Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.cer
File:                     C8336EEDF024BF7C85698838BBD22B1A5E1136B8.cer (raw, json)
Hash identifier:          3XFTppeCNsrpHoHhv85guIItgWEOF4JGjQLShMRnV4I=
Subject key identifier:   C8:33:6E:ED:F0:24:BF:7C:85:69:88:38:BB:D2:2B:1A:5E:11:36:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38943E62DCF42C9F731343B926C03726B316E800
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 18:57:54 +0000
Certificate not after:    Thu 23 May 2024 19:02:54 +0000
Subordinate resources:    AS: 263592
                          IP: 138.0.168.0/22
                          IP: 168.121.120.0/22
                          IP: 177.10.76.0/22
                          IP: 2804:f90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:94:3e:62:dc:f4:2c:9f:73:13:43:b9:26:c0:37:26:b3:16:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 18:57:54 2023 GMT
            Not After : May 23 19:02:54 2024 GMT
        Subject: CN=C8336EEDF024BF7C85698838BBD22B1A5E1136B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:c7:95:2b:ee:6b:ce:bf:7c:78:9d:27:de:
                    76:24:7c:03:30:5c:4e:4e:c1:e9:bb:d7:30:d3:94:
                    13:0f:9f:4a:97:25:35:cf:09:6e:ee:35:89:f9:c5:
                    9c:73:aa:02:02:74:79:ea:bb:07:a6:bf:d9:d4:c2:
                    0f:3a:f3:a6:77:fc:51:cc:4f:ae:28:80:52:58:e6:
                    67:6c:7c:e1:db:d6:7d:01:78:22:ae:b7:ef:7d:6f:
                    0a:11:c8:48:e0:17:28:c4:f8:d0:5c:37:a4:60:d0:
                    6b:5e:7f:5d:3f:20:96:f0:37:2b:2c:b9:4c:9f:26:
                    95:4c:b7:73:a9:c6:d6:31:41:ff:5f:3a:29:31:ef:
                    f3:da:f9:88:03:93:19:f8:a2:bd:32:2a:28:bc:41:
                    bb:2b:25:8a:20:da:53:47:21:bf:05:3a:1c:d2:e4:
                    05:bd:14:c4:ab:2a:43:37:8b:f1:49:93:93:a3:e5:
                    2a:ed:60:7e:64:0c:d6:f0:c1:20:ed:c8:f2:43:66:
                    44:71:3d:da:11:ed:12:2c:d2:12:67:45:c5:2e:6e:
                    3d:c2:d5:45:62:e2:21:e1:62:83:4f:d7:6b:4c:80:
                    70:8f:d7:e1:0d:99:03:d3:e1:84:b1:f3:14:b0:63:
                    f0:e6:41:e0:f9:aa:89:31:23:c6:e9:a5:e8:d6:f7:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:33:6E:ED:F0:24:BF:7C:85:69:88:38:BB:D2:2B:1A:5E:11:36:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.168.0/22
                  168.121.120.0/22
                  177.10.76.0/22
                IPv6:
                  2804:f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263592

    Signature Algorithm: sha256WithRSAEncryption
         85:32:d4:e7:0f:5e:b9:06:13:4b:d1:d0:53:cd:0c:cc:d1:93:
         83:8c:92:6f:14:09:0c:fe:1b:a9:00:a5:58:0e:85:e0:8a:29:
         40:fe:bf:4b:ba:9c:de:22:a0:49:0e:22:92:ab:a1:c4:1b:b0:
         74:b9:b9:90:99:f9:e4:51:f8:39:df:ae:19:49:b6:b9:d4:98:
         ae:14:b6:43:70:55:00:e5:a4:ed:2f:08:32:49:c4:e7:ea:0d:
         6c:06:2c:63:83:7a:f1:f5:e4:62:40:78:de:c4:9a:d9:16:16:
         0c:99:d6:bc:a4:4b:0b:62:51:b8:0b:f0:e6:e0:b5:17:22:f3:
         06:1d:f0:7f:1d:da:2e:4c:36:40:65:3b:55:7d:99:cd:5b:5c:
         aa:42:6e:e7:4e:f8:db:e1:2a:b2:82:f0:1b:64:d7:c3:17:5f:
         4c:3a:76:17:14:1d:f5:4c:19:4b:4b:26:5a:70:d4:03:6d:e3:
         f8:74:5b:70:2d:2f:85:fd:12:bc:3f:b0:4c:51:d0:58:03:08:
         1c:b8:8b:06:66:18:fc:36:7d:bf:be:42:6d:56:b2:4d:03:40:
         f0:51:08:7b:81:48:45:9a:3b:94:3b:1f:1e:92:84:f2:68:1f:
         81:34:85:b7:f8:66:72:f9:c7:b0:12:b2:b1:c1:03:f4:d0:e2:
         90:be:50:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org