Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.cer
File:                     C8207CBCDD5C588AA6F98954E4642BACD9C206F5.cer (raw, json)
Hash identifier:          KuI/nqwRPMkoTyK02X2SdLHd88Nr4ayZ4wwfvPiMVJY=
Subject key identifier:   C8:20:7C:BC:DD:5C:58:8A:A6:F9:89:54:E4:64:2B:AC:D9:C2:06:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0654E475683B26C29A7C17EAFD03B16D67A2C12F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 05:30:20 +0000
Certificate not after:    Wed 05 Feb 2025 05:35:20 +0000
Subordinate resources:    AS: 52696
                          IP: 177.73.44.0/22
                          IP: 2804:c60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:54:e4:75:68:3b:26:c2:9a:7c:17:ea:fd:03:b1:6d:67:a2:c1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 05:30:20 2024 GMT
            Not After : Feb  5 05:35:20 2025 GMT
        Subject: CN=C8207CBCDD5C588AA6F98954E4642BACD9C206F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d1:c2:05:15:3a:7f:c5:29:9e:aa:50:87:9e:
                    7b:9a:32:8c:c6:17:c6:04:41:29:77:e6:b9:88:6a:
                    a5:06:73:64:15:56:90:34:85:aa:0b:e6:0f:ef:5f:
                    51:3c:4d:4f:2d:96:dd:42:f6:14:e8:3b:30:fb:ac:
                    ed:4a:2a:e6:c9:00:ec:c6:c0:7b:80:8f:50:34:0f:
                    af:78:22:56:15:14:81:a4:d6:74:8d:39:ac:8f:c8:
                    2a:69:65:b0:bb:22:98:80:13:97:08:b7:cb:47:c0:
                    30:cc:af:24:a8:28:ea:83:fd:4a:7f:ff:38:59:6d:
                    a4:17:2b:52:12:2e:6d:d3:60:37:ff:c2:e3:96:a1:
                    f8:c6:48:23:b6:e1:c0:ea:78:72:4e:ae:8e:5b:7f:
                    31:f0:85:72:3c:5e:8f:06:f3:db:0d:8f:13:17:9c:
                    5f:95:dc:bd:dc:b0:cf:18:39:c4:ee:63:21:00:fc:
                    96:29:39:46:e2:db:91:7a:6b:59:c4:49:52:86:e5:
                    0b:fd:7e:e2:4d:b2:41:11:54:bb:2c:d5:69:41:e9:
                    b5:5b:b9:8d:0c:04:f4:45:ef:4b:7b:c1:c1:d4:67:
                    be:2f:6f:bb:4b:44:b0:98:1e:ee:39:d9:90:8a:68:
                    59:06:3d:85:ca:ea:9d:f0:d7:92:b5:87:69:61:3d:
                    46:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:20:7C:BC:DD:5C:58:8A:A6:F9:89:54:E4:64:2B:AC:D9:C2:06:F5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.44.0/22
                IPv6:
                  2804:c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52696

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:dc:a6:f0:28:42:59:c8:ac:f3:06:92:a0:c6:27:76:84:
         b4:a5:11:61:6f:28:34:82:c8:08:1e:c0:fc:0e:4a:b3:d0:68:
         58:cd:03:98:b3:ae:49:ee:80:9e:7e:f8:5a:4b:50:59:82:b9:
         23:7f:ae:2f:53:d2:ae:b0:e5:41:12:f5:d8:dc:47:ca:64:cd:
         c5:e1:23:c7:9a:78:7a:d1:d3:4f:fd:88:bb:02:62:44:8d:5e:
         8d:75:a9:92:7f:59:50:55:93:57:e9:ce:61:ce:29:d1:44:9e:
         7c:3b:19:22:b0:16:cc:23:01:28:28:eb:4f:f5:47:5c:ed:6a:
         b9:76:59:43:b4:f3:b9:23:a9:3c:96:a8:87:d4:df:4c:d0:63:
         87:a2:3e:04:e7:71:8f:c1:81:ef:dc:bb:61:8d:40:da:9b:98:
         8a:b6:cc:01:31:4b:4e:0b:12:e5:c1:41:5c:68:09:f4:db:e1:
         83:9c:9a:77:cd:8d:7e:2f:77:62:ef:33:f3:27:fa:c2:b6:53:
         73:0d:6d:c3:91:31:4c:f7:b5:2b:c9:93:62:c3:19:6a:a8:89:
         43:22:e9:ee:4d:01:e9:73:03:aa:00:b6:82:19:ed:e0:33:bc:
         d8:94:53:1f:ee:27:24:81:3c:ae:01:7a:d1:06:23:10:c6:cc:
         79:38:5a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org