Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.cer
File:                     8FF87EDB9468A99F9D101093DB5A1114C028F32C.cer (raw, json)
Hash identifier:          sQxUxqDE2PCUXzpcUTYK+sjATnj+x/208fXkdiiM/mU=
Subject key identifier:   8F:F8:7E:DB:94:68:A9:9F:9D:10:10:93:DB:5A:11:14:C0:28:F3:2C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F804B7D1059EA23419D23F1479A135B11B2A037
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Feb 2024 18:27:37 +0000
Certificate not after:    Mon 10 Feb 2025 18:32:37 +0000
Subordinate resources:    AS: 264528
                          IP: 138.0.20.0/22
                          IP: 168.194.104.0/22
                          IP: 2804:2108::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:80:4b:7d:10:59:ea:23:41:9d:23:f1:47:9a:13:5b:11:b2:a0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 12 18:27:37 2024 GMT
            Not After : Feb 10 18:32:37 2025 GMT
        Subject: CN=8FF87EDB9468A99F9D101093DB5A1114C028F32C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:1c:e9:c2:66:9e:03:c6:cf:7a:ae:81:d8:
                    77:40:40:09:7a:c8:0f:a7:d4:ec:e8:b3:cb:84:6c:
                    b4:fe:05:e4:47:45:25:3d:6d:63:42:68:3c:7c:90:
                    59:e4:a6:fb:1a:29:20:50:3e:a0:8d:2c:b3:bc:6c:
                    a1:d5:6f:3c:e0:d1:06:a3:39:9a:6c:c0:83:c2:dc:
                    88:2b:00:d6:7d:93:0c:ee:77:84:d8:ae:d0:66:82:
                    c2:96:18:54:df:c0:42:c8:7f:a7:fe:a5:4d:41:ea:
                    83:63:de:ee:07:39:37:6d:3b:0e:81:fc:1a:dd:f0:
                    5e:0a:ed:19:cc:ea:3e:0b:43:2b:8d:d4:b9:6e:92:
                    5f:21:12:95:ab:19:c7:30:86:f7:a7:3e:fa:8c:21:
                    57:82:7f:4b:45:2a:a6:27:75:81:d3:b7:5c:d1:83:
                    e3:f6:32:fe:da:00:0f:9b:d3:fa:ef:8b:3f:fb:55:
                    aa:9d:6d:f2:f9:d1:48:66:a3:f2:a5:b9:d5:3c:79:
                    34:45:47:35:61:68:05:19:17:fe:6d:a9:d2:3e:ed:
                    ad:c7:47:9c:e0:4b:96:13:2f:ae:3b:c3:6b:04:6a:
                    12:2b:69:f4:22:62:71:5c:39:5a:1d:ee:f9:0f:d3:
                    f6:b0:38:8a:72:b8:91:cc:2f:a2:20:ff:32:18:39:
                    7b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:F8:7E:DB:94:68:A9:9F:9D:10:10:93:DB:5A:11:14:C0:28:F3:2C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.20.0/22
                  168.194.104.0/22
                IPv6:
                  2804:2108::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264528

    Signature Algorithm: sha256WithRSAEncryption
         1e:85:63:28:60:7c:5a:b7:1d:05:b0:63:d1:a8:12:84:62:e2:
         da:28:de:5f:19:6a:03:7f:ae:a1:c4:6b:99:db:07:ea:8f:26:
         cb:7d:22:20:c5:88:4e:21:4a:77:1e:fb:db:1a:2f:cf:e7:a1:
         92:90:01:f0:0c:ba:14:f0:0f:0b:9b:4f:1f:ad:db:55:6d:d6:
         9f:c5:d8:33:98:2f:23:32:38:d1:98:ca:0b:00:7a:8c:90:5a:
         3c:29:96:c0:34:9d:da:a0:21:6f:40:5a:cc:05:64:43:db:0a:
         84:03:c4:68:aa:07:0d:88:3e:d5:b5:3b:18:b5:fa:f2:f6:52:
         a8:50:9e:10:f7:dc:0f:94:09:9c:7b:ea:2d:04:29:4f:1f:74:
         2e:be:f7:71:18:fc:0c:46:99:5e:f6:c6:f1:e7:b2:33:cc:51:
         0d:ac:bb:b0:3d:c0:cd:dc:9c:07:87:4d:14:d3:2b:66:dd:9a:
         db:c1:74:43:52:07:e2:aa:90:66:af:4e:1c:45:70:b2:5e:5c:
         02:58:e8:d6:cf:49:0a:14:13:9f:21:c6:c8:60:a8:0f:17:ef:
         91:27:54:c9:51:c2:76:f6:ec:2b:89:cc:62:07:85:d2:37:d9:
         fe:3c:d1:ec:86:fd:fa:9e:4c:23:28:c0:89:2b:a6:2b:3f:4a:
         a5:06:e4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org