Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer
File:                     8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer (raw, json)
Hash identifier:          ZPlO/iBj8tCmnci2mmv6ulPEgcJFr/0qQUmwPshX7+M=
Subject key identifier:   8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       791068DC65CFA0BA1E170048AEB28680B6B09E22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Dec 2022 19:22:04 +0000
Certificate not after:    Fri 15 Dec 2023 19:27:04 +0000
Subordinate resources:    AS: 263665
                          IP: 45.165.20.0/22
                          IP: 45.227.188.0/22
                          IP: 131.161.108.0/22
                          IP: 131.255.156.0/22
                          IP: 138.255.172.0/22
                          IP: 168.196.20.0/22
                          IP: 170.150.112.0/22
                          IP: 170.150.204.0/22
                          IP: 191.241.32.0/21
                          IP: 2804:1134::/32
                          IP: 2804:343c::/32
                          IP: 2804:47c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:10:68:dc:65:cf:a0:ba:1e:17:00:48:ae:b2:86:80:b6:b0:9e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 16 19:22:04 2022 GMT
            Not After : Dec 15 19:27:04 2023 GMT
        Subject: CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:20:93:40:08:1a:ee:9c:5c:bb:48:66:a6:
                    e7:1f:fe:f2:5c:65:0f:0e:8c:09:c1:4c:05:e7:3c:
                    51:0a:59:76:6a:d9:80:b3:af:96:c3:31:0e:4d:a5:
                    61:51:b2:33:db:a8:82:4b:d8:c7:c3:24:cb:58:fb:
                    12:9b:f5:27:27:dc:25:67:29:b4:ce:15:f3:e2:16:
                    3b:8c:cf:75:0f:29:71:f1:7a:1e:a3:14:25:37:03:
                    94:e0:ad:53:83:c9:f4:1c:43:a3:28:ea:d0:b3:d3:
                    71:f9:14:d6:6e:e3:79:ec:a6:da:60:e2:c0:8c:5b:
                    01:e8:ea:b7:e2:ea:12:10:d5:50:bd:c7:b1:e4:2e:
                    d4:aa:42:fe:78:0c:ca:aa:93:29:d3:09:1c:7b:18:
                    01:c6:dc:f4:69:54:e2:37:91:bf:56:d4:08:16:32:
                    48:6f:a7:dd:fb:3f:21:2f:47:1e:44:3c:7d:d6:e5:
                    13:02:3a:34:d6:e7:e3:af:4f:bb:68:0d:46:a1:86:
                    6b:92:b0:bb:15:f4:b0:79:f5:47:d0:a9:1a:64:fd:
                    4a:25:eb:72:65:e2:c0:88:9b:83:07:eb:40:bb:93:
                    16:b8:ca:64:59:71:c2:61:52:89:e8:71:53:a2:2c:
                    30:be:f9:c5:78:61:a4:1f:c0:ba:10:4e:08:c7:c7:
                    30:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.20.0/22
                  45.227.188.0/22
                  131.161.108.0/22
                  131.255.156.0/22
                  138.255.172.0/22
                  168.196.20.0/22
                  170.150.112.0/22
                  170.150.204.0/22
                  191.241.32.0/21
                IPv6:
                  2804:1134::/32
                  2804:343c::/32
                  2804:47c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263665

    Signature Algorithm: sha256WithRSAEncryption
         0e:63:4e:54:34:51:7c:97:eb:71:df:50:b0:e0:4e:45:f0:cf:
         fa:0b:cc:d6:0d:65:6b:08:0f:77:07:04:25:89:34:45:32:b5:
         27:a9:0b:d2:b7:6a:e2:d8:18:25:54:f1:fd:bb:f6:7a:13:71:
         02:f1:20:e9:d4:90:ad:70:64:37:dc:5d:4c:8b:03:ba:0c:e6:
         49:5a:5e:6c:83:c9:c8:7b:3d:a8:09:9f:7f:e4:cb:8e:bf:28:
         54:a4:f6:9d:e3:12:6c:33:92:65:1f:74:42:aa:05:61:ad:f9:
         fd:52:d2:30:1d:78:9b:3e:f5:3a:de:56:be:bc:0a:4f:5a:97:
         ea:42:6a:57:f8:e3:a5:45:fd:a8:0b:3d:92:0f:1b:20:26:37:
         c3:10:b0:f2:cf:2c:a4:89:77:de:c5:3c:12:b7:22:7b:b6:49:
         65:ea:25:14:5a:1c:83:30:53:5e:a2:62:49:4b:f1:30:f8:e9:
         4b:f9:0d:e4:1b:8a:1e:2f:41:42:0d:4c:c1:71:9a:56:1c:ad:
         1b:4c:fe:40:79:ef:07:ce:dc:52:ef:84:f0:6d:41:0f:d7:68:
         0a:b8:c7:df:ae:49:29:01:04:b9:fd:0b:ee:dd:d4:db:da:cf:
         78:5e:94:0d:1a:f2:c9:dc:6e:55:09:32:1c:c1:75:00:bc:d0:
         83:d6:6e:09
-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgIUeRBo3GXPoLoeFwBIrrKGgLawniIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEyMTYxOTIyMDRaFw0yMzEyMTUxOTI3MDRaMDMxMTAvBgNV
BAMTKDhFRTU0RDE0OTczMjFDMzY1RjI4RDUzOUY2RjRGODVEMjhGMkI4QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChjSCTQAga7pxcu0hmpucf/vJc
ZQ8OjAnBTAXnPFEKWXZq2YCzr5bDMQ5NpWFRsjPbqIJL2MfDJMtY+xKb9Scn3CVn
KbTOFfPiFjuMz3UPKXHxeh6jFCU3A5TgrVODyfQcQ6Mo6tCz03H5FNZu43nsptpg
4sCMWwHo6rfi6hIQ1VC9x7HkLtSqQv54DMqqkynTCRx7GAHG3PRpVOI3kb9W1AgW
Mkhvp937PyEvRx5EPH3W5RMCOjTW5+OvT7toDUahhmuSsLsV9LB59UfQqRpk/Uol
63Jl4sCIm4MH60C7kxa4ymRZccJhUonocVOiLDC++cV4YaQfwLoQTgjHxzAPAgMB
AAGjggNYMIIDVDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSO5U0UlzIcNl8o
1Tn29PhdKPK4pjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85TTdaUUxVenlOS3YzeVNFM0ZDTkpDS3Vtd0tOQ3RjelNU
WXBGN0g4TWdyZi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85TTdaUUxVenlOS3YzeVNFM0ZDTkpDS3Vtd0tOQ3RjelNU
WXBGN0g4TWdyZi8wLzhFRTU0RDE0OTczMjFDMzY1RjI4RDUzOUY2RjRGODVEMjhG
MkI4QTYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBsBggrBgEFBQcBBwEB/wRdMFswPAQCAAEwNgMEAi2lFAMEAi3jvAMEAoOh
bAMEAoP/nAMEAor/rAMEAqjEFAMEAqqWcAMEAqqWzAMEA7/xIDAbBAIAAjAVAwUA
KAQRNAMFACgENDwDBQAoBEfAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQF8TAN
BgkqhkiG9w0BAQsFAAOCAQEADmNOVDRRfJfrcd9QsOBORfDP+gvM1g1lawgPdwcE
JYk0RTK1J6kL0rdq4tgYJVTx/bv2ehNxAvEg6dSQrXBkN9xdTIsDugzmSVpebIPJ
yHs9qAmff+TLjr8oVKT2neMSbDOSZR90QqoFYa35/VLSMB14mz71Ot5WvrwKT1qX
6kJqV/jjpUX9qAs9kg8bICY3wxCw8s8spIl33sU8Ercie7ZJZeolFFocgzBTXqJi
SUvxMPjpS/kN5BuKHi9BQg1MwXGaVhytG0z+QHnvB87cUu+E8G1BD9doCrjH365J
KQEEuf0L7t3U29rPeF6UDRryydxuVQkyHMF1ALzQg9ZuCQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org