Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8FF1E15A25C373DE442EEB81BE02B51539B4F806.cer
File:                     8FF1E15A25C373DE442EEB81BE02B51539B4F806.cer (raw, json)
Hash identifier:          rK/MxQogfTx1WjaGaF0YwIZh+74dTq3ZoE3OUHBLq7o=
Subject key identifier:   8F:F1:E1:5A:25:C3:73:DE:44:2E:EB:81:BE:02:B5:15:39:B4:F8:06
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A699BC7E7107F0570F829F36B6E4CF6A060FD6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/8FF1E15A25C373DE442EEB81BE02B51539B4F806.mft
caRepository:             rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 19:41:22 +0000
Certificate not after:    Tue 23 Jul 2024 19:46:22 +0000
Subordinate resources:    AS: 267078
                          IP: 45.228.148.0/22
                          IP: 2804:47d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:69:9b:c7:e7:10:7f:05:70:f8:29:f3:6b:6e:4c:f6:a0:60:fd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 19:41:22 2023 GMT
            Not After : Jul 23 19:46:22 2024 GMT
        Subject: CN=8FF1E15A25C373DE442EEB81BE02B51539B4F806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:2b:e3:43:75:47:fa:3d:58:66:5a:35:8f:
                    3c:92:9c:f2:bb:36:5c:ae:8a:bf:42:90:f8:9e:8d:
                    ba:0a:1b:94:7c:1e:1b:77:37:82:40:b2:2c:bb:80:
                    9b:a7:01:1e:15:97:69:f3:2f:50:4f:68:e4:4c:86:
                    56:7b:87:15:83:e9:12:43:ad:fc:71:af:3a:8f:ad:
                    49:b2:78:05:c6:61:78:55:97:7f:97:f1:ce:b7:21:
                    5a:db:27:ed:69:bc:17:47:4a:e9:ef:5c:70:f3:a9:
                    6f:f2:68:39:d9:19:ff:b0:2b:ea:4f:c4:a4:4e:15:
                    fa:91:44:ef:e8:9b:15:0d:d8:be:ef:67:4a:a2:17:
                    43:6d:a4:44:fb:f2:7c:d0:d9:d5:73:88:cc:24:d5:
                    6e:c9:9a:1f:64:a4:17:21:18:54:ff:a1:ad:27:2f:
                    53:ba:aa:17:e3:60:94:a2:f9:0a:ec:7b:9e:b4:d8:
                    81:87:15:29:64:2e:31:95:50:ff:8d:96:7c:2f:c5:
                    76:8e:d7:3c:f7:35:b0:be:76:f7:f5:c6:b6:c2:46:
                    0e:c0:b6:87:f7:ac:60:e8:c7:02:44:e1:5e:d0:04:
                    ec:76:8f:4b:1e:09:31:f2:6b:6a:b4:a7:1b:4d:6d:
                    2d:f2:c2:21:d1:59:2c:c9:95:bd:66:2e:03:54:6d:
                    03:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:F1:E1:5A:25:C3:73:DE:44:2E:EB:81:BE:02:B5:15:39:B4:F8:06
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/8FF1E15A25C373DE442EEB81BE02B51539B4F806.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.148.0/22
                IPv6:
                  2804:47d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267078

    Signature Algorithm: sha256WithRSAEncryption
         11:98:d1:00:4d:52:bd:53:58:7d:3a:08:b1:8e:79:60:e7:67:
         ac:eb:1b:ea:74:7b:1e:b6:33:36:e9:a9:46:ea:22:87:61:28:
         2d:2e:fc:ec:98:38:9b:c5:43:8f:cf:16:85:c0:39:d1:fa:d6:
         60:c2:55:15:a3:cc:24:a5:06:d3:66:aa:91:89:1d:96:3e:1d:
         05:94:a8:03:d7:5d:ef:a9:9d:2c:5d:37:ca:f6:67:22:e9:cb:
         18:0a:c5:9a:03:35:fd:b5:80:39:83:38:23:ae:a9:cb:ef:a5:
         27:c9:b0:5a:74:4a:51:f7:a4:6a:14:14:37:b0:4d:bf:6e:b8:
         75:01:e4:4f:d9:1c:ce:67:75:bb:8f:22:93:8e:d9:e9:f1:26:
         fb:26:91:17:37:f0:d1:30:09:6d:d8:12:4a:b4:29:1e:5f:c4:
         d4:93:6c:13:1f:7b:12:17:d6:f9:a4:74:21:4d:9c:d5:d2:20:
         e3:ac:cd:e1:98:40:45:8d:d3:54:8e:51:8e:c5:39:70:aa:4e:
         3b:1a:16:0e:20:65:c0:94:b4:86:df:38:1d:9d:40:aa:f0:e2:
         6e:31:09:18:aa:40:99:9f:7c:64:13:e0:f5:38:06:8f:01:54:
         2f:b8:5c:f9:0d:67:26:a9:eb:3b:32:b2:94:7f:ab:02:d4:4f:
         7c:f1:b0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org