Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8EB451B27895BC5878C8E33AF6255A3AE9A90554.cer
File:                     8EB451B27895BC5878C8E33AF6255A3AE9A90554.cer (raw, json)
Hash identifier:          fT5JJg8HNzZwDLeowIpnI35CPH+eKJhF5Pp2v5vVujo=
Subject key identifier:   8E:B4:51:B2:78:95:BC:58:78:C8:E3:3A:F6:25:5A:3A:E9:A9:05:54
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       35CC8F528C2AB8CE051060A5DB5E4A08FA49F53B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/8EB451B27895BC5878C8E33AF6255A3AE9A90554.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 May 2023 18:01:34 +0000
Certificate not after:    Mon 27 May 2024 18:06:34 +0000
Subordinate resources:    AS: 262582
                          IP: 138.99.32.0/22
                          IP: 177.84.96.0/21
                          IP: 177.93.88.0/21
                          IP: 2804:664::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cc:8f:52:8c:2a:b8:ce:05:10:60:a5:db:5e:4a:08:fa:49:f5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 29 18:01:34 2023 GMT
            Not After : May 27 18:06:34 2024 GMT
        Subject: CN=8EB451B27895BC5878C8E33AF6255A3AE9A90554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:80:76:df:e5:d2:31:e7:f9:33:c6:6d:36:
                    1b:31:b9:36:38:ab:5a:d4:3b:6b:97:7a:5e:01:d1:
                    71:e1:1f:af:86:2c:77:27:58:5c:a3:9e:f3:8e:bb:
                    5d:a8:ff:63:7a:40:25:1b:6b:04:07:e6:65:65:f7:
                    6d:f2:0f:dc:64:80:84:a8:dc:35:cb:89:cf:0b:c6:
                    d8:54:42:cf:b7:7b:dd:23:3c:ed:01:e5:33:d6:a5:
                    19:b4:60:73:46:c0:9a:13:59:58:ce:b6:e2:15:1c:
                    d9:d1:c0:27:ce:3a:a0:88:27:ff:72:9b:48:99:a7:
                    c6:04:c4:b1:44:b9:c3:57:f8:fd:9e:c2:61:fb:b3:
                    92:f4:fc:a7:d2:1e:12:b4:be:da:35:dc:27:6c:57:
                    3d:8b:98:21:61:a5:1d:52:8b:08:46:86:3e:02:08:
                    05:e0:fa:f6:67:fd:c2:db:80:2b:0b:2e:4a:23:86:
                    e0:48:53:83:e2:7f:a1:f0:1f:0b:08:a7:b6:36:d9:
                    d9:77:1e:80:cd:41:96:3d:a6:72:f4:8d:38:2e:2f:
                    c4:15:8d:ce:4d:2d:47:93:f4:76:ad:d3:7f:cf:f6:
                    00:57:d5:96:25:4c:87:b6:e7:20:ff:ab:e5:91:61:
                    86:41:f8:75:fe:74:be:aa:fa:8a:97:a9:a7:6a:9d:
                    94:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:B4:51:B2:78:95:BC:58:78:C8:E3:3A:F6:25:5A:3A:E9:A9:05:54
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/8EB451B27895BC5878C8E33AF6255A3AE9A90554.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.32.0/22
                  177.84.96.0/21
                  177.93.88.0/21
                IPv6:
                  2804:664::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262582

    Signature Algorithm: sha256WithRSAEncryption
         b7:b7:96:2e:b9:20:d2:c6:7b:19:87:27:cf:0f:01:7f:af:2a:
         06:e0:cb:8e:24:a2:e0:1c:aa:72:02:ef:7e:e0:e9:59:d1:06:
         70:0e:f8:85:ec:6d:e6:f0:32:9f:dc:58:2f:a2:37:06:ef:d0:
         39:5b:3d:91:6a:ff:8d:b5:c4:d6:30:5d:3a:fc:85:46:a9:25:
         08:63:b8:01:ab:86:05:35:ba:ca:2f:d9:fd:cd:cc:1c:0b:4c:
         02:b0:28:d5:cc:48:10:74:1b:96:dd:19:95:d7:54:20:71:18:
         e7:b5:0d:7f:f1:64:11:91:e0:db:02:b6:4f:62:e2:da:e1:7d:
         3b:60:52:16:0b:57:ef:be:72:dc:a0:0d:ab:bb:95:b5:65:dd:
         ef:1d:31:9d:d4:06:46:63:94:db:02:a1:22:e2:a6:f1:20:3b:
         c1:54:42:bd:bd:2c:04:b1:59:d1:11:db:03:b7:85:33:3c:57:
         63:a9:b4:4a:a1:2f:47:9d:5b:37:50:e1:63:d1:a6:d5:52:6d:
         8d:e8:e5:72:84:00:ae:ad:d1:a1:da:ef:03:8a:a5:9f:ad:1e:
         9b:68:a5:49:85:d5:30:83:0b:75:f8:4c:c5:97:93:e3:d6:d4:
         21:03:71:b9:e6:ec:d8:71:7f:a2:2d:5b:13:f0:1c:08:5e:5b:
         d6:58:d6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org