Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8FCB2AC563D94B1155742D01E76CE7D839E49E25.cer
File:                     8FCB2AC563D94B1155742D01E76CE7D839E49E25.cer (raw, json)
Hash identifier:          8rJ4FySBBnNrjjYgKfWCRVIZvE7p4wrru0hUlzPEPXQ=
Subject key identifier:   8F:CB:2A:C5:63:D9:4B:11:55:74:2D:01:E7:6C:E7:D8:39:E4:9E:25
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C2DF3C2806932F86482AFB4DCC3CCD03815AF5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/8FCB2AC563D94B1155742D01E76CE7D839E49E25.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Jul 2022 04:57:01 +0000
Certificate not after:    Fri 30 Jun 2023 05:02:01 +0000
Subordinate resources:    AS: 266299
                          IP: 170.79.148.0/22
                          IP: 2804:35a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2d:f3:c2:80:69:32:f8:64:82:af:b4:dc:c3:cc:d0:38:15:af:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  1 04:57:01 2022 GMT
            Not After : Jun 30 05:02:01 2023 GMT
        Subject: CN=8FCB2AC563D94B1155742D01E76CE7D839E49E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:51:64:a6:5b:24:6d:16:89:99:84:24:ba:0c:
                    b5:50:fc:74:c2:a5:de:34:b8:33:df:a6:f8:9a:96:
                    a3:2b:6b:49:f6:ab:33:ff:8d:ee:0e:2e:5a:cb:a9:
                    9e:00:62:cb:2f:4f:0c:34:7a:32:ed:c3:b7:71:67:
                    45:6f:50:0d:f2:da:ee:9d:fa:56:d3:76:51:4a:e4:
                    dc:20:f3:e7:31:46:04:b7:97:03:b5:ab:98:dc:18:
                    8a:8e:55:80:16:2c:e3:8a:cb:0e:f3:7c:64:97:d8:
                    76:7a:0c:d5:10:e1:16:43:e7:69:99:a0:4f:bb:32:
                    54:50:71:d5:15:bf:3f:c8:ac:57:fe:d7:36:b3:43:
                    5a:7c:59:1b:33:76:1e:4c:19:37:7e:5d:77:7e:e9:
                    2a:8e:2a:0e:23:cd:79:90:af:58:8e:ea:34:b3:fe:
                    41:09:ce:1b:7d:b3:ca:5f:42:fb:1a:3c:88:b3:db:
                    16:d3:bc:27:08:17:25:0f:2e:c8:78:5c:70:4a:2c:
                    f2:10:65:f7:d4:e3:e9:d9:5a:b1:bf:90:55:80:fd:
                    f2:ca:34:3f:0f:05:23:4a:6a:24:58:75:e8:56:a5:
                    1d:83:30:02:b6:13:8b:b6:a5:2c:a5:53:b4:2a:37:
                    30:6f:23:0e:9a:d8:2e:68:a2:fa:0b:d2:3f:89:03:
                    40:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:CB:2A:C5:63:D9:4B:11:55:74:2D:01:E7:6C:E7:D8:39:E4:9E:25
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/8FCB2AC563D94B1155742D01E76CE7D839E49E25.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.148.0/22
                IPv6:
                  2804:35a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266299

    Signature Algorithm: sha256WithRSAEncryption
         8d:9b:63:96:3c:f7:75:81:db:6f:77:a3:48:f6:0e:c5:bd:a7:
         13:c7:9e:2f:74:90:3f:56:09:59:f2:a4:1d:b8:ce:53:36:88:
         78:41:e7:55:48:2e:bc:b6:03:07:21:89:19:54:81:5f:50:34:
         ed:84:45:b8:0d:68:dd:9f:18:38:06:ed:80:7a:17:49:08:64:
         18:39:a3:30:32:d2:e7:96:9e:37:b4:c0:9e:7d:5e:19:65:f6:
         13:c1:31:e4:55:b3:9f:1a:8c:26:e2:48:b6:8d:9c:18:6c:56:
         3e:c2:5f:2f:4f:84:71:ee:f4:6f:76:72:4a:68:7d:1c:66:ea:
         be:4c:98:82:9b:f3:24:99:37:92:30:99:97:44:a7:d4:fa:0b:
         e9:01:89:fc:8a:68:09:31:eb:58:e1:f9:b6:12:e0:da:3b:45:
         22:f2:85:28:ea:f8:a7:5e:38:7e:5e:db:b5:49:9f:f1:b6:6b:
         27:99:8a:2e:c8:81:eb:a1:7f:ab:91:bd:c1:0e:01:ae:1e:33:
         55:39:30:40:4b:6a:af:dc:c6:37:06:ae:93:48:ec:74:4b:4e:
         63:0d:1c:32:7d:f1:b4:f9:dc:7a:e2:3f:b9:90:a8:a4:9a:52:
         66:42:6a:74:06:90:5a:86:c0:2f:50:e2:bd:ff:ca:a1:de:c4:
         a9:b4:c2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org