Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A8F06DA050A8DBE789781D3C7D3F3706CBAA58BA.cer
File:                     A8F06DA050A8DBE789781D3C7D3F3706CBAA58BA.cer (raw, json)
Hash identifier:          2LS/UtHRX7WHkM71QVUfDgY8P2qC2WDedzHLLw3RQFM=
Subject key identifier:   A8:F0:6D:A0:50:A8:DB:E7:89:78:1D:3C:7D:3F:37:06:CB:AA:58:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       35C851F926A7E48F926572BEA8057B82591E5C1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/A8F06DA050A8DBE789781D3C7D3F3706CBAA58BA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Jan 2024 19:42:44 +0000
Certificate not after:    Wed 22 Jan 2025 19:47:44 +0000
Subordinate resources:    AS: 271018
                          IP: 200.52.228.0/22
                          IP: 2804:7504::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c8:51:f9:26:a7:e4:8f:92:65:72:be:a8:05:7b:82:59:1e:5c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 24 19:42:44 2024 GMT
            Not After : Jan 22 19:47:44 2025 GMT
        Subject: CN=A8F06DA050A8DBE789781D3C7D3F3706CBAA58BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:73:e3:e4:52:2f:a7:a0:07:a6:4f:ec:26:
                    97:38:39:f7:0d:e3:6c:bb:ae:64:06:b7:8d:38:29:
                    84:ab:45:c1:da:a9:0c:f1:71:96:49:d7:e7:04:e0:
                    45:96:e6:f4:e7:91:a3:c0:45:a1:4f:c1:f3:1b:a2:
                    d5:4b:05:96:14:9e:e5:7d:6e:45:be:cf:a9:2f:46:
                    2c:39:1a:f4:dd:42:c8:df:19:ac:8e:8a:91:80:67:
                    46:e9:c8:99:27:2d:35:21:79:40:a3:54:5e:25:30:
                    62:c2:c9:96:21:b8:8a:2c:66:ab:df:84:ae:31:e7:
                    64:41:57:d6:42:5f:48:dd:57:df:fa:9d:a7:23:b1:
                    29:d9:71:6b:b8:e5:49:96:60:7a:4f:58:2c:1b:ab:
                    5b:a9:cd:1f:69:a3:4e:55:4d:a6:a4:07:fb:ce:83:
                    ce:14:2e:fc:5e:2e:e0:d2:28:52:f5:0c:ea:d6:8a:
                    5c:9d:5d:58:26:7f:05:fb:12:d8:7e:0c:0c:07:be:
                    46:9f:7d:9a:ce:ae:e7:21:8b:df:2a:b2:74:1d:f5:
                    f9:40:0b:17:65:ae:a4:75:32:96:df:41:1a:dd:3f:
                    fd:35:d6:92:20:4d:7c:8d:8e:0b:93:ea:38:17:d5:
                    1a:be:6d:ac:57:22:e3:5a:f4:32:00:98:1a:3c:e3:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:F0:6D:A0:50:A8:DB:E7:89:78:1D:3C:7D:3F:37:06:CB:AA:58:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/A8F06DA050A8DBE789781D3C7D3F3706CBAA58BA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.228.0/22
                IPv6:
                  2804:7504::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271018

    Signature Algorithm: sha256WithRSAEncryption
         45:6d:7e:6a:5b:27:15:16:0e:8e:85:b4:3b:27:e4:6d:3f:f0:
         67:83:be:77:0f:f4:3d:db:f5:44:c7:b0:ec:75:7c:c4:8e:00:
         04:c6:7e:71:45:75:08:25:2f:3b:79:62:e4:06:b5:ac:99:f3:
         d8:6c:a7:d9:cd:9f:d2:58:60:12:18:be:4b:6e:a6:64:bd:c5:
         28:38:ae:28:a6:37:62:5c:63:56:4c:06:6c:c8:5e:e1:5f:c1:
         58:06:9f:94:57:63:23:db:20:b2:da:9e:d8:c2:ca:42:c0:c8:
         4c:41:47:52:4f:ca:87:31:47:5b:8b:ba:e4:12:57:80:1a:4e:
         50:97:14:db:b3:ba:cb:56:83:2a:33:ac:26:ba:ae:41:93:b5:
         91:08:25:cb:27:2a:fa:13:87:af:aa:58:a1:65:82:ea:28:da:
         e7:ea:32:c2:a5:27:b2:1a:0d:52:c7:87:76:da:b8:ae:61:ca:
         5a:22:05:86:98:46:89:78:09:a7:1c:9f:4b:2e:06:4f:bf:3e:
         07:92:88:35:cb:e1:8d:85:d1:ba:e2:de:86:5e:11:4a:97:8a:
         12:1c:f6:86:1f:69:33:2c:d9:d6:64:f2:f4:e3:36:d4:37:69:
         22:d2:dd:2f:52:24:cb:22:88:85:51:a9:3e:8d:a6:da:31:1a:
         c6:38:9b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org