Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B822CC933A04C9F69A5B81CB369EDAD052C060B4.cer
File:                     B822CC933A04C9F69A5B81CB369EDAD052C060B4.cer (raw, json)
Hash identifier:          xprNhZyMcknQf/3E1EnOnI77Oh8Z74+2athBvRlB3vI=
Subject key identifier:   B8:22:CC:93:3A:04:C9:F6:9A:5B:81:CB:36:9E:DA:D0:52:C0:60:B4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       372B8390DAB1830C64E3349AE1C9282D37CDEB0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/0/B822CC933A04C9F69A5B81CB369EDAD052C060B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Oct 2023 16:05:15 +0000
Certificate not after:    Mon 14 Oct 2024 16:10:15 +0000
Subordinate resources:    AS: 263251
                          IP: 200.0.8.0/21
                          IP: 2804:17c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2b:83:90:da:b1:83:0c:64:e3:34:9a:e1:c9:28:2d:37:cd:eb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 16 16:05:15 2023 GMT
            Not After : Oct 14 16:10:15 2024 GMT
        Subject: CN=B822CC933A04C9F69A5B81CB369EDAD052C060B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:36:bf:20:8d:ee:1a:52:e4:31:38:1e:7c:
                    e8:c5:6e:19:8e:9a:d0:f6:06:dd:5b:51:35:3b:0c:
                    da:8e:61:c1:2c:e5:4b:24:dc:05:d9:a0:10:f7:c0:
                    60:23:4a:3e:b3:a6:ab:e2:91:c9:2a:4d:0d:6e:ae:
                    07:9a:1d:d6:59:6f:25:d4:e7:18:a6:d1:7e:00:c2:
                    48:de:d8:f1:bc:c3:22:b4:82:67:29:ca:30:54:02:
                    1a:46:87:68:a9:fa:d6:14:11:7a:ce:15:96:23:17:
                    b0:6f:eb:30:ca:a5:e0:16:f6:8c:11:71:e8:86:de:
                    50:ff:ce:eb:17:63:d6:fa:10:f0:8e:f7:5c:97:98:
                    e5:65:d2:6e:69:ee:7f:74:b3:6e:38:10:08:69:2d:
                    b9:e2:04:50:18:96:a0:68:22:2c:77:f1:66:c3:ca:
                    bc:46:c7:90:54:c2:c6:27:29:20:46:af:97:cc:27:
                    59:30:ef:43:52:97:dd:d3:fb:3f:7e:d0:f0:db:82:
                    14:a9:0e:72:64:11:54:af:92:6c:77:d5:67:0a:73:
                    82:d4:19:03:60:95:83:5f:de:52:a3:ee:9c:fe:9a:
                    ee:0c:bd:00:a9:1c:29:82:20:1e:6f:29:83:58:18:
                    5c:4c:1b:15:ac:1e:f7:0b:b6:e5:3b:fb:8d:c9:58:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:22:CC:93:3A:04:C9:F6:9A:5B:81:CB:36:9E:DA:D0:52:C0:60:B4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/0/B822CC933A04C9F69A5B81CB369EDAD052C060B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.8.0/21
                IPv6:
                  2804:17c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263251

    Signature Algorithm: sha256WithRSAEncryption
         4b:57:f1:77:37:5e:4e:00:39:89:55:c5:0e:98:c1:3e:43:3f:
         c1:09:96:76:c9:c3:21:04:23:0c:8e:c9:1a:5e:70:9e:4b:13:
         d8:4e:cd:29:c9:53:6c:55:1a:2a:9a:cd:11:6b:f7:b2:45:2e:
         0c:9d:77:6e:c9:1c:de:98:23:38:a7:69:30:36:5b:70:d0:8d:
         a2:7d:3a:40:3c:19:36:14:f7:15:d8:b7:5f:47:0b:54:57:97:
         88:58:21:6d:fa:c3:04:45:45:c8:12:e6:77:f5:87:f8:6e:64:
         22:02:bb:6a:ca:19:f7:f3:eb:04:fe:2b:e8:59:e9:de:09:8b:
         22:a2:ea:4e:0e:23:b4:a2:d8:bb:b3:df:fe:d6:92:35:41:d1:
         c4:e7:be:b5:f8:ab:e1:fe:87:3b:e5:f8:a5:3d:c8:8a:2e:59:
         63:6b:77:4a:b5:e9:58:aa:31:31:36:4f:1d:36:73:00:1e:e4:
         80:2f:5e:85:1a:d4:8a:d1:2b:6b:41:e8:be:bb:3b:ec:0e:ac:
         a8:7f:15:e4:71:de:af:60:f1:d8:a3:8b:6e:75:6d:e1:1b:13:
         1a:58:85:bd:f9:18:a3:f7:b5:54:61:71:ec:aa:be:bd:24:5b:
         e0:96:e5:14:30:5a:87:74:93:9f:a4:33:23:f5:e7:e3:27:20:
         98:18:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org