Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.cer
File:                     A8CF5718115B9C05B14F07941D58B618B367CCE3.cer (raw, json)
Hash identifier:          56u/B5kd17HK6LpFicPVjV//IgG0YKdpVk4ybjV9bc8=
Subject key identifier:   A8:CF:57:18:11:5B:9C:05:B1:4F:07:94:1D:58:B6:18:B3:67:CC:E3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       74C051417C6471A12CDAF17680D74ED96D26C069
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 17:48:14 +0000
Certificate not after:    Mon 16 Sep 2024 17:53:14 +0000
Subordinate resources:    AS: 263973
                          IP: 138.255.124.0/22
                          IP: 2804:28a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c0:51:41:7c:64:71:a1:2c:da:f1:76:80:d7:4e:d9:6d:26:c0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 17:48:14 2023 GMT
            Not After : Sep 16 17:53:14 2024 GMT
        Subject: CN=A8CF5718115B9C05B14F07941D58B618B367CCE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:86:71:4a:df:9b:55:24:30:70:90:33:b3:
                    6f:ea:00:1e:e1:33:68:94:42:27:a7:36:15:a0:97:
                    95:62:59:41:fc:21:91:7f:89:47:0f:75:f8:9a:c4:
                    68:e2:9c:af:67:44:85:cd:66:09:67:d6:cf:1e:3f:
                    09:32:e8:98:7e:e7:e8:82:4a:9e:7a:66:62:39:d2:
                    43:1f:71:29:91:6c:bc:77:6b:c3:77:1c:ef:fd:2c:
                    b3:e1:56:2f:9b:ba:60:8b:d2:d2:22:19:20:a0:c9:
                    ae:4c:2b:95:47:2c:ea:70:14:74:a6:7f:d0:48:87:
                    ce:3d:15:57:7a:43:e4:9f:e8:74:4c:dc:d3:e0:1d:
                    67:9b:32:c3:5f:bf:32:46:70:5c:4a:f2:7e:c9:ae:
                    95:fd:79:d5:b1:a8:57:da:7b:8c:35:df:06:be:da:
                    3b:8e:7e:27:2b:63:da:35:38:7c:8a:1e:6f:a2:01:
                    60:81:48:13:09:e9:77:ba:cd:55:be:fe:77:ac:97:
                    fd:3c:d9:b1:62:d8:f1:89:60:b4:43:f8:7d:53:ab:
                    3c:3c:7c:51:e2:c3:c0:31:ba:73:e1:b3:0e:7b:e4:
                    1a:93:a5:e5:53:a1:1e:35:18:e2:87:c3:db:01:41:
                    8c:92:42:43:e1:1a:4d:22:58:b9:70:c0:b7:1d:b0:
                    3f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:CF:57:18:11:5B:9C:05:B1:4F:07:94:1D:58:B6:18:B3:67:CC:E3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.124.0/22
                IPv6:
                  2804:28a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263973

    Signature Algorithm: sha256WithRSAEncryption
         68:cb:74:c2:73:95:e3:0a:1e:0a:96:11:f4:02:49:f2:cb:28:
         a3:8f:33:9d:5a:86:d4:20:6b:d0:47:f4:e3:5f:05:37:f7:e4:
         ad:ba:02:90:02:9e:2c:88:77:95:68:4e:8f:3b:72:eb:be:19:
         71:29:03:4e:75:06:39:e7:d5:6b:1d:65:9b:fc:2a:9c:5e:e9:
         e7:0e:35:5c:fa:ef:55:b3:3c:23:91:0b:5e:03:50:0c:e0:7f:
         9b:e2:5e:f1:fc:04:f2:57:f1:b2:e1:ff:9e:b2:19:70:05:a9:
         23:8f:71:a4:9d:b0:39:d7:b1:ad:d1:5c:58:46:01:69:c0:d3:
         58:f2:5f:ee:c2:ab:95:53:ef:41:b7:00:04:5e:f1:32:92:f0:
         c7:24:7d:60:a6:6f:ff:83:12:8d:fb:8d:97:b2:ca:6b:8c:43:
         18:33:bf:48:f1:bf:56:6a:25:44:36:df:b8:58:4f:76:aa:4e:
         ba:83:e6:05:bd:4f:9c:ce:de:05:85:5e:07:85:87:92:f8:1a:
         ef:ce:4d:12:62:5f:46:a3:1e:e8:aa:90:d7:2a:e9:09:93:f5:
         ab:c4:97:61:53:fd:2f:eb:2e:1a:c4:34:ad:01:a7:c9:ee:5e:
         1a:73:62:8f:ad:03:50:51:00:80:e6:6b:2d:d0:1c:e3:b0:f4:
         d7:e4:bb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org