Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A.cer
File:                     8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A.cer (raw, json)
Hash identifier:          r5MuxL6+OmkRl5WHneSvR+A/VqMf4lE+aQiP52IuKps=
Subject key identifier:   8F:B9:2C:AE:23:D0:DE:35:CE:9F:CF:F3:EF:73:D5:9A:E2:96:2B:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       350F9847A206347CB5338709E7AC5C03B84B20BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Jan 2023 10:35:08 +0000
Certificate not after:    Thu 11 Jan 2024 10:40:08 +0000
Subordinate resources:    AS: 267986
                          IP: 45.166.180.0/22
                          IP: 2804:5640::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0f:98:47:a2:06:34:7c:b5:33:87:09:e7:ac:5c:03:b8:4b:20:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 12 10:35:08 2023 GMT
            Not After : Jan 11 10:40:08 2024 GMT
        Subject: CN=8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:a9:04:77:2b:8d:25:db:bd:db:34:8d:cf:
                    7c:05:2d:5e:f3:7d:56:22:04:b3:1a:47:c2:4a:83:
                    0c:34:35:85:92:ae:78:47:4a:f2:f2:1c:f6:1c:e5:
                    96:92:5f:d8:6d:8e:80:0d:c4:fe:90:ee:57:52:2a:
                    48:5f:34:f6:0f:2d:0b:d2:00:4d:40:77:99:b2:56:
                    43:67:e9:9c:34:8e:98:3c:9c:f5:af:5e:46:1d:5e:
                    16:7e:f0:32:7f:f9:dd:4b:30:1f:19:bf:8a:52:28:
                    95:75:77:3b:07:bc:26:0b:2f:a5:17:d3:12:34:e3:
                    9d:17:7d:95:d4:d3:62:de:7c:6e:92:d0:c2:bd:cd:
                    f5:5a:57:23:2d:41:e5:00:eb:20:bd:ae:b8:b8:01:
                    d6:5e:ed:ce:56:b1:60:04:10:72:95:af:56:ed:27:
                    94:2a:b6:e9:dc:43:fe:7c:6b:7b:c7:ff:00:63:bd:
                    88:73:f6:46:e5:4d:c3:ca:cd:64:65:c0:7c:dd:41:
                    d6:86:16:4e:d7:18:79:1e:c4:79:d8:95:8e:f6:82:
                    b9:fc:4e:55:d1:94:89:21:80:e3:1c:83:7e:e0:86:
                    56:2b:53:01:c7:1e:9a:de:89:12:6d:a7:55:5e:97:
                    d1:8e:24:e0:04:57:81:bf:c6:5c:a7:72:10:3e:83:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:B9:2C:AE:23:D0:DE:35:CE:9F:CF:F3:EF:73:D5:9A:E2:96:2B:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.180.0/22
                IPv6:
                  2804:5640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267986

    Signature Algorithm: sha256WithRSAEncryption
         60:60:c8:70:2d:dd:82:8d:0c:0d:aa:f8:2b:5c:be:07:04:eb:
         f6:a7:07:bf:d3:1f:30:1d:30:04:da:77:bf:10:0e:29:e8:af:
         cb:21:8b:9d:20:47:31:01:96:9c:28:de:11:1f:67:38:8e:eb:
         05:23:ee:ea:ce:b5:93:90:af:40:b7:29:db:4a:b0:e2:db:82:
         2c:36:3b:74:8c:c8:93:30:3f:5a:5f:da:d8:7b:b9:f7:2b:e0:
         61:81:fd:4f:5a:4b:50:49:9b:cb:96:df:24:a1:43:6c:9c:5c:
         d1:a3:3c:ed:65:e9:03:6f:fe:80:92:b2:04:08:f5:dd:1c:ac:
         7b:ad:9b:28:91:d6:30:18:ff:2a:28:61:2a:49:58:ec:2a:3f:
         bc:05:0f:29:69:77:b7:5c:29:b6:f9:1e:8f:77:ce:af:72:5a:
         02:44:d0:b4:72:87:43:ed:1c:f7:3c:cc:4f:24:92:21:d5:25:
         f5:ea:a3:e2:d6:3b:33:72:53:6d:8e:e5:27:e9:a9:e3:76:99:
         a5:d6:35:c6:b4:8e:7e:1a:d4:ac:f5:70:06:25:8e:db:cd:b5:
         33:25:7c:a4:a6:5e:8f:08:6c:37:3c:80:5b:0c:e8:89:32:0e:
         22:9e:32:7c:ad:da:ef:eb:95:c1:34:7b:06:31:5e:0f:d1:99:
         ac:21:96:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org