Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C8A88E2290299A468AE6EC1703931B7E1914CF8B.cer
File:                     C8A88E2290299A468AE6EC1703931B7E1914CF8B.cer (raw, json)
Hash identifier:          23prrfkwTnU3dwQEZCQjAOLRdYTqb2ONvCzTAPSXbcc=
Subject key identifier:   C8:A8:8E:22:90:29:9A:46:8A:E6:EC:17:03:93:1B:7E:19:14:CF:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A4A74A0A4683161BD466E16A8ADA13E0FA85488
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/C8A88E2290299A468AE6EC1703931B7E1914CF8B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Jan 2024 11:17:11 +0000
Certificate not after:    Wed 22 Jan 2025 11:22:11 +0000
Subordinate resources:    AS: 263496
                          IP: 170.244.216.0/22
                          IP: 191.243.56.0/21
                          IP: 2804:12c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4a:74:a0:a4:68:31:61:bd:46:6e:16:a8:ad:a1:3e:0f:a8:54:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 24 11:17:11 2024 GMT
            Not After : Jan 22 11:22:11 2025 GMT
        Subject: CN=C8A88E2290299A468AE6EC1703931B7E1914CF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:45:0c:c8:b7:43:76:ac:c7:61:96:47:34:16:
                    9e:87:04:e1:9c:05:73:1a:e5:cc:b7:93:50:6f:8d:
                    b4:63:ef:dd:72:0e:f0:d4:8e:bd:4b:4e:65:db:1b:
                    04:26:84:ff:37:e5:14:08:36:4c:6a:18:41:f2:f2:
                    46:02:1c:a0:5e:c7:10:ef:53:d7:93:b5:e2:76:b0:
                    71:b9:31:2c:f0:c1:cd:44:1d:7e:0a:81:a3:04:e0:
                    40:82:fe:cd:d9:55:01:b1:29:57:63:f4:1b:04:b7:
                    9c:8f:c3:6a:9d:c0:b1:62:12:ef:3e:c2:3d:37:ce:
                    e1:fa:68:fb:dd:0e:36:02:6f:37:94:0c:c4:4e:fc:
                    e7:2c:61:a0:67:53:df:1b:22:c2:1b:56:2f:32:61:
                    7b:ea:ed:d9:48:53:c4:3f:02:93:e0:61:63:bc:6c:
                    56:a1:46:71:df:29:2a:69:f3:38:a1:ec:e4:98:0d:
                    d5:99:b5:cc:e6:e7:5e:78:41:81:dc:68:2f:77:f4:
                    a3:da:70:af:7f:7e:8e:dd:c4:4e:3e:8f:da:14:e8:
                    7b:fd:ec:16:2a:c0:ee:94:a9:82:21:79:ea:1e:21:
                    c1:38:c7:cc:8a:db:1d:85:f3:63:04:d9:dc:61:48:
                    1b:b1:c5:7b:25:27:50:a1:a9:d6:4d:ed:39:11:58:
                    0d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:A8:8E:22:90:29:9A:46:8A:E6:EC:17:03:93:1B:7E:19:14:CF:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/C8A88E2290299A468AE6EC1703931B7E1914CF8B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.216.0/22
                  191.243.56.0/21
                IPv6:
                  2804:12c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263496

    Signature Algorithm: sha256WithRSAEncryption
         b7:9a:4c:42:8c:71:d7:40:f1:79:20:f8:e3:8a:c1:d9:51:e7:
         bc:26:d6:8c:75:a4:88:bd:da:62:d5:be:00:43:87:08:71:cb:
         d3:ea:cc:ab:84:e4:32:cc:1b:cd:61:2e:90:9e:f3:e1:2c:20:
         ce:7d:df:cb:43:ff:ce:f8:9a:92:58:85:a8:5f:4b:71:c8:a1:
         31:f0:ad:d0:6b:bd:13:7a:70:ab:ad:c1:65:e4:93:84:8b:12:
         a6:1d:6f:b5:03:80:cc:6f:3a:46:d6:cf:8a:c1:0f:c1:de:ff:
         c5:1b:d0:86:2f:40:47:b1:9a:9d:ad:e7:3e:44:4e:b2:78:8a:
         c8:55:36:d9:6d:25:5f:c4:41:fa:77:a8:6d:49:e1:9c:43:81:
         97:dd:e6:dc:95:aa:53:8d:2a:94:f8:15:a2:ad:ad:3d:6e:57:
         df:eb:2f:22:66:a6:a3:d7:7a:33:5e:39:00:32:ba:36:31:70:
         50:84:25:96:6e:e5:62:63:7d:ab:75:f0:dc:5a:85:70:4d:51:
         4d:2a:16:3b:7f:56:d4:88:34:5b:f1:d4:6c:c4:44:a5:38:19:
         a1:c2:ae:10:b2:0f:4d:25:22:e5:7a:09:87:10:83:8f:31:c7:
         ad:a2:b4:7c:e6:90:57:ca:61:f5:04:db:1e:a9:b4:14:de:a3:
         32:7d:cc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org