Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.cer
File:                     8E2C587E03D77A09E0236848BE4C5CBC4D782D33.cer (raw, json)
Hash identifier:          5N6wHkVR4OWB4CbGdA4iVote6qM1RRTLulBMUelIaaw=
Subject key identifier:   8E:2C:58:7E:03:D7:7A:09:E0:23:68:48:BE:4C:5C:BC:4D:78:2D:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       104B1F6A8B244E70AD0B18AB2205D7A27FAB856C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 23:13:58 +0000
Certificate not after:    Thu 11 Jul 2024 23:18:58 +0000
Subordinate resources:    AS: 268234
                          IP: 45.236.112.0/22
                          IP: 2804:4e04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4b:1f:6a:8b:24:4e:70:ad:0b:18:ab:22:05:d7:a2:7f:ab:85:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 23:13:58 2023 GMT
            Not After : Jul 11 23:18:58 2024 GMT
        Subject: CN=8E2C587E03D77A09E0236848BE4C5CBC4D782D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:c2:dd:a4:d9:81:f6:2f:fc:45:49:a7:89:
                    3d:45:7b:1a:c4:9e:53:5d:f2:ca:41:ac:d5:82:b8:
                    c8:b7:b4:59:b4:6f:fc:9e:7b:ea:fc:a6:be:9e:8a:
                    d5:8a:9c:6a:3b:ad:e4:9f:11:22:65:0e:d7:b0:88:
                    96:76:a8:ed:01:a8:5e:d0:85:9f:5c:4d:9b:a8:c2:
                    28:aa:85:73:aa:5a:45:b5:3f:10:eb:65:b9:50:be:
                    a5:5f:8a:e8:76:16:14:48:2c:04:fa:7a:3b:96:96:
                    0e:aa:bf:c5:31:3d:7c:e8:a3:e7:9e:74:03:3f:99:
                    6d:c0:f5:a0:05:bc:9d:7f:c0:e0:14:65:36:e2:4e:
                    f9:35:3d:27:70:18:dc:31:2a:5e:50:e2:92:6e:05:
                    c3:7b:03:81:a8:8d:7f:94:25:da:02:8d:0d:ba:32:
                    45:bc:6a:70:90:9a:78:35:85:64:56:d5:15:d5:bb:
                    d0:cf:6d:c0:61:cf:2e:26:23:a4:e8:9b:af:88:58:
                    d9:67:70:3e:c8:99:a0:4d:eb:3a:36:3d:2b:cd:60:
                    36:78:fc:1b:73:d3:40:34:40:e3:d5:82:d5:0d:40:
                    3a:9d:ba:ac:62:95:56:b6:de:1d:44:41:9c:3e:b1:
                    e9:31:ac:60:f8:f9:f7:f2:6f:75:68:7d:e1:92:89:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:2C:58:7E:03:D7:7A:09:E0:23:68:48:BE:4C:5C:BC:4D:78:2D:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.112.0/22
                IPv6:
                  2804:4e04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268234

    Signature Algorithm: sha256WithRSAEncryption
         41:73:27:fd:1e:19:cf:e6:33:1a:aa:e8:6f:0a:1d:b8:ef:2c:
         db:97:1b:a6:27:13:d7:32:c3:be:48:71:9c:52:1a:59:1d:36:
         a0:2b:62:43:a0:ab:db:39:d6:50:8b:3e:34:10:45:05:fc:5a:
         39:64:ab:dc:9f:3e:f2:55:4f:e1:15:da:0e:e6:c3:7b:d8:a7:
         58:5f:aa:6a:7b:3e:ff:bc:00:30:81:ae:9a:6b:3a:09:9d:20:
         49:73:66:73:bd:18:89:cf:19:7a:0a:ce:69:a3:21:82:8c:2e:
         30:e5:df:af:25:26:bf:6c:3d:ce:d7:74:ec:eb:9c:30:2f:95:
         2d:7c:c3:cb:f2:3c:57:34:e6:70:53:84:ec:28:97:ca:b2:99:
         ad:57:15:4e:c3:f8:7c:10:d9:ab:44:bd:25:b5:8a:2e:4f:65:
         66:fe:20:a3:dc:42:17:80:c2:2f:8b:a6:d1:7c:05:85:3b:05:
         52:9b:eb:6b:9e:b3:aa:89:2f:62:c1:ce:b6:70:30:87:e1:44:
         71:bd:eb:c5:1c:1b:e5:fa:4b:fc:a0:16:d1:40:52:6f:0e:92:
         67:66:64:6c:da:41:46:b3:8a:6e:e2:b1:52:c3:cd:aa:f8:4b:
         92:20:20:1f:7f:64:95:af:6b:84:8a:d2:42:8e:ba:c1:43:93:
         5f:28:9f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org