Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8F92DB2FFF9DCF14E801F131CE4363CFCE485FB3.cer
File:                     8F92DB2FFF9DCF14E801F131CE4363CFCE485FB3.cer (raw, json)
Hash identifier:          fWVaWAn0o8N72OIaMfKrT6a3yitvdJ5AqQGckfHDBNQ=
Subject key identifier:   8F:92:DB:2F:FF:9D:CF:14:E8:01:F1:31:CE:43:63:CF:CE:48:5F:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7EF96DBEBD409BF7039DA3C62FE0682E610556DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/0/8F92DB2FFF9DCF14E801F131CE4363CFCE485FB3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 12:39:48 +0000
Certificate not after:    Tue 11 Feb 2025 12:44:48 +0000
Subordinate resources:    AS: 273719
                          IP: 2804:8b38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f9:6d:be:bd:40:9b:f7:03:9d:a3:c6:2f:e0:68:2e:61:05:56:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 12:39:48 2024 GMT
            Not After : Feb 11 12:44:48 2025 GMT
        Subject: CN=8F92DB2FFF9DCF14E801F131CE4363CFCE485FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:b3:d5:d6:d1:ea:24:3e:0b:f2:f2:c7:21:
                    a2:44:fb:af:7f:09:ac:a7:86:7a:61:f9:cb:85:1c:
                    a3:8c:86:dd:4a:d8:c3:e6:71:98:78:79:44:e3:31:
                    2f:84:1c:97:f6:0c:9f:c2:67:52:1f:d3:01:2f:d9:
                    be:aa:16:41:34:81:7e:dc:03:bd:cb:ab:a1:9d:00:
                    96:e0:82:a2:9a:21:5b:23:76:8f:4e:19:6e:2d:5e:
                    c7:1e:78:e3:60:11:48:5f:1c:c2:7d:e7:56:b4:50:
                    43:96:61:84:e2:d9:51:ac:dc:99:89:cc:1d:76:2e:
                    b5:e9:fc:3d:4c:50:9f:b1:62:70:4b:48:4a:be:55:
                    c9:7e:55:47:32:49:b5:b2:08:52:46:a2:59:da:6d:
                    1c:b1:e9:41:ce:9e:a0:44:b6:88:b8:3d:9e:d3:8c:
                    bc:99:80:17:31:43:83:ac:3c:31:60:7b:a9:f4:77:
                    86:01:79:5e:b3:1f:b7:ea:da:b3:bb:c0:f9:0e:ae:
                    15:a2:69:b6:35:ac:9f:c2:45:df:39:ff:b2:77:5f:
                    df:08:f3:f0:7a:24:a1:8c:05:34:8f:0f:b8:23:2e:
                    87:7c:f2:92:c8:95:db:20:f3:fe:96:47:ec:39:88:
                    c9:fb:37:6b:8a:eb:e9:43:4d:6d:d4:e2:1b:31:42:
                    53:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:92:DB:2F:FF:9D:CF:14:E8:01:F1:31:CE:43:63:CF:CE:48:5F:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/0/8F92DB2FFF9DCF14E801F131CE4363CFCE485FB3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273719

    Signature Algorithm: sha256WithRSAEncryption
         20:68:72:11:ba:1e:db:77:fb:fd:84:9f:14:6f:64:7f:d0:d5:
         94:4b:02:f9:11:30:e8:41:95:46:fa:98:b9:6a:c0:6a:1a:f2:
         ec:87:d4:d0:01:ee:53:01:db:5f:d5:96:ce:3d:f1:91:56:e1:
         fd:e0:6c:4d:80:5c:8b:99:c7:c2:95:c2:12:68:6b:8a:9f:5b:
         3b:e5:d9:8b:45:cb:03:82:c2:d7:93:91:d9:b8:56:86:82:ed:
         a8:03:3d:3a:d9:65:75:04:56:62:7d:90:fc:b7:f2:08:22:83:
         ee:3f:2f:6f:56:75:8e:08:02:57:fc:5b:01:9d:80:90:7e:03:
         a3:d6:db:36:80:4a:cb:71:fc:ab:95:31:d5:70:a6:b6:41:5c:
         0d:f5:04:f4:c5:18:fc:e4:5b:50:a4:95:b9:e7:8f:91:2e:eb:
         11:4e:62:25:9e:88:82:ec:af:bb:8a:5b:ab:cc:e8:c2:e4:38:
         57:0a:83:8a:a2:e3:fe:b9:1a:69:45:54:54:35:51:70:1a:ac:
         93:0b:3e:46:8c:df:e2:ea:64:7e:a0:bb:35:49:dc:ed:a8:61:
         4d:7b:cd:72:15:ac:3f:4f:bf:7f:90:ca:f4:1e:25:15:c7:d8:
         4a:04:51:71:b5:cd:93:e6:6e:e4:cb:74:9c:27:57:bc:d3:32:
         b7:59:21:c6
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgIUfvltvr1Am/cDnaPGL+BoLmEFVt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTMxMjM5NDhaFw0yNTAyMTExMjQ0NDhaMDMxMTAvBgNV
BAMTKDhGOTJEQjJGRkY5RENGMTRFODAxRjEzMUNFNDM2M0NGQ0U0ODVGQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQLPV1tHqJD4L8vLHIaJE+69/
Caynhnph+cuFHKOMht1K2MPmcZh4eUTjMS+EHJf2DJ/CZ1If0wEv2b6qFkE0gX7c
A73Lq6GdAJbggqKaIVsjdo9OGW4tXsceeONgEUhfHMJ951a0UEOWYYTi2VGs3JmJ
zB12LrXp/D1MUJ+xYnBLSEq+Vcl+VUcySbWyCFJGolnabRyx6UHOnqBEtoi4PZ7T
jLyZgBcxQ4OsPDFge6n0d4YBeV6zH7fq2rO7wPkOrhWiabY1rJ/CRd85/7J3X98I
8/B6JKGMBTSPD7gjLod88pLIldsg8/6WR+w5iMn7N2uK6+lDTW3U4hsxQlNxAgMB
AAGjggMNMIIDCTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPktsv/53PFOgB
8THOQ2PPzkhfszAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84QXRiQUEzOFNUQjlaYUNNdFJwRXlwRk5xUHFiQ0tDMXk5
V1ljcHhmamVuYy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOEF0YkFBMzhTVEI5WmFDTXRScEV5cEZOcVBxYkNLQzF5
OVdZY3B4ZmplbmMvMC84RjkyREIyRkZGOURDRjE0RTgwMUYxMzFDRTQzNjNDRkNF
NDg1RkIzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBIs4MBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwQtNzANBgkqhkiG9w0BAQsFAAOCAQEAIGhyEboe23f7
/YSfFG9kf9DVlEsC+REw6EGVRvqYuWrAahry7IfU0AHuUwHbX9WWzj3xkVbh/eBs
TYBci5nHwpXCEmhrip9bO+XZi0XLA4LC15OR2bhWhoLtqAM9OtlldQRWYn2Q/Lfy
CCKD7j8vb1Z1jggCV/xbAZ2AkH4Do9bbNoBKy3H8q5Ux1XCmtkFcDfUE9MUY/ORb
UKSVueePkS7rEU5iJZ6Iguyvu4pbq8zowuQ4VwqDiqLj/rkaaUVUVDVRcBqskws+
Rozf4upkfqC7NUnc7ahhTXvNchWsP0+/f5DK9B4lFcfYSgRRcbXNk+Zu5Mt0nCdX
vNMyt1khxg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org