Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8E8EAB76424F963D218A026D0B5A1ABF5A09F987.cer
File:                     8E8EAB76424F963D218A026D0B5A1ABF5A09F987.cer (raw, json)
Hash identifier:          RS8Z5jEbYB5lkx/NPsVQoCzFpNXLmajzeyXAuEkj19E=
Subject key identifier:   8E:8E:AB:76:42:4F:96:3D:21:8A:02:6D:0B:5A:1A:BF:5A:09:F9:87
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A0444C03340CED4AAE274BC77FD47DF0700A1F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/8E8EAB76424F963D218A026D0B5A1ABF5A09F987.mft
caRepository:             rsync://rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jul 2023 20:13:30 +0000
Certificate not after:    Tue 16 Jul 2024 20:18:30 +0000
Subordinate resources:    AS: 270380
                          IP: 190.89.56.0/22
                          IP: 2804:6b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:04:44:c0:33:40:ce:d4:aa:e2:74:bc:77:fd:47:df:07:00:a1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 18 20:13:30 2023 GMT
            Not After : Jul 16 20:18:30 2024 GMT
        Subject: CN=8E8EAB76424F963D218A026D0B5A1ABF5A09F987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:31:de:de:fd:79:bc:d8:a6:96:63:71:8a:
                    4c:40:03:1e:f7:d8:54:04:13:48:62:43:16:6f:d1:
                    0c:77:29:2c:87:bd:9c:67:9a:bc:f3:7d:15:c7:10:
                    85:cc:8f:c7:e8:d8:bf:97:ac:b5:3f:86:60:f4:fb:
                    25:ca:55:b5:01:34:29:cf:b4:5a:11:5e:ca:d4:aa:
                    72:7a:bd:21:fa:4c:2e:82:d0:e4:eb:93:aa:5d:50:
                    39:3a:1d:3d:ed:46:fe:09:02:64:3b:38:55:24:cd:
                    b7:19:b4:af:01:f8:f4:a9:10:d2:0a:ac:7f:2f:4a:
                    15:b8:1f:57:c6:4a:a8:ff:03:b2:17:da:91:53:e8:
                    75:87:ea:c6:6f:a0:2b:15:bd:80:c2:a9:c3:37:ee:
                    f4:77:cd:5b:85:2e:59:aa:05:ea:f0:a2:c6:09:63:
                    1f:7b:10:66:a4:46:9e:27:12:6b:69:61:e4:59:5a:
                    ca:dd:d7:97:33:d9:fa:31:8c:87:d3:4e:7f:c0:83:
                    30:9f:12:79:b8:50:97:89:f8:34:e3:c2:68:bc:5e:
                    32:09:0a:89:de:31:ca:32:1c:3a:af:69:17:72:a4:
                    9b:ca:e6:1c:0c:2e:c2:c8:31:57:49:9e:98:72:9e:
                    d8:8d:c4:9f:c0:93:ab:11:2e:cd:28:f9:e2:a0:40:
                    4b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:8E:AB:76:42:4F:96:3D:21:8A:02:6D:0B:5A:1A:BF:5A:09:F9:87
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/8E8EAB76424F963D218A026D0B5A1ABF5A09F987.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.56.0/22
                IPv6:
                  2804:6b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270380

    Signature Algorithm: sha256WithRSAEncryption
         89:ee:1f:34:21:24:84:ab:c5:1c:c9:b6:20:4e:50:9b:90:7a:
         17:f2:c6:ee:99:c0:0e:57:f8:fb:79:ad:31:7a:88:13:9a:00:
         9a:bf:07:22:25:b0:9b:a8:26:14:08:9c:73:2d:84:eb:84:ab:
         8e:4f:8b:f4:04:60:98:62:42:69:b2:40:24:54:e5:b6:a3:80:
         94:7f:5f:92:62:7b:09:ae:fe:ef:e5:ed:02:c1:4f:7d:f8:4c:
         1a:50:f0:67:68:33:5e:fc:a2:b8:ec:4c:e3:6c:a2:a7:f2:0c:
         67:bf:d5:47:ca:c0:2a:f3:7a:a7:c8:c3:ed:9f:b2:a4:bb:66:
         03:09:19:63:7c:33:c1:b0:d5:9e:be:b6:d7:36:9a:62:e7:ec:
         bd:5c:eb:22:88:38:e2:2a:02:74:a4:24:f7:f6:2f:ea:f6:4b:
         bb:91:bf:05:fd:45:6f:21:a4:2b:7d:c7:42:e8:4d:89:d1:f3:
         43:bf:5b:83:5b:d9:12:5d:84:5e:e1:1e:6a:96:02:6d:fb:62:
         b1:57:dc:d4:51:93:ed:45:d9:b8:8f:f1:3b:18:fd:ec:2d:20:
         6e:eb:b6:4d:34:73:e9:e1:8a:ef:63:07:21:b1:11:93:85:6d:
         94:17:ee:87:6d:c6:d4:c6:d6:6e:6b:db:9b:37:3a:68:53:f1:
         2e:20:c3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org