Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B8384C83EC0C1755D4AEDA48782398566B7DEA8D.cer
File:                     B8384C83EC0C1755D4AEDA48782398566B7DEA8D.cer (raw, json)
Hash identifier:          ljBlD6mW0w+Ag03S3z3yJh3rmHsJQ/p0AmFdI4dCWsU=
Subject key identifier:   B8:38:4C:83:EC:0C:17:55:D4:AE:DA:48:78:23:98:56:6B:7D:EA:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2EB407BCFD709616D7D2082120F09BEB3BA66CFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/B8384C83EC0C1755D4AEDA48782398566B7DEA8D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 20:54:59 +0000
Certificate not after:    Mon 02 Sep 2024 20:59:59 +0000
Subordinate resources:    AS: 266375
                          IP: 170.80.52.0/22
                          IP: 2804:36d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b4:07:bc:fd:70:96:16:d7:d2:08:21:20:f0:9b:eb:3b:a6:6c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  4 20:54:59 2023 GMT
            Not After : Sep  2 20:59:59 2024 GMT
        Subject: CN=B8384C83EC0C1755D4AEDA48782398566B7DEA8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:cb:ef:1f:ca:3c:23:ab:91:bf:1e:4a:c2:
                    20:8a:17:60:18:82:23:0e:cc:04:d6:15:c1:d4:b7:
                    8c:fe:20:fc:15:56:b7:d5:53:93:30:66:e9:bc:ce:
                    48:d3:4b:73:14:ca:2a:69:83:b3:ad:d3:d2:97:59:
                    9d:21:af:2e:9e:54:4b:81:81:14:19:a9:ca:53:4c:
                    26:0c:99:7f:df:4a:3c:f4:27:be:7b:8f:e5:8c:b3:
                    8c:c1:55:a5:8e:d8:f8:39:8c:8d:74:31:3a:0a:47:
                    06:ce:3b:6b:a9:bf:f1:72:f6:8d:74:20:9c:38:51:
                    e9:c6:32:d9:65:24:47:e8:a5:72:85:5f:11:c2:2b:
                    e2:9b:2d:5c:ba:87:bb:b8:7f:8e:02:94:96:c1:23:
                    1c:62:5c:ea:4c:25:61:2d:44:53:29:0f:01:24:fa:
                    16:67:e0:fe:21:17:f8:27:b2:4e:e5:a4:ba:0a:fe:
                    92:1f:49:98:bd:8a:e7:6e:5c:36:6f:c2:af:41:73:
                    c1:3a:57:e5:f1:27:00:a8:0c:cc:21:b9:f6:59:fd:
                    a8:36:79:40:ef:0f:03:d9:dc:e9:53:e2:40:dc:19:
                    4e:21:b5:eb:f0:f7:0f:2f:58:92:af:5c:db:b3:b6:
                    07:d9:f7:e1:68:d0:b1:e0:c8:61:00:10:43:57:94:
                    5f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:38:4C:83:EC:0C:17:55:D4:AE:DA:48:78:23:98:56:6B:7D:EA:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/B8384C83EC0C1755D4AEDA48782398566B7DEA8D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.52.0/22
                IPv6:
                  2804:36d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266375

    Signature Algorithm: sha256WithRSAEncryption
         63:51:80:fb:6f:43:ba:08:1f:6b:ee:7b:bc:d9:7f:d1:5b:cc:
         d4:ba:1c:c8:07:94:05:aa:7d:76:6c:35:12:79:66:fc:47:db:
         cb:a7:5e:09:d5:4d:a9:f3:63:bb:14:05:fc:4e:c5:4a:68:5e:
         c6:43:46:78:f1:ea:e3:79:a5:8e:df:b2:de:bb:fa:cb:0c:d8:
         07:a3:64:c8:cf:d5:42:7b:42:2e:d7:5f:8c:2a:e3:d4:14:72:
         0b:a5:54:3c:92:7f:9f:13:78:8b:53:ac:c9:7f:60:1f:03:f6:
         f7:d2:17:fc:d2:cb:8a:77:71:77:e9:20:1e:fb:94:d1:fd:b0:
         d5:42:53:b3:8f:55:b2:8c:52:50:be:fe:52:e0:35:31:29:ac:
         fc:63:67:ef:a3:ab:fe:fc:8b:12:25:a9:c1:3f:37:b5:54:3c:
         b1:ed:05:39:52:a9:27:fb:59:c1:03:63:ce:40:91:2a:1d:fa:
         36:d2:6c:64:dc:3c:05:3d:79:d3:73:ca:5a:9d:33:e3:d8:0c:
         44:35:aa:4c:d0:77:29:40:44:3a:71:76:cc:f3:77:8c:21:8a:
         5f:29:d6:bb:0d:48:ee:61:d6:95:f9:e3:b4:44:99:c2:f7:cc:
         82:67:69:ab:76:ea:37:9a:3d:4c:77:5f:e8:ab:70:a4:e0:13:
         b6:4a:4f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org