Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8E1A688ECA72F47A60FB39CCA65FF7CE51E9D70F.cer
File:                     8E1A688ECA72F47A60FB39CCA65FF7CE51E9D70F.cer (raw, json)
Hash identifier:          G3xFYSsO9k1sC/tSW8bo0JijvGlOrfPXUSDTt9ag3LQ=
Subject key identifier:   8E:1A:68:8E:CA:72:F4:7A:60:FB:39:CC:A6:5F:F7:CE:51:E9:D7:0F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D7B78139CC7290005CEA89ACC045984D41E6EFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/8E1A688ECA72F47A60FB39CCA65FF7CE51E9D70F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Jul 2022 13:30:05 +0000
Certificate not after:    Tue 04 Jul 2023 13:35:05 +0000
Subordinate resources:    AS: 271008
                          IP: 170.254.120.0/22
                          IP: 2804:74dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7b:78:13:9c:c7:29:00:05:ce:a8:9a:cc:04:59:84:d4:1e:6e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  5 13:30:05 2022 GMT
            Not After : Jul  4 13:35:05 2023 GMT
        Subject: CN=8E1A688ECA72F47A60FB39CCA65FF7CE51E9D70F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:5d:30:57:0c:77:4a:bd:36:be:9f:d8:87:
                    83:5d:a6:bc:dd:1e:47:eb:99:b0:70:ec:34:ec:a2:
                    6a:77:8f:d6:23:64:96:26:3b:5e:f2:46:7d:f0:b9:
                    15:e2:9c:60:27:04:4b:e7:04:f6:47:0b:00:bf:ec:
                    8b:75:7d:b3:73:41:43:19:60:67:ec:57:2a:f7:46:
                    b8:17:99:6d:0a:01:a7:ed:f0:14:8a:be:d1:5e:ec:
                    0b:70:84:e3:14:af:4b:e8:c9:9d:d8:52:38:00:9a:
                    5f:4a:2a:cf:b1:1a:27:dc:cb:c4:01:46:9b:0f:8b:
                    a8:bd:1f:8a:7c:ed:1d:29:04:9e:b9:be:4e:46:2a:
                    a3:b9:20:88:d1:12:8e:00:16:7e:c5:90:35:ef:7f:
                    09:11:d1:0d:dd:3d:d5:6c:49:c2:40:2e:ae:a6:fe:
                    fc:b0:b4:6a:e8:25:9c:05:c4:4c:c0:62:bb:98:7b:
                    19:65:86:54:db:4a:18:d7:d2:e3:eb:9d:a7:c7:84:
                    3e:0d:c0:f5:ff:93:60:9e:0c:c5:d8:8d:ab:9e:28:
                    fb:95:9d:8d:59:88:ff:06:0d:9e:95:97:87:02:05:
                    ec:da:02:f0:63:e1:01:79:d4:8b:7b:94:3a:42:6f:
                    bc:2a:77:b4:fd:af:a0:de:1f:ed:9e:cb:10:9d:6c:
                    30:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:1A:68:8E:CA:72:F4:7A:60:FB:39:CC:A6:5F:F7:CE:51:E9:D7:0F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/8E1A688ECA72F47A60FB39CCA65FF7CE51E9D70F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.120.0/22
                IPv6:
                  2804:74dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271008

    Signature Algorithm: sha256WithRSAEncryption
         13:4c:95:77:a3:77:c5:a3:6f:cc:8c:79:67:b6:31:1a:5b:79:
         73:b7:11:c8:36:7c:4c:c5:95:3f:67:35:e7:c8:15:9a:72:70:
         55:e5:0e:f7:35:5a:75:94:31:2f:18:a2:c9:c6:48:a4:a7:22:
         89:6b:23:cb:84:81:74:b0:ae:ed:82:58:42:d7:1f:44:62:6b:
         f5:6b:ee:35:36:6b:f3:49:65:7c:4a:4f:e9:be:04:5c:23:6e:
         c4:85:89:d6:1f:c4:f4:04:2d:c3:eb:04:d9:d2:41:25:2a:30:
         5e:75:7c:08:63:17:4e:1b:f3:cb:93:ed:20:74:99:37:00:cb:
         c9:cb:04:10:60:ff:ec:d3:90:cc:04:50:61:f9:ab:6d:fd:e1:
         e5:b0:89:c5:ed:ed:f1:57:0e:a3:15:b8:bb:08:d7:e6:40:c9:
         0b:91:1e:1d:0c:30:b1:ef:02:27:84:b2:e1:6a:4f:1e:6c:05:
         e4:37:32:c2:ca:4c:6d:b9:25:87:72:d2:9c:e3:7c:d4:69:06:
         8d:aa:1a:4b:0b:08:cd:04:8e:d7:29:8c:45:78:d8:7c:8b:f2:
         3b:11:1c:db:cc:f3:48:0f:29:06:e1:82:93:2f:29:1f:f2:2c:
         07:0e:8e:d1:b0:f3:90:ef:93:bf:c6:6f:98:6a:33:ab:73:b0:
         32:d3:21:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org