Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.cer
File:                     8E443FD1F05F76E9C306FEF6685D2F4527493550.cer (raw, json)
Hash identifier:          5cOZKwvT6bwI7XBRMl9Ad01tZ5ZcIt4VyW04OUCdy1g=
Subject key identifier:   8E:44:3F:D1:F0:5F:76:E9:C3:06:FE:F6:68:5D:2F:45:27:49:35:50
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       72E5859307E806FED1429163205419F96B67BCA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Jun 2023 10:57:55 +0000
Certificate not after:    Thu 30 May 2024 11:02:55 +0000
Subordinate resources:    AS: 28328
                          IP: 189.14.192.0/19
                          IP: 2804:674::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e5:85:93:07:e8:06:fe:d1:42:91:63:20:54:19:f9:6b:67:bc:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  1 10:57:55 2023 GMT
            Not After : May 30 11:02:55 2024 GMT
        Subject: CN=8E443FD1F05F76E9C306FEF6685D2F4527493550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:86:a6:a9:f0:36:66:df:bd:52:19:59:44:
                    13:70:ff:cc:05:cb:ae:8e:12:04:f8:01:b9:92:43:
                    7d:f3:05:ed:5c:66:42:d7:1c:f3:b0:48:aa:35:81:
                    48:ad:6e:24:71:83:95:f0:af:56:04:a7:bc:1c:6a:
                    1c:f4:3a:db:ca:ac:22:ac:ef:a8:ed:d0:28:00:10:
                    ae:c2:cd:c5:d3:3a:cd:fc:b6:fc:9e:18:fe:18:5d:
                    e3:4f:04:69:63:32:a3:d1:f2:03:89:5c:d6:84:3b:
                    69:59:3a:04:6b:b3:2f:56:21:73:1c:4e:1a:df:82:
                    e3:5c:0b:ff:31:6a:ae:07:ad:07:63:46:f9:a9:db:
                    15:c1:bb:c7:3e:d1:3c:61:59:c4:1c:48:b9:4e:0e:
                    84:e8:27:d1:ce:e0:78:2f:3b:36:a4:ef:3a:1a:ce:
                    ff:42:ff:8c:6b:bb:7e:f4:7c:e9:7b:0e:0a:83:a0:
                    d6:06:47:24:3d:5c:a4:35:cb:42:24:52:56:31:cc:
                    f4:ed:6e:9a:63:2d:5e:d9:51:7e:0a:95:c5:f6:10:
                    c9:4a:f0:f0:50:5d:ab:34:9d:d2:f8:e3:f9:26:36:
                    89:85:12:50:56:b7:75:41:6b:4b:ca:f8:a8:3f:2d:
                    75:3d:72:e4:22:b5:ce:03:d7:c0:fb:ed:d0:a1:4c:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:44:3F:D1:F0:5F:76:E9:C3:06:FE:F6:68:5D:2F:45:27:49:35:50
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.192.0/19
                IPv6:
                  2804:674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28328

    Signature Algorithm: sha256WithRSAEncryption
         3b:09:30:ea:ba:3a:42:a7:30:75:c9:95:88:5c:5b:b6:4b:92:
         98:27:fa:64:3d:f0:87:74:f9:66:27:fe:eb:76:54:85:7b:66:
         a2:5e:a0:e1:39:de:02:6e:57:28:89:2e:0d:f5:2b:04:cc:84:
         42:b0:e4:5e:97:6c:61:7e:0a:3b:6f:51:9e:20:69:21:f0:4f:
         62:05:cc:fd:e2:e2:8f:cf:28:ac:83:cc:fa:fa:b8:de:e5:54:
         6e:8f:95:8a:14:00:65:dc:d7:53:21:d2:d9:fc:54:aa:ec:67:
         40:db:8d:2f:6e:68:45:a6:11:8f:76:c9:09:62:c3:b1:d3:4a:
         87:97:bc:c5:5b:47:1d:d8:83:a1:25:8d:54:66:a2:2e:ab:ba:
         8a:49:47:45:91:35:35:73:65:b7:5f:42:f0:9d:3b:c0:7e:a8:
         2d:28:e0:d8:09:7f:22:f7:e5:98:84:0d:ae:97:b3:7c:4c:d4:
         86:36:53:8e:29:36:d2:e4:4e:c1:5c:c2:42:3c:43:80:19:99:
         fa:c5:5a:bd:a9:84:83:a7:b4:91:0d:fe:89:bb:87:bf:9f:88:
         9e:0f:41:0e:7d:cc:a1:c2:c8:53:c6:bc:57:ef:a0:bd:5e:72:
         e7:7a:17:f6:40:fd:98:a1:75:01:62:38:78:d9:90:dd:52:c8:
         87:3c:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org