Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8F430BE14DDDBB1964A87628733ACC2A95FA5FC6.cer
File:                     8F430BE14DDDBB1964A87628733ACC2A95FA5FC6.cer (raw, json)
Hash identifier:          L/x40iCl1DohCm8DeW0J72q0nNPL567hNxOyzAKZqeU=
Subject key identifier:   8F:43:0B:E1:4D:DD:BB:19:64:A8:76:28:73:3A:CC:2A:95:FA:5F:C6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5F23361DF0E3E6AF75C3B1A98B3E8C61C3D547A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/8F430BE14DDDBB1964A87628733ACC2A95FA5FC6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Sep 2022 19:54:51 +0000
Certificate not after:    Wed 20 Sep 2023 19:59:51 +0000
Subordinate resources:    AS: 14840
                          AS: 61889
                          IP: 177.152.184.0/22
                          IP: 186.211.128.0/17
                          IP: 187.103.96.0/19
                          IP: 200.0.32.0/20
                          IP: 200.143.64.0/18
                          IP: 200.195.224.0/19
                          IP: 200.215.208.0/20
                          IP: 201.16.0.0/17
                          IP: 2804:8::/30
                          IP: 2804:e34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:23:36:1d:f0:e3:e6:af:75:c3:b1:a9:8b:3e:8c:61:c3:d5:47:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 21 19:54:51 2022 GMT
            Not After : Sep 20 19:59:51 2023 GMT
        Subject: CN=8F430BE14DDDBB1964A87628733ACC2A95FA5FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:a2:f9:81:68:60:f9:1e:ed:6d:d8:01:aa:
                    eb:85:09:db:84:cb:27:bd:1f:ea:e1:73:26:5c:5c:
                    d0:8a:c3:6f:af:64:3c:5c:95:2c:9b:af:35:c6:12:
                    a3:8e:88:6f:1c:93:90:12:13:87:04:43:3e:86:f9:
                    36:9e:56:24:b9:c0:c6:d9:0f:a8:ad:14:01:4e:3b:
                    8b:fd:97:7f:15:2f:5c:2d:35:33:c6:26:52:6b:25:
                    9e:e6:c4:04:05:68:38:c7:bb:17:a3:4d:3e:ec:18:
                    5e:91:87:91:b3:f4:4c:0a:58:4b:cd:a5:99:5b:b7:
                    11:5e:23:4c:0f:25:fa:70:53:5c:33:c4:d0:c0:8c:
                    6d:5d:aa:e7:9d:76:5f:06:f8:7e:18:16:0c:3b:96:
                    b3:f0:d7:60:3f:b3:47:08:8a:fb:f2:00:60:f3:fa:
                    79:7d:70:df:0f:68:c0:5c:92:f0:87:04:6c:c9:58:
                    d6:8c:75:96:49:cf:81:a4:9c:38:ec:b6:98:7d:71:
                    96:1d:c2:68:1d:50:0d:3c:e3:b6:36:df:38:13:81:
                    cc:9e:0d:04:35:e4:a0:29:b6:52:7a:86:c6:1a:1d:
                    f8:c9:2a:45:a0:54:aa:ee:9d:b6:ef:0d:4f:11:ad:
                    5a:be:cf:96:72:05:c8:a2:87:75:83:8d:1a:2a:09:
                    cc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:43:0B:E1:4D:DD:BB:19:64:A8:76:28:73:3A:CC:2A:95:FA:5F:C6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/8F430BE14DDDBB1964A87628733ACC2A95FA5FC6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.184.0/22
                  186.211.128.0/17
                  187.103.96.0/19
                  200.0.32.0/20
                  200.143.64.0/18
                  200.195.224.0/19
                  200.215.208.0/20
                  201.16.0.0/17
                IPv6:
                  2804:8::/30
                  2804:e34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14840
                  61889

    Signature Algorithm: sha256WithRSAEncryption
         65:84:57:0b:78:31:60:97:4a:24:4e:2b:ca:a1:88:7d:04:fa:
         81:ff:0a:b3:ce:a5:0b:df:64:f7:a9:a9:19:36:e6:09:db:43:
         4d:02:d3:de:c4:0d:a4:af:fe:cb:12:8d:64:b1:3c:7b:97:8c:
         88:bc:62:37:f8:f6:e8:22:e4:85:8e:5b:b7:69:06:4b:59:08:
         73:44:e8:ed:38:5e:3d:19:71:e4:f3:15:b2:a6:d8:e6:88:73:
         80:ad:ea:bf:d5:9b:bb:a5:8b:73:95:8d:41:41:fa:79:7a:a9:
         15:01:a2:7d:a2:4e:8a:74:ea:22:0e:a1:5f:c0:a8:0d:4d:ea:
         2f:9e:d1:57:22:6d:3e:02:ba:b1:07:67:c2:81:45:66:8c:0f:
         43:ea:b9:6b:19:8b:1d:90:e9:1d:fc:0e:0c:b1:6a:5a:9b:23:
         55:aa:b2:d5:08:04:ac:38:f3:65:4d:c0:05:96:2d:bf:0a:7c:
         c8:cb:dd:c0:c7:d2:4c:bc:9d:a3:de:e9:1c:b8:2d:a1:f3:8d:
         ae:cf:96:0d:da:6e:e6:16:a6:09:1c:63:d8:66:60:6e:c1:09:
         85:e2:7a:5b:a0:c3:e0:2b:02:16:8f:a0:fc:10:5b:80:a6:29:
         f4:7e:75:56:7d:b4:1d:fb:03:87:8e:d8:a7:13:72:97:8d:b4:
         30:30:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org