Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8F22D345509920FA851E37D89918C7FD03B2DF1A.cer
File:                     8F22D345509920FA851E37D89918C7FD03B2DF1A.cer (raw, json)
Hash identifier:          E6hCKrgOIlqYXQh0vOM4jAQfr9VtMAo5i6OyOBoWLMM=
Subject key identifier:   8F:22:D3:45:50:99:20:FA:85:1E:37:D8:99:18:C7:FD:03:B2:DF:1A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E031E87DAC5FBE0973A711EC3C5D880320467AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/8F22D345509920FA851E37D89918C7FD03B2DF1A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Aug 2023 20:56:37 +0000
Certificate not after:    Tue 06 Aug 2024 21:01:37 +0000
Subordinate resources:    AS: 264592
                          IP: 200.170.76.0/22
                          IP: 2804:221c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:03:1e:87:da:c5:fb:e0:97:3a:71:1e:c3:c5:d8:80:32:04:67:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  8 20:56:37 2023 GMT
            Not After : Aug  6 21:01:37 2024 GMT
        Subject: CN=8F22D345509920FA851E37D89918C7FD03B2DF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:14:8c:85:b5:41:4c:03:33:d1:3e:24:71:
                    4a:ee:55:4b:42:67:32:b5:8f:e2:16:d7:b6:b1:fc:
                    b7:21:8a:5c:f8:4d:8b:e5:80:21:da:80:9c:12:8e:
                    de:43:78:43:76:64:45:68:1e:f7:27:dc:4a:77:2f:
                    3a:2b:da:1e:8a:7d:dc:35:7e:86:42:da:90:5e:ba:
                    44:5b:01:8c:44:66:81:d4:66:47:e2:1a:c8:c5:9d:
                    27:2f:af:cc:8c:3b:ff:5e:8c:75:4f:3d:9b:61:9d:
                    09:65:c1:0b:f5:0a:7f:c4:a7:e9:c0:37:4d:10:46:
                    e7:96:af:43:1c:d3:97:b4:a5:41:03:77:38:0a:59:
                    80:9b:ed:45:24:7c:1e:65:6d:1c:ac:6e:bf:90:48:
                    b0:c2:06:60:03:09:de:d7:ef:d2:63:5b:2c:47:01:
                    43:2e:6a:c8:64:4a:79:8e:d0:cb:cf:df:11:c4:3d:
                    93:07:9a:4c:db:fd:ff:87:b3:02:e4:58:3c:67:42:
                    c5:ac:19:64:ba:4f:d9:98:5e:cf:47:75:32:6d:c8:
                    bc:d9:a1:db:91:61:79:e5:4e:7e:e7:63:37:c7:8c:
                    95:39:27:c9:8c:ca:10:76:95:4b:2b:be:68:57:d9:
                    7e:6a:8c:69:c9:d3:df:7b:ab:07:aa:a0:ef:f3:09:
                    c1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:22:D3:45:50:99:20:FA:85:1E:37:D8:99:18:C7:FD:03:B2:DF:1A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/8F22D345509920FA851E37D89918C7FD03B2DF1A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.170.76.0/22
                IPv6:
                  2804:221c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264592

    Signature Algorithm: sha256WithRSAEncryption
         0f:c3:3d:91:e4:ff:85:79:a5:35:d6:71:5d:91:75:5c:7f:ed:
         94:24:21:07:db:9e:01:dc:95:30:48:01:e0:3b:bd:cb:4d:07:
         4b:b0:81:a4:e1:2f:e5:a5:98:1e:8b:1a:16:4f:92:f9:e8:fc:
         91:d3:c7:c7:64:bb:9d:6e:f4:28:58:be:f1:91:70:55:3d:23:
         13:e4:71:29:b6:7a:16:7f:65:a0:61:af:24:b9:8b:77:c3:31:
         ac:17:22:f6:5e:0a:b5:66:88:28:93:bc:bb:d5:d2:6d:0a:7e:
         5f:8e:8a:67:b8:5d:8c:7d:5f:7b:58:70:f8:08:a5:d5:77:5b:
         98:17:1f:02:fd:b2:52:f9:c5:de:b0:54:75:24:2b:9d:4f:82:
         bc:9a:15:ef:72:21:8e:fd:34:54:20:27:bb:d2:5f:ba:49:2f:
         d1:c0:59:73:cd:f2:55:16:14:44:86:78:2e:70:7b:45:20:09:
         c0:ca:bf:b8:5e:1e:9a:d7:a7:a1:74:d9:45:0a:80:e7:24:a3:
         fb:6f:65:ac:93:0d:2f:c8:8b:20:c7:ab:b6:e3:d1:6b:31:10:
         96:89:81:32:d3:40:9f:32:00:e6:27:10:1f:f2:d8:40:83:84:
         aa:85:1b:84:fb:68:4d:d2:81:59:17:d4:95:d5:bb:d4:20:e2:
         66:97:98:13
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIULgMeh9rF++CXOnEew8XYgDIEZ64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MDgyMDU2MzdaFw0yNDA4MDYyMTAxMzdaMDMxMTAvBgNV
BAMTKDhGMjJEMzQ1NTA5OTIwRkE4NTFFMzdEODk5MThDN0ZEMDNCMkRGMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+BSMhbVBTAMz0T4kcUruVUtC
ZzK1j+IW17ax/Lchilz4TYvlgCHagJwSjt5DeEN2ZEVoHvcn3Ep3Lzor2h6Kfdw1
foZC2pBeukRbAYxEZoHUZkfiGsjFnScvr8yMO/9ejHVPPZthnQllwQv1Cn/Ep+nA
N00QRueWr0Mc05e0pUEDdzgKWYCb7UUkfB5lbRysbr+QSLDCBmADCd7X79JjWyxH
AUMuashkSnmO0MvP3xHEPZMHmkzb/f+HswLkWDxnQsWsGWS6T9mYXs9HdTJtyLzZ
oduRYXnlTn7nYzfHjJU5J8mMyhB2lUsrvmhX2X5qjGnJ0997qweqoO/zCcGpAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPItNFUJkg+oUe
N9iZGMf9A7LfGjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ydldlOFBmRWV0SnIzVnYzRkRONXFoS1dhVm81cHltM1FD
ekcyQnNpRXBTUS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMnZXZThQZkVldEpyM1Z2M0ZETjVxaEtXYVZvNXB5bTNR
Q3pHMkJzaUVwU1EvMC84RjIyRDM0NTUwOTkyMEZBODUxRTM3RDg5OTE4QzdGRDAz
QjJERjFBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALIqkwwDQQCAAIwBwMF
ACgEIhwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAmQMA0GCSqGSIb3DQEBCwUA
A4IBAQAPwz2R5P+FeaU11nFdkXVcf+2UJCEH254B3JUwSAHgO73LTQdLsIGk4S/l
pZgeixoWT5L56PyR08fHZLudbvQoWL7xkXBVPSMT5HEptnoWf2WgYa8kuYt3wzGs
FyL2Xgq1Zogok7y71dJtCn5fjopnuF2MfV97WHD4CKXVd1uYFx8C/bJS+cXesFR1
JCudT4K8mhXvciGO/TRUICe70l+6SS/RwFlzzfJVFhREhngucHtFIAnAyr+4Xh6a
16ehdNlFCoDnJKP7b2Wskw0vyIsgx6u249FrMRCWiYEy00CfMgDmJxAf8thAg4Sq
hRuE+2hN0oFZF9SV1bvUIOJml5gT
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:31:51 2025 by rpki-client