Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8E929E44F4E460DD232A372077C8427817A7F840.cer
File:                     8E929E44F4E460DD232A372077C8427817A7F840.cer (raw, json)
Hash identifier:          HYVLMyv1qQb6mfFTfPjYn3odzhxkEOfurbGwLZ7tNqA=
Subject key identifier:   8E:92:9E:44:F4:E4:60:DD:23:2A:37:20:77:C8:42:78:17:A7:F8:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4CCC4729C3C7A71E30B537D6AF03372D20BFB8F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/8E929E44F4E460DD232A372077C8427817A7F840.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Aug 2023 12:07:31 +0000
Certificate not after:    Thu 08 Aug 2024 12:12:31 +0000
Subordinate resources:    AS: 262549
                          IP: 177.72.176.0/21
                          IP: 2804:5e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:cc:47:29:c3:c7:a7:1e:30:b5:37:d6:af:03:37:2d:20:bf:b8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 10 12:07:31 2023 GMT
            Not After : Aug  8 12:12:31 2024 GMT
        Subject: CN=8E929E44F4E460DD232A372077C8427817A7F840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:15:41:a4:ef:25:ad:97:28:6b:23:b1:cb:6d:
                    19:3a:46:da:fd:40:9e:f0:59:d2:a6:d1:9a:db:26:
                    ff:b7:46:6c:f9:eb:95:0e:e7:4a:39:0a:e9:47:d9:
                    47:ff:81:71:2d:59:e1:18:ab:4e:cb:a1:2e:0a:13:
                    47:30:23:d5:da:3b:0f:d9:7a:35:ca:c5:cd:19:f2:
                    c6:00:d0:a2:06:b7:27:49:bb:3e:7b:b4:81:26:63:
                    25:a2:07:c6:af:4c:cc:b6:d6:f5:e5:fd:4b:bf:47:
                    2b:cc:f7:6c:64:67:48:77:a5:dd:b1:ab:95:6d:d2:
                    dd:07:13:a9:b8:66:bf:cd:8e:73:fe:ac:eb:60:29:
                    db:e5:99:4b:33:2f:1d:92:0a:70:26:28:02:cc:41:
                    c3:8c:e9:67:c3:fc:c0:e3:03:a9:54:29:98:cc:09:
                    f1:c8:28:6b:e2:fc:29:19:e4:20:05:4f:68:93:a6:
                    a6:10:56:d7:81:5c:e6:7b:d3:9f:a9:23:c7:13:f3:
                    99:a3:c9:0d:63:65:4f:f2:6c:0a:75:90:d3:26:83:
                    ca:2f:03:6e:a0:70:5e:4d:a5:b7:c4:64:7c:b0:0d:
                    05:ef:28:7c:b4:f9:fc:e8:a1:ca:76:a5:a1:4d:b6:
                    13:c8:93:df:51:85:29:29:28:88:fb:fe:c3:2f:83:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:92:9E:44:F4:E4:60:DD:23:2A:37:20:77:C8:42:78:17:A7:F8:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/8E929E44F4E460DD232A372077C8427817A7F840.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.176.0/21
                IPv6:
                  2804:5e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262549

    Signature Algorithm: sha256WithRSAEncryption
         78:e7:f8:9f:4d:3c:5a:d9:17:d4:5c:ff:04:16:2a:7e:1a:11:
         5f:8b:46:89:77:88:bb:3a:7a:c4:34:c1:14:6a:cb:28:13:63:
         eb:2f:b2:c5:9d:95:fd:5d:19:53:56:44:f4:7d:b0:01:e2:d0:
         33:da:fd:e9:bf:e8:07:b4:90:57:e8:13:e3:3a:16:60:bf:15:
         e0:94:17:52:1f:df:bf:42:e3:e4:c2:b9:66:a8:52:58:61:95:
         ee:6b:56:31:45:67:6e:98:2b:65:d1:fd:ab:94:c0:bc:2c:38:
         b3:e2:2a:3f:d6:26:a8:10:10:5c:d8:6f:f6:df:6e:70:cd:62:
         99:ce:84:fc:38:d5:c8:2a:bd:c2:d4:12:07:b5:0d:4f:8f:66:
         d4:c9:81:d5:06:17:c4:3e:56:5b:24:37:e1:bb:16:e6:46:4d:
         4c:bb:1d:2d:39:20:30:5d:1e:81:92:4c:3f:57:56:81:07:88:
         6a:5f:cf:60:0e:a5:d6:bd:ab:e6:a2:9c:c2:02:63:19:6b:64:
         e7:ec:d4:71:10:42:e9:f6:8f:b6:a8:8b:f3:61:96:22:10:6a:
         d2:d4:ea:b9:f1:dc:cf:cb:80:b4:78:8c:3d:a9:b2:cb:fa:de:
         89:d4:2f:cb:47:29:96:b8:bc:70:e4:e7:75:2f:af:ea:11:02:
         a9:a5:36:65
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUTMxHKcPHpx4wtTfWrwM3LSC/uPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTAxMjA3MzFaFw0yNDA4MDgxMjEyMzFaMDMxMTAvBgNV
BAMTKDhFOTI5RTQ0RjRFNDYwREQyMzJBMzcyMDc3Qzg0Mjc4MTdBN0Y4NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFUGk7yWtlyhrI7HLbRk6Rtr9
QJ7wWdKm0ZrbJv+3Rmz565UO50o5CulH2Uf/gXEtWeEYq07LoS4KE0cwI9XaOw/Z
ejXKxc0Z8sYA0KIGtydJuz57tIEmYyWiB8avTMy21vXl/Uu/RyvM92xkZ0h3pd2x
q5Vt0t0HE6m4Zr/NjnP+rOtgKdvlmUszLx2SCnAmKALMQcOM6WfD/MDjA6lUKZjM
CfHIKGvi/CkZ5CAFT2iTpqYQVteBXOZ705+pI8cT85mjyQ1jZU/ybAp1kNMmg8ov
A26gcF5NpbfEZHywDQXvKHy0+fzoocp2paFNthPIk99RhSkpKIj7/sMvg1hlAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSOkp5E9ORg3SMq
NyB3yEJ4F6f4QDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FUmZDaVNiUEVVcmc0eWNNRDNMWThUYXRMMUNkOTdnUzFZ
S0oyUldlRGRQOC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRVJmQ2lTYlBFVXJnNHljTUQzTFk4VGF0TDFDZDk3Z1Mx
WUtKMlJXZURkUDgvMC84RTkyOUU0NEY0RTQ2MEREMjMyQTM3MjA3N0M4NDI3ODE3
QTdGODQwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOxSLAwDQQCAAIwBwMF
ACgEBegwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAGVMA0GCSqGSIb3DQEBCwUA
A4IBAQB45/ifTTxa2RfUXP8EFip+GhFfi0aJd4i7OnrENMEUassoE2PrL7LFnZX9
XRlTVkT0fbAB4tAz2v3pv+gHtJBX6BPjOhZgvxXglBdSH9+/QuPkwrlmqFJYYZXu
a1YxRWdumCtl0f2rlMC8LDiz4io/1iaoEBBc2G/2325wzWKZzoT8ONXIKr3C1BIH
tQ1Pj2bUyYHVBhfEPlZbJDfhuxbmRk1Mux0tOSAwXR6Bkkw/V1aBB4hqX89gDqXW
vavmopzCAmMZa2Tn7NRxEELp9o+2qIvzYZYiEGrS1Oq58dzPy4C0eIw9qbLL+t6J
1C/LRymWuLxw5Od1L6/qEQKppTZl
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org