Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C8C552F2C94AD95CB4A21C2AB161AB2CC8B5CF51.cer
File:                     C8C552F2C94AD95CB4A21C2AB161AB2CC8B5CF51.cer (raw, json)
Hash identifier:          WGUusnr+MhWh5AR5WUIbLUCht/D6IJIxAms7k47/RBA=
Subject key identifier:   C8:C5:52:F2:C9:4A:D9:5C:B4:A2:1C:2A:B1:61:AB:2C:C8:B5:CF:51
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       384E110C8D110AD325295A935EC00332ECBCA61A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/C8C552F2C94AD95CB4A21C2AB161AB2CC8B5CF51.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Dec 2023 14:05:09 +0000
Certificate not after:    Fri 29 Nov 2024 14:10:09 +0000
Subordinate resources:    AS: 265455
                          IP: 168.196.76.0/22
                          IP: 2804:3468::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4e:11:0c:8d:11:0a:d3:25:29:5a:93:5e:c0:03:32:ec:bc:a6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  1 14:05:09 2023 GMT
            Not After : Nov 29 14:10:09 2024 GMT
        Subject: CN=C8C552F2C94AD95CB4A21C2AB161AB2CC8B5CF51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:66:17:ae:7e:0e:41:e4:e2:66:d9:f6:2d:
                    ba:dc:e1:70:a1:c8:c2:24:1f:21:95:36:17:a1:31:
                    fd:a3:a8:17:2a:63:ed:74:07:cc:be:18:0d:b7:86:
                    c8:ec:48:61:be:9a:81:dd:98:65:21:cd:3a:90:2c:
                    b6:85:80:3f:4b:1a:dd:e8:d0:27:01:26:ed:4e:18:
                    79:84:cc:f6:b9:c9:74:67:1c:70:b3:59:a4:c4:61:
                    ca:dd:d8:6a:12:d9:06:d0:67:65:47:f1:24:79:83:
                    3c:22:6c:7e:82:ed:46:80:a2:f2:05:b2:59:89:be:
                    31:1c:a3:07:4e:a0:f3:83:e6:08:f8:e1:1c:30:36:
                    69:04:be:ce:ba:66:6f:e2:71:1a:96:de:a5:8c:22:
                    9d:bb:27:c2:e6:e5:4f:ec:b5:35:e3:b8:c4:30:d6:
                    ed:68:68:b7:9a:42:32:c3:c3:b5:4b:87:6e:30:81:
                    c9:7b:da:cb:21:27:26:0c:5d:c8:85:32:a2:0d:3a:
                    33:e1:df:d2:e7:03:c1:3f:d9:50:60:0f:46:9d:0d:
                    f1:4c:4c:46:eb:cc:40:0c:d6:58:1a:d8:12:cf:3d:
                    cc:fd:cc:06:e7:b7:6d:1e:9e:36:f0:fa:99:ba:04:
                    2c:60:93:0c:2a:e4:c3:f7:ce:52:72:39:3d:dd:8b:
                    cf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:C5:52:F2:C9:4A:D9:5C:B4:A2:1C:2A:B1:61:AB:2C:C8:B5:CF:51
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/C8C552F2C94AD95CB4A21C2AB161AB2CC8B5CF51.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.76.0/22
                IPv6:
                  2804:3468::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265455

    Signature Algorithm: sha256WithRSAEncryption
         10:d8:20:9c:38:a2:73:e4:41:0b:41:81:40:7e:24:06:8d:2f:
         97:6b:17:f4:60:27:46:15:f7:8a:3e:f1:06:53:4e:09:58:64:
         a5:50:ff:8b:8a:18:0a:df:c5:d7:e3:7a:61:d9:21:88:1a:96:
         83:ee:1e:2f:c8:f6:c3:e0:d2:f2:32:aa:0d:93:75:8b:9d:0d:
         bb:5c:16:22:32:bc:fa:72:9e:7b:f7:88:db:b9:8b:f1:1b:d9:
         b6:01:99:38:e6:21:cc:34:94:63:06:7b:a2:cc:94:2d:e8:ed:
         79:1d:a0:44:75:20:8b:70:6b:08:b0:4a:a3:0b:7b:ef:38:d5:
         64:6a:17:48:78:cf:28:ce:d2:66:36:e9:b6:ec:b9:61:16:8f:
         ab:f0:6c:9b:5d:a8:99:30:14:52:d6:c2:85:48:8c:1d:13:62:
         74:04:ba:d0:6f:35:f7:3b:45:75:a0:a5:c4:e8:55:12:ad:75:
         97:0b:37:4f:a0:9f:3d:9c:f2:73:45:d5:ff:54:c5:38:35:03:
         76:69:16:04:bc:96:76:3d:b2:34:d4:d6:69:57:bb:70:bb:a4:
         6e:eb:9a:74:52:c8:5d:0e:b9:1c:d7:49:ea:cc:98:26:1b:7e:
         2c:78:95:ba:a5:38:42:43:38:3a:35:21:f5:50:3b:a8:10:66:
         e0:de:74:17
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUOE4RDI0RCtMlKVqTXsADMuy8phowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDExNDA1MDlaFw0yNDExMjkxNDEwMDlaMDMxMTAvBgNV
BAMTKEM4QzU1MkYyQzk0QUQ5NUNCNEEyMUMyQUIxNjFBQjJDQzhCNUNGNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCytmYXrn4OQeTiZtn2Lbrc4XCh
yMIkHyGVNhehMf2jqBcqY+10B8y+GA23hsjsSGG+moHdmGUhzTqQLLaFgD9LGt3o
0CcBJu1OGHmEzPa5yXRnHHCzWaTEYcrd2GoS2QbQZ2VH8SR5gzwibH6C7UaAovIF
slmJvjEcowdOoPOD5gj44RwwNmkEvs66Zm/icRqW3qWMIp27J8Lm5U/stTXjuMQw
1u1oaLeaQjLDw7VLh24wgcl72sshJyYMXciFMqINOjPh39LnA8E/2VBgD0adDfFM
TEbrzEAM1lga2BLPPcz9zAbnt20enjbw+pm6BCxgkwwq5MP3zlJyOT3di8/xAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIxVLyyUrZXLSi
HCqxYassyLXPUTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85c2FMZGJucThpM2JmcUJtSmg1M1JZRUNMRjRNb0xhbkY3
THVLOHB6Z1hVMS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85c2FMZGJucThpM2JmcUJtSmg1M1JZRUNMRjRNb0xhbkY3
THVLOHB6Z1hVMS8wL0M4QzU1MkYyQzk0QUQ5NUNCNEEyMUMyQUIxNjFBQjJDQzhC
NUNGNTEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqjETDANBAIAAjAHAwUA
KAQ0aDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDO8wDQYJKoZIhvcNAQELBQAD
ggEBABDYIJw4onPkQQtBgUB+JAaNL5drF/RgJ0YV94o+8QZTTglYZKVQ/4uKGArf
xdfjemHZIYgaloPuHi/I9sPg0vIyqg2TdYudDbtcFiIyvPpynnv3iNu5i/Eb2bYB
mTjmIcw0lGMGe6LMlC3o7XkdoER1IItwawiwSqMLe+841WRqF0h4zyjO0mY26bbs
uWEWj6vwbJtdqJkwFFLWwoVIjB0TYnQEutBvNfc7RXWgpcToVRKtdZcLN0+gnz2c
8nNF1f9UxTg1A3ZpFgS8lnY9sjTU1mlXu3C7pG7rmnRSyF0OuRzXSerMmCYbfix4
lbqlOEJDODo1IfVQO6gQZuDedBc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org