Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8F4A398C9662CBF5257471CEB03BBF2C61BC55E0.cer
File:                     8F4A398C9662CBF5257471CEB03BBF2C61BC55E0.cer (raw, json)
Hash identifier:          Ek0KYHXrwI0fvEmj6pc6aC1CHxMTdJ5a5QMzSkp6Jis=
Subject key identifier:   8F:4A:39:8C:96:62:CB:F5:25:74:71:CE:B0:3B:BF:2C:61:BC:55:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20148D2BFACF70921689B00308085B73FC2F414B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/8F4A398C9662CBF5257471CEB03BBF2C61BC55E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 15:59:28 +0000
Certificate not after:    Fri 12 Jul 2024 16:04:28 +0000
Subordinate resources:    AS: 262496
                          IP: 177.66.128.0/20
                          IP: 191.240.168.0/21
                          IP: 2804:520::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:14:8d:2b:fa:cf:70:92:16:89:b0:03:08:08:5b:73:fc:2f:41:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 15:59:28 2023 GMT
            Not After : Jul 12 16:04:28 2024 GMT
        Subject: CN=8F4A398C9662CBF5257471CEB03BBF2C61BC55E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fd:e2:e0:51:2e:cb:5e:05:b5:e6:6f:77:24:
                    ad:95:93:95:35:0d:fc:31:e9:ac:7b:ce:09:69:28:
                    cd:b7:be:fa:4e:71:0f:37:95:2a:cd:cd:82:a5:c8:
                    dd:aa:5c:60:ba:94:d5:b2:48:9a:f1:8d:f4:ea:09:
                    09:7b:37:5b:b2:ee:4d:6b:69:bb:ae:d7:01:82:df:
                    3d:06:85:1f:71:20:d0:3a:27:6e:65:df:fa:1e:1f:
                    5e:4e:37:85:9d:a2:28:d5:82:ca:ea:f3:6d:b7:a2:
                    3b:f2:c8:b6:f4:be:70:88:f3:d7:fa:c6:ea:da:0b:
                    2b:34:30:73:81:df:6d:41:68:dc:59:2a:d2:59:b8:
                    03:90:43:39:ec:21:33:ff:e7:79:1e:51:c5:ee:3a:
                    d7:e5:be:4b:c2:7c:a6:32:ae:7e:d1:41:ba:3f:21:
                    77:55:6d:87:de:26:77:b1:f4:a0:8b:f1:e3:2a:e5:
                    c7:75:41:80:06:ca:85:be:1f:8a:dd:16:f0:3a:bd:
                    a0:ad:af:90:53:75:9d:c6:92:d3:71:12:07:8f:f5:
                    f3:db:ef:95:7f:6b:38:ab:c5:86:0e:87:e8:4b:93:
                    39:7e:eb:c9:dc:e6:5e:6b:63:63:06:25:9e:45:e2:
                    96:49:53:4b:17:51:b3:04:ab:a6:7a:a4:8d:35:b3:
                    ca:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:4A:39:8C:96:62:CB:F5:25:74:71:CE:B0:3B:BF:2C:61:BC:55:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/8F4A398C9662CBF5257471CEB03BBF2C61BC55E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.128.0/20
                  191.240.168.0/21
                IPv6:
                  2804:520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262496

    Signature Algorithm: sha256WithRSAEncryption
         2e:25:1e:14:1e:00:d7:55:49:63:34:d8:62:2a:6a:e0:6a:b5:
         9e:d3:d9:89:f7:31:cc:c6:19:a1:55:59:dd:2a:a2:c3:0e:fe:
         1d:dc:5f:da:4a:5d:09:05:f4:2e:83:47:f8:b1:65:ec:00:da:
         62:76:1a:79:00:31:fc:4c:06:99:e4:f2:4c:08:c2:8a:95:06:
         fc:c8:cc:91:55:b4:87:40:1e:ad:b3:ce:aa:39:7e:f0:82:ec:
         d6:24:83:3a:48:b3:53:73:a8:39:0c:a4:e7:5f:ea:d2:43:2e:
         86:69:1f:26:42:ab:48:d7:0e:c6:2a:ab:c7:52:f8:0c:8a:e2:
         b3:88:cf:dc:91:cb:d7:bd:6f:d7:06:52:14:04:8d:ba:6d:00:
         dd:62:ec:1a:cb:fd:0a:22:a2:4a:3d:9b:b5:66:27:85:17:6e:
         e5:23:07:ba:07:0e:62:7f:31:89:8f:de:84:e5:0e:75:6e:5c:
         5f:b4:21:15:1e:5a:ae:07:05:23:70:18:af:0d:a4:00:a9:64:
         2e:b4:95:89:9c:17:1d:99:80:63:a0:66:86:2f:4f:a6:2e:7c:
         34:ff:db:48:6a:50:67:3b:e1:d3:ea:e7:5e:85:a3:3e:5a:89:
         22:96:e5:62:31:66:e0:f8:2b:fb:a6:8c:da:71:31:21:d6:93:
         32:3e:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org