Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.cer
File:                     C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.cer (raw, json)
Hash identifier:          Yyr4PgsMEXWjj9x3FnhQ6a6vG8p3NmxAnhRH5sXIU18=
Subject key identifier:   C8:DC:8A:11:BC:AE:10:99:82:04:40:AC:9D:ED:A7:8F:35:E4:E8:D1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F3DE8E28D05218DF6616D451D8086D27AAC12DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2024 17:47:51 +0000
Certificate not after:    Fri 07 Feb 2025 17:52:51 +0000
Subordinate resources:    AS: 268067
                          IP: 45.167.136.0/22
                          IP: 2804:5778::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3d:e8:e2:8d:05:21:8d:f6:61:6d:45:1d:80:86:d2:7a:ac:12:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 17:47:51 2024 GMT
            Not After : Feb  7 17:52:51 2025 GMT
        Subject: CN=C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:3f:e7:16:c3:ac:a8:7c:62:6b:5f:a0:be:
                    e3:a3:21:a1:96:17:e9:4c:78:27:df:bb:c8:76:bd:
                    ee:29:a7:be:0d:f1:4f:56:2e:8b:f9:65:42:31:da:
                    66:48:07:fd:e8:54:ef:30:08:1b:0a:74:14:71:c9:
                    fb:b7:9f:6b:3b:37:fc:5d:36:86:22:33:fe:56:5f:
                    fa:89:9d:d4:be:85:a6:cd:42:ff:17:aa:0c:69:52:
                    c3:3f:80:81:a9:b4:26:dd:f4:68:7c:b5:be:f4:ad:
                    04:5d:fe:32:ab:ca:9e:e6:a8:04:c4:97:b6:14:2e:
                    6d:50:37:da:42:a1:fa:2c:b9:65:8d:b7:bc:62:df:
                    d2:d3:08:51:bd:c1:5b:52:8c:07:e3:85:fc:51:dd:
                    b6:79:56:21:20:90:0c:bc:b0:2a:b8:41:38:9c:06:
                    51:a0:2d:30:24:a3:c9:e0:e8:5d:e1:98:32:d6:da:
                    0f:9a:5a:01:12:af:7b:f5:58:00:b0:8e:8d:f4:9f:
                    66:38:48:76:6c:fc:e9:0b:63:f5:29:49:f3:3c:fc:
                    82:1c:50:45:62:b4:ae:85:50:94:51:1b:2e:ec:a8:
                    3a:80:a7:46:52:e1:f7:be:6f:23:d7:b5:3c:35:fe:
                    b3:55:70:0e:b8:3e:ec:8b:8c:93:bc:98:60:13:ab:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:DC:8A:11:BC:AE:10:99:82:04:40:AC:9D:ED:A7:8F:35:E4:E8:D1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.136.0/22
                IPv6:
                  2804:5778::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268067

    Signature Algorithm: sha256WithRSAEncryption
         6c:41:9a:f5:b8:2a:b0:15:10:01:36:62:4f:15:6f:94:87:a9:
         41:23:b5:b7:4e:56:08:32:2f:80:3a:8e:ab:18:f4:60:eb:d0:
         db:97:bb:07:31:1d:fe:ef:46:6f:aa:38:6e:2f:21:c2:35:17:
         61:d4:eb:04:51:13:b9:06:8d:a0:80:d1:77:28:21:03:c5:bc:
         64:5c:04:2b:a0:50:90:fc:af:2d:92:83:ed:40:37:8b:38:dd:
         b1:0f:a1:ec:dc:81:4b:47:55:bf:a8:73:00:c1:8b:ce:dd:49:
         b7:dc:55:5b:b5:53:93:56:1f:c7:4e:09:7d:45:21:24:98:eb:
         85:7c:00:d9:fd:8f:ce:f6:cb:b5:95:d5:13:f7:59:54:dc:78:
         45:20:1d:a5:e1:48:7b:2c:75:21:8a:cf:77:c7:b1:0e:25:24:
         ee:6a:5f:66:6a:fa:4d:14:d3:01:81:aa:95:3f:ff:36:48:58:
         3c:0a:9f:2b:8b:0e:46:19:80:46:fb:c1:47:4b:d6:63:ea:2f:
         c5:94:76:94:e3:b1:3d:f6:0a:b9:f2:b4:52:d5:ee:7a:5d:bc:
         97:68:47:2b:16:b8:be:41:cc:52:15:6a:09:a9:31:81:25:f9:
         eb:35:ed:db:22:e7:99:00:a6:d8:e9:2e:f7:3b:bb:31:c0:d7:
         3a:82:ee:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org