8A:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7DF55D02CCD3A5B76B824DAF577CBA131C85B385
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hm7jCc4AXt3Td1SzVPg689mEWTyHAX6UukBhG1cNM58Q/0/8DFB5AD75C622A76A4704A51C79EC932C3038AFC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hm7jCc4AXt3Td1SzVPg689mEWTyHAX6UukBhG1cNM58Q/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 05 Mar 2023 15:06:14 +0000
Certificate not after:    Sun 03 Mar 2024 15:11:14 +0000
Subordinate resources:    AS: 271618
                          IP: 45.70.208.0/22
                          IP: 2804:7e58::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f5:5d:02:cc:d3:a5:b7:6b:82:4d:af:57:7c:ba:13:1c:85:b3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  5 15:06:14 2023 GMT
            Not After : Mar  3 15:11:14 2024 GMT
        Subject: CN=8DFB5AD75C622A76A4704A51C79EC932C3038AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:18:19:5f:4f:98:97:a3:a0:03:b3:08:c2:
                    b4:cd:93:4a:fb:13:50:df:fe:29:ee:99:41:b8:cf:
                    8d:d0:30:fb:60:26:f4:56:9e:c5:74:00:48:4b:0d:
                    c2:f0:14:6c:27:f0:62:ac:1d:35:0c:99:f8:75:3c:
                    e1:dc:8d:ab:50:c9:6d:a0:ea:68:7b:5d:71:a8:76:
                    be:c8:23:62:f9:60:0c:4d:bc:52:48:3a:bd:fc:b5:
                    5e:2c:4a:a3:50:6d:69:21:16:24:41:15:6f:3c:99:
                    3a:08:c7:48:58:2b:29:1e:80:ed:94:ce:3a:cf:6a:
                    b6:b6:56:76:73:a9:bd:75:58:e7:0f:a8:9f:c5:22:
                    e3:f6:75:54:07:51:f2:e2:0d:f5:45:f2:d3:be:cb:
                    53:2c:64:bb:fd:aa:8d:f5:5c:ba:5c:3c:10:e9:53:
                    09:58:30:0f:d5:3a:73:cd:8c:28:6b:0d:7f:b6:f7:
                    a6:40:73:b1:4c:76:b4:dc:07:cf:ee:3d:57:39:6c:
                    10:fc:bc:f8:dc:6b:c2:de:5e:d7:c6:31:1e:c9:66:
                    54:03:bc:87:4f:7b:bb:3a:7b:e5:d1:16:67:da:c3:
                    85:28:49:32:31:58:5c:91:d3:e2:9b:cf:15:35:77:
                    a6:0c:5f:5c:a7:63:bf:3b:bd:34:d2:cc:b4:b7:91:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:FB:5A:D7:5C:62:2A:76:A4:70:4A:51:C7:9E:C9:32:C3:03:8A:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hm7jCc4AXt3Td1SzVPg689mEWTyHAX6UukBhG1cNM58Q/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hm7jCc4AXt3Td1SzVPg689mEWTyHAX6UukBhG1cNM58Q/0/8DFB5AD75C622A76A4704A51C79EC932C3038AFC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.208.0/22
                IPv6:
                  2804:7e58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271618

    Signature Algorithm: sha256WithRSAEncryption
         72:56:ba:91:ed:4b:1b:64:42:84:1f:4e:bb:e2:78:2f:dc:fc:
         c5:4a:26:2e:b5:72:59:3c:e0:24:55:64:a8:ba:c4:02:94:fe:
         4b:38:b0:e5:28:71:05:a5:b9:70:c4:99:61:16:aa:67:1f:3e:
         7b:67:24:27:4a:fe:be:ed:14:e6:2d:71:be:b8:2d:2b:bc:4d:
         74:7b:07:12:2e:ef:70:ab:74:62:21:9c:01:36:1a:b9:a6:c9:
         db:b1:81:13:45:fa:94:5c:47:6f:50:51:c0:4f:bb:27:d5:7d:
         c3:41:ef:6d:ce:c9:7a:ea:6f:e1:4e:f0:5c:c6:59:70:de:26:
         37:53:3b:cd:0f:31:f5:cb:55:c5:ef:01:de:cb:ed:88:df:15:
         22:0f:59:06:8b:3e:10:4b:d3:49:74:33:a3:ec:37:a3:54:41:
         cc:3c:23:89:05:4a:66:ac:19:e4:13:f2:1d:5b:ce:a9:86:8a:
         a3:12:81:10:a1:e9:6c:44:9c:ef:27:88:2a:be:fc:dc:60:d2:
         7f:b3:a5:93:f3:19:50:2d:4d:c7:0f:ba:c2:bc:ee:c3:7e:e0:
         6f:7b:30:d1:06:f3:e2:e3:9b:3c:bc:2d:c7:47:3c:ba:2a:93:
         e3:a5:38:48:97:80:fd:41:01:22:1d:ac:57:4d:8f:5d:ab:52:
         62:c8:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org