Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8ED3843B539B1E970A728FD535596E9B6DFC9169.cer
File:                     8ED3843B539B1E970A728FD535596E9B6DFC9169.cer (raw, json)
Hash identifier:          A5gqdXBhMyk3IglVBYWnTd5IJPmjLi/0mFOkPDnyzIg=
Subject key identifier:   8E:D3:84:3B:53:9B:1E:97:0A:72:8F:D5:35:59:6E:9B:6D:FC:91:69
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D075619994B892117E90BCCD3EB0BB94531D9C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/8ED3843B539B1E970A728FD535596E9B6DFC9169.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Jan 2023 16:40:06 +0000
Certificate not after:    Thu 18 Jan 2024 16:45:06 +0000
Subordinate resources:    AS: 270375
                          IP: 190.89.156.0/22
                          IP: 2804:6b10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:07:56:19:99:4b:89:21:17:e9:0b:cc:d3:eb:0b:b9:45:31:d9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 19 16:40:06 2023 GMT
            Not After : Jan 18 16:45:06 2024 GMT
        Subject: CN=8ED3843B539B1E970A728FD535596E9B6DFC9169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:e1:d2:bd:57:e0:80:f8:d5:2f:22:13:f8:
                    3b:b6:bb:a1:57:1a:9e:9a:af:10:bf:b5:7f:54:a9:
                    6a:96:dd:4d:c2:25:a7:6e:cc:28:b2:c5:fc:6f:9a:
                    7a:36:0d:c2:c1:1d:f1:b7:4a:e8:71:a8:ef:35:90:
                    da:37:4d:ed:bf:7f:20:94:4c:d0:f4:a5:54:39:b0:
                    65:dd:77:58:44:78:db:b8:94:29:0d:c6:2d:c7:86:
                    1b:f5:48:0b:1e:ce:7a:da:20:bc:7d:32:59:a4:bd:
                    7f:43:c6:c1:85:4b:73:0a:73:26:c7:04:65:12:8c:
                    65:77:72:33:d5:c2:3d:31:ac:c7:f9:5f:3c:ce:7b:
                    0d:eb:21:aa:79:55:db:d9:a0:f8:e9:de:1d:73:f9:
                    e8:2b:2a:7e:57:53:4d:8d:4d:e6:3c:4e:e3:2f:9e:
                    48:b1:e7:40:91:84:a7:84:1c:c0:7c:21:95:7f:2c:
                    3e:05:4f:b0:56:af:54:8a:50:be:4e:3d:5f:7f:91:
                    76:ea:0d:b0:6f:ad:b7:6c:63:01:f5:58:00:1e:7b:
                    96:f0:ad:3c:05:7f:31:9e:28:ba:42:d7:44:2f:ae:
                    f1:ae:8f:43:4f:82:c3:ce:7d:a9:97:d3:5f:4d:98:
                    21:86:e2:64:e9:1d:55:a7:4f:f8:ec:0f:ee:05:7f:
                    36:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:D3:84:3B:53:9B:1E:97:0A:72:8F:D5:35:59:6E:9B:6D:FC:91:69
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/8ED3843B539B1E970A728FD535596E9B6DFC9169.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.156.0/22
                IPv6:
                  2804:6b10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270375

    Signature Algorithm: sha256WithRSAEncryption
         7c:34:56:39:c5:93:b6:9c:28:5b:7a:c5:7f:a3:77:ff:7d:25:
         9e:19:5c:f1:e9:37:4b:02:86:90:0d:c9:51:09:1a:5c:34:40:
         78:8d:ee:7f:2e:5f:e5:b9:28:03:d7:5f:e0:a4:a6:25:40:83:
         dc:b0:3b:9f:54:1b:ec:79:d5:cd:a0:ae:e6:8a:d0:b1:e4:c9:
         e6:8c:29:ea:d2:6f:3d:ec:a1:9e:d7:45:fd:6e:dd:b8:f6:77:
         9f:7c:b1:fb:4d:30:0f:1b:0c:f7:99:6b:a9:94:66:bb:76:ae:
         dc:33:e0:d6:69:a5:6e:b0:77:8e:4e:bb:9e:36:7c:aa:f0:3f:
         6f:56:5e:50:44:73:e5:e6:9e:d3:2c:90:70:18:ca:80:45:23:
         b5:7c:92:1a:35:cb:3e:a0:2a:a5:3a:e6:9e:4d:c2:9f:ef:f2:
         6b:7c:bb:2e:75:90:0c:15:c0:ac:46:d6:48:bf:f8:48:ca:8b:
         9e:a9:af:7b:42:99:0c:8a:0f:10:3e:95:c5:ac:ea:7d:00:c2:
         86:c0:28:c6:8b:21:3e:8b:63:11:49:a1:a7:26:52:31:cd:72:
         96:bc:d6:e6:2c:28:84:b4:55:c8:61:9d:d2:6f:63:37:f0:05:
         9b:8f:16:6f:7f:16:eb:e8:f1:40:0e:25:a1:0d:63:4b:b3:01:
         3a:77:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org