Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer
File:                     8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer (raw, json)
Hash identifier:          VS+wFkCXJ8/1ckb8Hq+vLzfc4cIpMZKNkyIC5UrMncQ=
Subject key identifier:   8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       067DF35FD812DBBF24BE3D2DF31EEF3BFFFE470A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:54:39 +0000
Certificate not after:    Tue 04 Mar 2025 17:59:39 +0000
Subordinate resources:    AS: 264368
                          IP: 131.161.48.0/22
                          IP: 2804:1d70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7d:f3:5f:d8:12:db:bf:24:be:3d:2d:f3:1e:ef:3b:ff:fe:47:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  5 17:54:39 2024 GMT
            Not After : Mar  4 17:59:39 2025 GMT
        Subject: CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0f:8b:bd:fa:bb:db:9c:84:3f:3f:ef:2d:b7:
                    cb:c7:2e:05:88:a6:22:18:7e:20:88:cc:e2:3f:1c:
                    fa:0a:b1:26:91:89:76:38:18:02:cd:c1:90:e1:2e:
                    d8:cb:f0:91:14:b5:d6:ff:bd:e9:98:60:fc:03:a3:
                    b7:93:8f:77:45:5a:3a:b1:e4:71:52:98:ef:bd:ad:
                    20:b4:c1:14:e8:8a:39:a2:2f:46:a1:5c:6c:1a:ca:
                    14:d6:7d:03:6b:c4:97:56:3d:f3:ab:de:6a:67:0c:
                    3b:82:48:1d:93:d2:a6:d4:54:e9:e6:8e:e4:82:74:
                    6a:1f:ab:64:dc:e9:fb:39:55:37:ea:b8:94:0a:45:
                    9c:53:be:9b:fb:a0:05:5b:86:0f:40:5a:07:0d:a5:
                    52:2e:c4:8b:5e:cb:b1:10:c5:72:04:8e:e3:4b:b9:
                    32:92:96:83:e5:75:0a:45:c8:0d:85:b2:e5:36:27:
                    1e:72:ed:28:b5:e5:ac:be:85:be:55:17:3c:d5:bc:
                    cb:98:4e:dc:29:e2:b6:57:d9:4e:b7:6b:b0:2f:b8:
                    ab:a2:b3:b4:10:0d:57:94:94:25:d1:8e:ff:57:04:
                    55:55:ee:d0:07:02:55:c4:6f:dd:aa:26:6e:57:9f:
                    84:83:72:a1:8f:ad:24:5f:c7:a1:12:18:2d:6a:00:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.48.0/22
                IPv6:
                  2804:1d70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264368

    Signature Algorithm: sha256WithRSAEncryption
         8a:c8:e5:53:ed:ef:0f:09:e6:ca:9e:de:81:9a:34:0e:df:4f:
         86:97:8f:fc:64:dd:6e:f6:9f:7d:ca:59:e1:d1:ca:8b:a6:60:
         80:ab:34:f9:4e:5f:07:78:d1:93:57:ec:52:e1:52:fa:6c:a9:
         50:89:1b:6a:54:2b:2b:ae:00:0d:fc:be:38:66:85:9b:99:d7:
         68:3e:70:5d:85:2c:c1:da:62:d0:86:c7:5b:31:38:43:ec:53:
         4d:80:69:cf:24:10:8a:a7:b7:27:68:d7:9c:25:bc:3f:c1:28:
         6c:99:8f:1f:08:c6:ce:21:b1:1b:e0:87:3e:16:ed:dc:9a:41:
         6d:5b:b4:b4:44:cc:23:09:ba:b8:41:c4:1a:34:e3:de:20:76:
         17:43:d7:25:fb:02:37:df:5a:26:fe:3f:d6:8a:e7:4f:e7:d8:
         73:b4:c9:c7:96:66:e7:56:73:44:57:bb:ee:89:76:ed:be:a9:
         3e:76:a7:e6:8f:b4:3f:fc:f2:79:71:5f:37:28:e0:8f:14:36:
         3e:80:29:e1:14:5f:ed:90:c0:e7:f9:12:5c:96:92:bc:48:04:
         fc:05:6c:1a:8c:34:6c:6b:8b:b4:60:eb:1f:cb:41:5b:51:b9:
         85:0d:2b:8e:33:64:ca:9e:87:04:c5:a5:5c:af:de:66:27:8e:
         98:a8:b9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org