Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8E59BE31BEFA389C1F3B3FB3994E4E9C022F21D4.cer
File:                     8E59BE31BEFA389C1F3B3FB3994E4E9C022F21D4.cer (raw, json)
Hash identifier:          1eKZe9ujh4Nn9hs4e9Acf37uJ9pPRnW7vSLg7p9NOi8=
Subject key identifier:   8E:59:BE:31:BE:FA:38:9C:1F:3B:3F:B3:99:4E:4E:9C:02:2F:21:D4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       72552FFC2796B5525A4AF27F582D5F5EC52AF7FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/8E59BE31BEFA389C1F3B3FB3994E4E9C022F21D4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Oct 2023 14:52:26 +0000
Certificate not after:    Mon 28 Oct 2024 14:57:26 +0000
Subordinate resources:    AS: 271220
                          IP: 179.49.244.0/22
                          IP: 2804:7818::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:55:2f:fc:27:96:b5:52:5a:4a:f2:7f:58:2d:5f:5e:c5:2a:f7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 30 14:52:26 2023 GMT
            Not After : Oct 28 14:57:26 2024 GMT
        Subject: CN=8E59BE31BEFA389C1F3B3FB3994E4E9C022F21D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:6b:b8:8a:90:78:b8:3b:1f:67:54:ad:67:
                    7d:b8:2c:9b:96:11:77:17:3c:87:a4:47:47:62:07:
                    a7:a4:66:97:54:0a:88:7d:9c:f2:5e:65:f6:68:dd:
                    ab:6b:fe:60:33:bb:54:48:2d:0e:65:a4:9b:ba:aa:
                    b8:00:5c:23:1a:a4:6a:7f:65:62:3a:66:3b:ab:58:
                    13:f1:44:18:46:28:99:15:7b:b0:71:63:fd:8a:65:
                    db:00:66:a9:9a:3c:61:c0:cf:01:ea:6a:22:aa:77:
                    94:7a:17:7c:25:8c:eb:5c:49:36:b9:5e:4d:c8:16:
                    e1:fc:6e:3e:be:0e:f5:e3:1f:c1:92:64:31:39:e1:
                    48:c3:fa:d8:fe:f0:56:79:b3:1b:95:7d:25:a0:7a:
                    61:c2:6c:f7:27:36:95:a6:6e:e4:e3:46:09:8d:bc:
                    34:49:39:13:81:31:11:61:64:6b:f1:bb:c7:79:27:
                    ee:af:55:fe:bd:72:35:24:01:91:10:fe:7a:60:e1:
                    75:58:af:74:cd:fb:60:03:fd:46:df:58:ab:b0:e0:
                    fb:29:50:e3:81:a9:ab:19:7e:8e:ad:ff:e1:98:1c:
                    0b:89:20:a8:27:89:61:71:86:a4:37:10:c2:b3:34:
                    26:4a:a5:68:1a:d0:91:57:f7:b5:ee:5f:78:2e:e5:
                    75:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:59:BE:31:BE:FA:38:9C:1F:3B:3F:B3:99:4E:4E:9C:02:2F:21:D4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/8E59BE31BEFA389C1F3B3FB3994E4E9C022F21D4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.244.0/22
                IPv6:
                  2804:7818::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271220

    Signature Algorithm: sha256WithRSAEncryption
         58:7d:27:ae:07:75:9e:3b:30:bf:17:11:8d:a1:27:20:a6:83:
         70:7f:10:c4:7a:0f:cb:a5:3a:48:c1:a7:e1:5a:80:7b:7c:f3:
         c4:70:ba:9a:11:f3:a6:7f:22:0a:50:b1:e3:9b:4c:20:9d:5d:
         57:5c:c7:ee:ba:3f:28:d6:46:fb:75:4a:e4:f7:47:8d:79:f8:
         b6:8b:76:1c:b4:68:ae:88:87:ca:81:67:b0:26:6c:33:e2:d9:
         6d:9b:9d:60:45:29:9a:6f:e1:04:28:da:0c:a1:f0:31:12:fb:
         41:ee:72:82:c1:83:51:44:f2:2b:1b:6a:ed:33:f2:70:98:09:
         98:b2:3e:d8:40:0e:cc:83:b8:ba:16:00:5d:46:c7:3e:4c:90:
         44:5d:db:61:69:5b:21:d3:a7:ea:5a:75:03:9a:6c:47:08:b6:
         1b:1f:18:fa:fe:a8:10:91:2d:f9:e8:f0:65:c7:8e:9f:72:98:
         1a:ad:b1:65:47:d1:0d:18:e6:1e:22:45:41:fc:77:7d:3e:9a:
         37:96:16:bf:aa:f3:2b:d9:14:ef:ef:5d:c5:fc:75:a6:12:01:
         6d:58:69:c1:13:09:93:ec:46:df:fa:28:61:90:dd:bf:33:9f:
         d0:df:2f:f9:7c:7c:e3:dd:09:60:32:f4:1a:9f:54:e1:27:6f:
         9b:51:4d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org