Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.cer
File:                     8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.cer (raw, json)
Hash identifier:          RqSCpAcnTCpuRWE0wPcGPpcVdqHG/8cTememyHLNs2U=
Subject key identifier:   8F:36:EF:AA:DD:08:F4:C8:8D:5F:DE:29:3B:F7:15:FD:5B:D0:E7:DC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D6B7BC52FE1473183BA975289D452BF130A8E4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 15 Apr 2023 16:01:16 +0000
Certificate not after:    Sat 13 Apr 2024 16:06:16 +0000
Subordinate resources:    AS: 61847
                          IP: 201.148.248.0/22
                          IP: 2804:1a3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6b:7b:c5:2f:e1:47:31:83:ba:97:52:89:d4:52:bf:13:0a:8e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 15 16:01:16 2023 GMT
            Not After : Apr 13 16:06:16 2024 GMT
        Subject: CN=8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:23:ba:8c:76:ec:a1:d5:f9:9f:f3:5c:b3:
                    98:55:8b:a0:d2:0e:ba:22:e9:5f:52:4a:d6:46:f0:
                    4c:fe:be:e0:cc:05:16:89:89:90:be:f1:22:57:74:
                    cf:7d:bd:3c:ee:17:38:c2:52:7e:be:25:1a:70:6a:
                    e9:6f:f5:5b:5f:bd:53:35:5a:c8:8c:11:e6:40:0e:
                    2c:7b:21:b7:39:d4:d1:47:2b:0c:f4:d5:26:3d:3b:
                    c0:ba:45:2d:97:77:11:ed:12:be:68:56:c6:40:7c:
                    51:16:34:59:9e:3f:23:f4:37:e9:2b:95:48:5d:cb:
                    cf:0d:a3:e4:1e:ac:93:1f:3a:bf:b4:65:64:49:37:
                    e5:76:5f:2d:06:76:ad:66:1a:96:f7:c8:59:45:1f:
                    ab:ab:e2:56:98:1d:36:6d:b1:63:0f:6a:a0:b3:54:
                    e0:a7:d5:e4:dc:49:51:85:10:4e:b0:9e:7f:64:ea:
                    2b:f0:7c:e7:49:08:fe:59:d0:7d:84:06:b8:8b:ec:
                    07:38:95:25:e6:ab:43:68:4e:52:db:82:66:fd:eb:
                    8c:4b:b6:1e:8c:37:9f:29:f7:34:5f:8d:ec:8a:90:
                    72:cd:65:5c:8f:37:55:a4:44:fb:d1:7a:e1:c7:1c:
                    ac:28:f6:c3:d7:5e:e6:3e:11:e4:e8:de:d8:21:fa:
                    39:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:36:EF:AA:DD:08:F4:C8:8D:5F:DE:29:3B:F7:15:FD:5B:D0:E7:DC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.248.0/22
                IPv6:
                  2804:1a3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61847

    Signature Algorithm: sha256WithRSAEncryption
         94:85:12:1a:42:fe:b1:16:e1:1f:09:27:ca:eb:70:1b:ed:b0:
         3c:74:a8:dd:da:48:77:c7:86:71:bc:d1:c1:38:ac:1d:82:4e:
         98:04:5d:91:b2:d5:99:a2:51:d5:a8:cc:5b:5b:98:f1:ed:18:
         3e:e8:23:03:90:98:24:07:4b:ff:92:42:b4:1d:20:79:dd:13:
         82:2c:be:b0:a7:bf:ca:68:93:30:ee:3c:e9:f6:04:58:f6:49:
         4b:f2:8b:99:e2:56:e2:e8:db:ce:ba:0a:00:e6:6e:82:23:12:
         2e:82:8c:30:c1:c6:f3:63:9f:c0:11:41:5a:4f:40:5b:27:44:
         4b:af:25:48:9b:e6:34:d1:45:2d:92:34:2c:80:87:71:72:7a:
         36:11:19:73:d6:66:b3:bb:82:e4:8e:0a:be:97:6e:e4:48:7a:
         e7:21:60:32:ff:c8:cf:6c:e2:b6:3c:62:7f:02:46:56:39:73:
         ee:07:38:73:85:c0:08:aa:2b:43:36:fe:d7:05:8e:13:de:38:
         7b:15:8e:f0:da:01:e6:b9:9c:1e:07:a8:49:40:d9:d9:f7:50:
         ad:ae:6c:2c:aa:40:5c:60:b1:bf:7c:b7:57:03:6a:c2:16:41:
         df:b5:43:45:8c:49:ed:9b:0a:81:91:43:e2:c7:e6:26:da:54:
         41:86:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org