Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8E5E5AD0490CF8A5410FF3D76A15F50ACEF8C854.cer
File:                     8E5E5AD0490CF8A5410FF3D76A15F50ACEF8C854.cer (raw, json)
Hash identifier:          ut9bo48P6xYAwimvHI/sClssnHUDgdotcW9sehY14zM=
Subject key identifier:   8E:5E:5A:D0:49:0C:F8:A5:41:0F:F3:D7:6A:15:F5:0A:CE:F8:C8:54
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38F0090603B57C2768E7170ECA2C618BEEEAC611
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CA5bTN1bg8NaTDTRvC5TJKaG5VbHfj7KWo5spXi7PfRA/0/8E5E5AD0490CF8A5410FF3D76A15F50ACEF8C854.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CA5bTN1bg8NaTDTRvC5TJKaG5VbHfj7KWo5spXi7PfRA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Sep 2022 18:22:47 +0000
Certificate not after:    Tue 19 Sep 2023 18:27:47 +0000
Subordinate resources:    AS: 266367
                          IP: 170.80.36.0/22
                          IP: 2804:36b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f0:09:06:03:b5:7c:27:68:e7:17:0e:ca:2c:61:8b:ee:ea:c6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 18:22:47 2022 GMT
            Not After : Sep 19 18:27:47 2023 GMT
        Subject: CN=8E5E5AD0490CF8A5410FF3D76A15F50ACEF8C854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:33:86:5b:b5:11:a0:9a:dc:13:53:0d:ba:60:
                    c9:b0:e7:64:45:ab:9b:e8:52:70:ae:10:af:45:71:
                    ad:f7:46:d7:ad:ac:8a:d9:b1:cf:23:e8:33:7f:17:
                    30:72:42:a1:31:03:b6:98:bc:0b:18:2f:49:5f:6b:
                    fd:f9:21:55:37:77:54:85:e5:7a:6d:86:04:4c:cd:
                    b7:a4:64:25:89:e7:8d:c7:5d:f4:f8:e6:a0:64:0d:
                    da:2c:c8:06:f8:8b:59:6f:6a:a1:f0:6d:88:bb:c8:
                    64:bc:ba:fa:81:ea:ae:51:1e:ee:3a:42:b7:f4:24:
                    a3:d7:11:ce:a1:ee:53:3a:30:c0:9f:89:b7:ba:a1:
                    23:d2:df:40:0b:1f:8d:c4:df:4a:82:37:55:84:e1:
                    d8:7f:3a:ab:a6:56:5f:23:3e:8b:0a:56:57:f7:13:
                    ca:8b:84:70:4d:d0:82:9a:79:48:73:b8:8f:7b:cb:
                    20:29:df:c8:aa:f9:83:6a:96:de:f6:2d:c2:ab:1f:
                    f2:b9:5c:73:0a:6f:33:ea:68:29:dc:34:f9:c5:a5:
                    85:c3:da:d5:e9:77:20:8c:e0:aa:61:49:ca:01:e3:
                    18:55:12:4c:dc:6a:30:da:22:e0:ff:43:a0:97:f0:
                    53:91:b0:a9:23:cb:cd:7c:69:d1:63:6a:68:f1:06:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:5E:5A:D0:49:0C:F8:A5:41:0F:F3:D7:6A:15:F5:0A:CE:F8:C8:54
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CA5bTN1bg8NaTDTRvC5TJKaG5VbHfj7KWo5spXi7PfRA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CA5bTN1bg8NaTDTRvC5TJKaG5VbHfj7KWo5spXi7PfRA/0/8E5E5AD0490CF8A5410FF3D76A15F50ACEF8C854.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.36.0/22
                IPv6:
                  2804:36b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266367

    Signature Algorithm: sha256WithRSAEncryption
         53:a5:87:8b:6c:4b:b1:24:f3:d0:2f:f8:e2:af:e8:54:c7:07:
         03:a4:57:88:1f:8b:ef:fb:e6:c8:b9:1a:8e:b8:7b:bb:82:68:
         ed:e3:e3:f3:35:bc:22:55:bd:ce:8c:3f:7e:b0:fb:33:34:27:
         0c:eb:43:db:00:1a:4d:de:58:dd:0d:3f:c0:3d:26:50:f8:87:
         95:18:23:26:96:21:c0:46:f2:d5:52:e2:74:c8:59:0e:75:92:
         2c:d5:80:e2:ad:98:63:2d:a3:12:3b:a9:2c:db:7b:80:e5:22:
         16:94:de:bb:cd:fb:6a:c6:18:b1:80:7b:24:fa:a0:8b:36:2c:
         97:51:7d:f9:c6:8c:08:d6:91:8c:53:c3:57:94:32:9f:32:49:
         e4:14:b6:35:41:eb:a6:ee:60:21:27:7d:5c:fd:0f:90:a1:39:
         ca:41:69:d4:45:dc:d4:a0:77:81:a5:00:82:d7:b4:da:30:f3:
         5c:de:fe:ac:33:19:cc:bc:eb:75:39:bf:15:54:ee:35:95:7c:
         04:af:9f:ff:ce:72:ed:8e:24:9c:a4:50:18:6e:58:a1:58:7d:
         bf:38:43:e5:fd:95:3f:a3:b6:dc:03:27:19:91:c2:73:e3:ce:
         6b:55:cc:56:6c:72:55:c2:43:67:d6:a3:79:56:6d:69:b5:9b:
         e5:1c:a8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org