Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.cer
File:                     8ECAE7055E57C4418318B40632DEBC73D2044D56.cer (raw, json)
Hash identifier:          xb7sVtQTxXy9gZTkvxufC4XA44y1VIokoi79i2pdthM=
Subject key identifier:   8E:CA:E7:05:5E:57:C4:41:83:18:B4:06:32:DE:BC:73:D2:04:4D:56
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E8DCC6D35F6B218415935378F75216C02FCA5C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.mft
caRepository:             rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 21:24:44 +0000
Certificate not after:    Mon 21 Oct 2024 21:29:44 +0000
Subordinate resources:    AS: 268360
                          IP: 45.238.200.0/22
                          IP: 2804:4ff4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8d:cc:6d:35:f6:b2:18:41:59:35:37:8f:75:21:6c:02:fc:a5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 21:24:44 2023 GMT
            Not After : Oct 21 21:29:44 2024 GMT
        Subject: CN=8ECAE7055E57C4418318B40632DEBC73D2044D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:c7:41:20:87:76:af:b1:80:54:57:45:fb:
                    b1:ca:ff:19:11:40:44:d6:6e:7c:f8:5e:d7:f7:3b:
                    c0:28:3c:da:9c:23:06:90:6a:8b:41:45:e5:2d:39:
                    92:62:25:bb:a6:61:1e:44:62:5b:7e:76:1d:50:4a:
                    db:fd:d4:fd:40:ca:cd:a1:4b:27:54:34:2c:c4:d0:
                    d9:25:80:85:6a:8e:13:5e:12:6c:f1:3b:76:f8:ae:
                    e4:b7:d1:54:23:5f:88:22:8c:e0:05:15:8d:5d:11:
                    88:21:66:97:8e:b7:34:a6:96:c2:41:8d:03:3a:ff:
                    89:44:40:0f:d0:e0:1e:43:ee:9b:54:eb:16:a5:a0:
                    17:e0:c1:9b:97:f1:38:b1:dd:69:bb:ad:6d:6f:aa:
                    db:3f:7e:f1:17:4a:1d:22:74:b1:09:f8:82:36:cc:
                    be:fa:cc:eb:b8:a0:87:88:bd:0d:73:c5:5d:f4:60:
                    e9:c3:ac:b3:c6:63:96:a6:d2:ba:1f:fd:b6:bf:e1:
                    ce:ae:06:07:59:0c:2b:35:2e:f4:d2:9b:df:bd:8a:
                    d3:c5:fd:0f:bb:8b:f7:0e:f1:b0:a5:79:ce:30:9d:
                    09:b5:d9:ec:d5:b9:0b:d8:60:86:88:29:30:b6:cc:
                    44:4a:7f:fe:45:64:05:b2:16:d1:03:08:df:aa:47:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:CA:E7:05:5E:57:C4:41:83:18:B4:06:32:DE:BC:73:D2:04:4D:56
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.200.0/22
                IPv6:
                  2804:4ff4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268360

    Signature Algorithm: sha256WithRSAEncryption
         62:1c:91:31:26:f6:4e:74:5e:d5:18:4f:62:00:1d:3c:3c:f1:
         41:22:e2:22:11:44:b7:8c:9d:6c:d7:3a:6a:51:39:88:08:d1:
         dd:ba:66:38:ac:6f:e9:ad:6a:b7:2b:ba:72:ef:48:0a:2a:ef:
         ac:e8:d1:96:3a:20:ee:a7:8a:92:36:5b:1d:7f:72:88:c6:dc:
         2e:96:bc:27:e5:3d:15:4a:dc:b0:2d:40:d7:54:e9:3c:77:f7:
         72:ca:7c:59:60:6e:ea:3f:0b:ec:13:be:f0:2a:b1:04:50:ae:
         90:bf:f7:80:72:d7:81:08:c9:f2:94:62:f9:a0:13:e4:17:c5:
         07:39:45:d3:46:f7:bb:42:bd:bd:c1:e7:96:4b:5f:5a:b0:a9:
         02:61:9b:12:c4:33:9c:77:8f:6f:35:08:1d:01:cb:1f:a3:2b:
         76:17:96:13:74:2b:b7:81:a6:18:c1:12:b6:3a:54:7b:e4:de:
         6b:4c:8a:77:75:c3:cd:56:b9:7a:81:0e:c6:ed:55:a0:4c:36:
         c2:51:1c:6b:72:0c:7a:4a:2c:3d:51:e7:36:c1:be:1c:36:6d:
         f0:96:8f:59:28:39:de:65:75:ff:0c:d4:95:5d:ab:32:e2:9b:
         8e:0e:79:db:fb:2b:35:43:16:db:71:96:fc:89:4c:24:65:eb:
         4d:5b:90:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org