Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8E735D878FC4398C38124BF84ECA8E82A51A2CEB.cer
File:                     8E735D878FC4398C38124BF84ECA8E82A51A2CEB.cer (raw, json)
Hash identifier:          VgnEsQJCh/rgHhooTr59wf1unWnA2s7qxNyGqFRqb+I=
Subject key identifier:   8E:73:5D:87:8F:C4:39:8C:38:12:4B:F8:4E:CA:8E:82:A5:1A:2C:EB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6E59D0514E023B9E2C9287A5E987392AE492EEB7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Tn6iC1NfFawaTahgjHBP2RvC4XWsh83wePtsLgHQzoP/2/8E735D878FC4398C38124BF84ECA8E82A51A2CEB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Tn6iC1NfFawaTahgjHBP2RvC4XWsh83wePtsLgHQzoP/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 15:20:18 +0000
Certificate not after:    Fri 07 Mar 2025 15:25:18 +0000
Subordinate resources:    AS: 263567
                          IP: 179.109.32.0/20
                          IP: 2804:f24::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:59:d0:51:4e:02:3b:9e:2c:92:87:a5:e9:87:39:2a:e4:92:ee:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 15:20:18 2024 GMT
            Not After : Mar  7 15:25:18 2025 GMT
        Subject: CN=8E735D878FC4398C38124BF84ECA8E82A51A2CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:1e:27:8d:72:26:d4:09:63:e1:cd:26:f6:
                    bd:34:75:e7:d8:ac:18:50:df:c5:35:1a:c1:2c:ea:
                    22:42:d1:3e:f2:dc:8b:eb:c2:31:a4:c7:28:15:6a:
                    06:13:68:a8:52:b5:49:39:35:d8:fc:bd:ee:6c:c8:
                    f4:53:44:25:c9:3b:e1:f4:5e:82:7b:7d:55:5d:19:
                    e5:19:19:0b:93:83:46:2f:16:a0:f9:df:bf:a9:dd:
                    2a:1a:b1:c2:ea:27:7f:fd:ec:67:ef:37:23:5f:c5:
                    c9:53:89:65:b2:35:f9:a9:be:e2:08:03:4b:89:36:
                    0e:d8:e3:85:93:8b:d0:1d:72:2c:4d:de:ac:c1:d1:
                    21:b6:8b:ca:cb:df:d5:c7:9c:26:30:4a:7b:e5:46:
                    60:eb:36:97:95:22:be:da:f1:72:b7:fe:e6:dd:fd:
                    36:be:06:85:2a:c3:4f:4a:2e:7b:2e:79:05:8b:b0:
                    97:ca:7a:90:e5:5d:d7:43:a6:48:1a:6f:66:9c:ed:
                    cc:c0:68:35:24:6c:e8:16:64:1c:08:b2:72:af:53:
                    87:24:51:64:d4:b4:b6:a0:12:d0:a4:a7:72:40:73:
                    3a:42:f9:0e:24:ff:d2:ec:0b:1a:23:c6:53:8d:79:
                    94:97:cd:a6:bc:e5:9d:f2:fa:0f:4b:cd:19:bd:1c:
                    61:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:73:5D:87:8F:C4:39:8C:38:12:4B:F8:4E:CA:8E:82:A5:1A:2C:EB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Tn6iC1NfFawaTahgjHBP2RvC4XWsh83wePtsLgHQzoP/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Tn6iC1NfFawaTahgjHBP2RvC4XWsh83wePtsLgHQzoP/2/8E735D878FC4398C38124BF84ECA8E82A51A2CEB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.32.0/20
                IPv6:
                  2804:f24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263567

    Signature Algorithm: sha256WithRSAEncryption
         0c:a3:e7:d3:2a:92:99:c2:a5:84:48:3b:1e:12:35:10:fd:02:
         28:e4:26:56:ba:c5:3d:6f:d6:4d:26:79:43:9d:c8:c1:c4:02:
         6d:f4:f4:3f:0b:58:e0:43:06:ac:55:5c:5f:80:1a:a8:ce:aa:
         d2:fe:cf:c6:c8:52:a6:d9:e5:a8:8a:24:2c:cb:3b:80:4b:c8:
         15:26:f3:27:4b:bb:e1:05:cc:7c:05:27:70:58:f2:1a:89:14:
         c4:45:d7:cd:80:19:da:97:da:d6:6c:cf:35:47:ed:38:80:d8:
         6f:b7:77:0e:c8:08:94:4e:b1:aa:6d:52:52:7a:4a:59:b4:ab:
         2b:cd:e2:b3:ee:a5:eb:21:b7:f4:96:c4:1d:d9:1d:a7:01:73:
         a1:5c:5f:09:98:5b:71:13:78:6a:17:29:93:6b:25:f9:27:88:
         a6:2a:5f:4d:16:58:d5:6b:b8:17:25:02:1a:53:be:12:18:7d:
         2b:86:fe:ad:98:e0:6c:3b:74:58:45:3e:2c:5e:c8:3f:fb:17:
         b5:ef:6b:3e:49:58:3c:76:d6:3e:36:dd:c2:a7:3f:75:e9:ec:
         29:1d:94:e0:f0:bd:0a:63:b8:ec:59:18:77:d5:1a:12:78:00:
         30:45:ba:4c:1b:49:76:29:9b:1d:e6:f6:b7:50:9a:b1:98:17:
         41:03:4b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:39:35 2025 by rpki-client