Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8F399D44012B782E46447CB2E4C4BEA59C1F08DD.cer
File:                     8F399D44012B782E46447CB2E4C4BEA59C1F08DD.cer (raw, json)
Hash identifier:          fPFZaW0ultitORXhm40XvLwS3scvgQMGy4XIwFKdppw=
Subject key identifier:   8F:39:9D:44:01:2B:78:2E:46:44:7C:B2:E4:C4:BE:A5:9C:1F:08:DD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E9CA85DC31636ADA7906791E8152BBACD4BCD8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/8F399D44012B782E46447CB2E4C4BEA59C1F08DD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Aug 2021 13:02:33 +0000
Certificate not after:    Tue 23 Aug 2022 13:07:33 +0000
Subordinate resources:    AS: 268258
                          IP: 45.237.8.0/22
                          IP: 2804:4e64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:9c:a8:5d:c3:16:36:ad:a7:90:67:91:e8:15:2b:ba:cd:4b:cd:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 24 13:02:33 2021 GMT
            Not After : Aug 23 13:07:33 2022 GMT
        Subject: CN=8F399D44012B782E46447CB2E4C4BEA59C1F08DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:36:a0:b8:e5:ca:ae:58:f2:b4:4f:d9:a6:74:
                    6b:2d:07:2e:8c:3b:eb:c9:53:bd:28:56:5f:1e:b4:
                    c4:23:78:a9:a2:53:36:8e:cb:59:d4:4b:89:58:c8:
                    fc:ed:f5:4f:9b:e5:db:a1:1a:12:6d:d0:fc:92:85:
                    76:bf:26:87:f2:e1:05:0c:2d:96:4c:7b:60:13:c3:
                    85:cc:d7:bb:42:6b:1e:68:4a:c4:26:a6:f8:25:1a:
                    05:3b:f7:94:60:53:3e:60:e6:5a:9e:96:7e:a3:ac:
                    cb:0c:da:41:e6:75:0a:03:94:94:d6:bc:3f:48:b4:
                    5d:82:04:5c:fc:4c:3b:63:a0:e4:12:9e:72:20:7f:
                    3d:f3:30:6e:7e:c9:18:59:bd:28:92:90:0a:a0:94:
                    ae:47:13:4e:f1:c9:8c:82:0e:cc:ff:1e:69:86:b1:
                    bf:8d:31:b7:e3:65:68:d3:79:40:11:1b:a2:45:84:
                    a0:13:33:1f:27:f9:e3:6e:59:46:f0:49:cd:30:50:
                    f1:71:33:ee:a6:67:d1:2c:75:62:7e:6c:5a:64:c6:
                    33:0f:32:72:3c:29:83:9d:7f:bf:72:e2:61:63:43:
                    35:83:13:2c:b6:b5:30:ee:f8:fa:d0:b2:54:e1:57:
                    31:cd:4d:f9:92:9e:58:50:3a:06:6c:14:49:67:c4:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:39:9D:44:01:2B:78:2E:46:44:7C:B2:E4:C4:BE:A5:9C:1F:08:DD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/8F399D44012B782E46447CB2E4C4BEA59C1F08DD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.8.0/22
                IPv6:
                  2804:4e64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268258

    Signature Algorithm: sha256WithRSAEncryption
         b0:32:bf:c7:9a:a8:05:e1:7b:3b:31:eb:78:19:a0:59:7d:05:
         9f:62:f6:97:ec:83:a7:fc:a4:db:64:5f:62:42:cc:cd:e5:97:
         72:6c:d2:84:78:61:d0:f6:30:37:b4:db:f2:84:aa:e5:27:17:
         84:9c:ca:d8:e7:c8:1c:0f:88:ab:0c:b5:dc:6d:f2:d4:04:05:
         79:73:79:c5:76:1b:0a:b3:d4:07:2e:fc:a2:9f:f1:fb:e4:52:
         e1:80:2f:44:81:37:71:25:c4:a8:d8:eb:da:9b:ac:37:72:e1:
         fd:e4:b4:0b:56:9c:8d:06:7f:ac:97:b9:c6:01:31:7c:63:e2:
         73:13:44:af:4d:77:d8:31:9f:d3:ba:bb:f7:45:fc:00:21:e9:
         d2:55:fc:66:18:c1:cb:de:f9:6f:d1:75:2a:dc:2a:44:24:a7:
         d4:2c:19:c2:cb:6a:29:4b:18:c6:1a:f0:b1:07:b8:7b:67:8f:
         fb:bf:01:1b:bc:85:f3:ef:cd:dc:79:e9:c4:d7:eb:5b:3b:7e:
         77:46:96:4c:8f:cf:df:c9:88:51:91:d0:f9:e2:bf:8e:ba:2d:
         7c:7c:20:9c:86:63:12:17:b5:0a:6f:f4:27:e0:a0:08:f6:ed:
         07:d4:41:a2:77:2a:d3:7c:47:d3:3d:33:0a:b8:9b:f1:f6:76:
         27:fc:eb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org