Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer
File:                     CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer (raw, json)
Hash identifier:          aZL9bSJbxXegR2qttMVN+jlG+FIXfDCOdPDkhbAWGvc=
Subject key identifier:   CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       46C638DF651AC1DA7A10DC586A3A8FEFD4E977B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 21:05:13 +0000
Certificate not after:    Thu 18 Jul 2024 21:10:13 +0000
Subordinate resources:    AS: 262891
                          IP: 177.20.184.0/21
                          IP: 177.23.64.0/21
                          IP: 191.253.72.0/21
                          IP: 2804:c50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c6:38:df:65:1a:c1:da:7a:10:dc:58:6a:3a:8f:ef:d4:e9:77:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 21:05:13 2023 GMT
            Not After : Jul 18 21:10:13 2024 GMT
        Subject: CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:15:99:43:ff:0e:ec:a9:d0:9e:fb:ae:05:b7:
                    e6:64:19:0a:4b:d4:bf:34:3c:a8:4f:ae:59:cd:c6:
                    8c:a4:15:27:7e:18:38:8b:4d:34:b3:ed:47:61:f8:
                    7f:86:09:a6:ba:12:46:cd:90:88:8d:d8:20:a3:20:
                    35:d1:03:db:3c:4e:75:01:45:bc:c6:e3:27:d3:a7:
                    d4:b3:c8:b5:12:df:e1:64:20:4e:58:4e:f0:5b:c1:
                    1f:0e:66:b9:56:50:5d:fa:5a:3f:d2:fc:61:f3:fa:
                    20:b4:80:a7:98:47:27:44:72:59:f4:b8:a8:3a:84:
                    27:91:48:a8:71:f3:e5:05:88:62:5f:6d:b5:27:13:
                    7d:75:93:55:c6:a2:54:52:11:43:3c:0c:48:57:b1:
                    18:e9:a8:b2:f7:08:30:cd:ae:9c:fb:b1:55:3f:9c:
                    fa:32:8d:37:64:c0:6f:93:cc:bd:73:63:89:9e:df:
                    03:59:c9:77:14:ac:a7:cd:41:72:7f:6e:24:43:57:
                    6d:07:ba:e0:80:82:b2:87:69:2d:9a:e6:2f:a4:37:
                    cd:9f:c4:b2:c3:d6:b9:46:81:da:72:c1:2f:06:95:
                    b2:bb:cc:9e:6d:dd:e3:85:76:8a:5a:1e:b1:ac:91:
                    b6:1d:24:b2:02:fa:fc:78:36:54:68:dd:22:e1:00:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.184.0/21
                  177.23.64.0/21
                  191.253.72.0/21
                IPv6:
                  2804:c50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262891

    Signature Algorithm: sha256WithRSAEncryption
         59:de:70:20:39:a3:13:58:00:96:41:48:ef:17:60:1c:69:3d:
         99:6f:4e:ec:c8:37:66:ef:63:0d:f4:5d:7b:b5:df:05:74:49:
         1d:43:4e:32:ef:61:1c:5e:2d:45:b8:13:5f:88:32:e5:2d:5c:
         98:56:71:22:40:df:ed:ad:f4:29:cb:b9:df:fc:41:97:cf:f9:
         a6:41:5a:17:d0:64:9c:7d:57:a1:11:4a:09:95:1e:b1:9a:04:
         9f:61:c1:38:71:73:b0:bf:a2:e3:fc:fc:db:d1:0c:a4:ea:7e:
         7b:97:db:2b:36:b6:ef:1f:31:66:bd:48:27:92:cc:8a:e4:59:
         32:cc:e4:42:55:fc:65:de:f4:20:94:db:ab:7c:59:c5:f7:9d:
         c4:0e:7c:b7:ec:50:27:60:c1:97:47:c5:4c:fd:a1:71:34:e1:
         2d:36:a3:f6:5b:5e:4c:05:df:ff:f5:e5:d0:e0:89:72:f8:eb:
         cd:80:42:5d:61:a9:54:6f:90:db:0e:87:c3:ba:08:80:01:44:
         3b:15:3a:59:72:3e:1d:41:80:53:45:9b:23:19:44:77:88:b5:
         5f:52:4d:23:62:02:ee:ee:1f:f5:b5:b8:ef:84:30:a4:e8:70:
         0f:c3:3b:96:3d:51:0e:4f:f2:b3:5a:6c:f3:e5:f4:54:9c:27:
         80:6e:19:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org