Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8FE6E25F72140F666F07D29DC9A4BA298B4C99A4.cer
File:                     8FE6E25F72140F666F07D29DC9A4BA298B4C99A4.cer (raw, json)
Hash identifier:          DfU8fY7zcvZynDxcIHokT6xWQabGujUWpyOeD8MPNIk=
Subject key identifier:   8F:E6:E2:5F:72:14:0F:66:6F:07:D2:9D:C9:A4:BA:29:8B:4C:99:A4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       205E4D62E014F0A44FFA7849F524190C2FF2DC22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8MVTKRKoESY6EEJiBvwMKvTUiBSKdwPtucJT2VAm132H/0/8FE6E25F72140F666F07D29DC9A4BA298B4C99A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8MVTKRKoESY6EEJiBvwMKvTUiBSKdwPtucJT2VAm132H/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Jan 2023 15:50:56 +0000
Certificate not after:    Mon 29 Jan 2024 15:55:56 +0000
Subordinate resources:    AS: 264307
                          IP: 138.122.0.0/22
                          IP: 2804:25d8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5e:4d:62:e0:14:f0:a4:4f:fa:78:49:f5:24:19:0c:2f:f2:dc:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 30 15:50:56 2023 GMT
            Not After : Jan 29 15:55:56 2024 GMT
        Subject: CN=8FE6E25F72140F666F07D29DC9A4BA298B4C99A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:e9:7f:8b:96:61:ed:a7:c7:42:40:82:88:
                    f2:fe:eb:45:95:8b:c6:ea:86:5f:0a:15:12:d0:c2:
                    09:85:9e:d7:53:e6:88:33:61:23:e6:83:59:5f:0e:
                    13:08:f7:53:00:d6:96:b6:70:d1:a6:75:92:eb:50:
                    6c:79:8f:17:ce:ae:fe:ef:38:e5:69:f2:9f:46:7f:
                    30:c7:e2:fd:de:ad:f9:5f:91:94:be:cf:75:f7:2e:
                    cd:7a:ce:0b:2a:44:eb:62:aa:0d:e3:6c:87:cc:d2:
                    7a:96:24:fa:30:2c:4e:1d:b7:8b:a4:1c:ac:a8:6f:
                    68:d9:66:13:af:e4:04:41:23:df:7f:9f:dd:4e:5f:
                    c4:da:83:b2:3a:de:a4:08:9d:40:55:49:aa:b8:f0:
                    a0:26:67:ed:c8:c6:7f:86:fc:4c:85:74:49:8e:69:
                    10:12:67:76:55:38:fc:62:2a:4c:97:b4:90:a9:5f:
                    85:66:2d:b3:c2:b3:38:a5:6c:03:d0:29:43:e5:18:
                    05:d6:86:47:a3:23:55:9a:96:15:ca:f4:7c:0f:91:
                    4c:5c:14:63:7b:4d:04:80:b1:0a:04:76:6c:6a:f3:
                    10:aa:ad:55:d3:72:d2:f3:af:99:02:21:94:6b:59:
                    e0:8b:32:bd:3a:49:98:d2:de:16:fc:68:8c:86:d7:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:E6:E2:5F:72:14:0F:66:6F:07:D2:9D:C9:A4:BA:29:8B:4C:99:A4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8MVTKRKoESY6EEJiBvwMKvTUiBSKdwPtucJT2VAm132H/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8MVTKRKoESY6EEJiBvwMKvTUiBSKdwPtucJT2VAm132H/0/8FE6E25F72140F666F07D29DC9A4BA298B4C99A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.0.0/22
                IPv6:
                  2804:25d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264307

    Signature Algorithm: sha256WithRSAEncryption
         74:9b:9f:b8:4e:1a:c9:1a:03:ba:e1:3c:60:58:26:5c:f2:6e:
         70:40:53:f4:91:13:e6:80:04:b4:0b:30:3f:f3:0f:80:e2:be:
         47:21:1a:85:64:39:96:51:e6:03:ea:77:42:d0:cb:db:db:e6:
         4e:7b:24:85:14:77:d7:5e:0d:4a:51:1b:c3:1f:7c:81:19:db:
         4d:c4:36:a5:b4:af:e0:17:8e:51:59:5b:33:66:5a:9b:a9:d2:
         2c:6d:3b:da:e6:a7:21:50:62:eb:59:84:cd:34:43:44:db:28:
         dd:a6:96:2a:ab:71:8c:59:b7:39:d8:96:d1:95:12:9e:b2:38:
         d0:66:0d:e1:76:df:6e:69:0d:3b:b6:bd:01:2b:e7:0e:d8:97:
         3d:fa:07:7e:59:15:20:ef:a2:55:76:fe:04:19:a6:6e:21:62:
         14:03:7d:a1:fe:c1:53:69:c4:17:c5:a4:bd:1c:cc:aa:9e:b7:
         b3:59:93:d8:98:cd:c7:e6:e8:5b:b7:ad:c4:78:c1:6d:c6:6c:
         06:e9:8b:02:1e:be:b6:5b:af:ad:ef:2d:04:5b:5a:d2:a0:f2:
         23:56:94:68:c7:8a:3d:51:3c:05:98:f1:85:82:3b:87:39:48:
         cd:1e:de:38:3e:80:84:07:b6:00:1a:f0:d3:8d:1a:b8:fe:f3:
         9b:fc:42:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:36:44 2025 by rpki-client