Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/017789994B5EBE04D1C64E5CBA3A077BD787F1BD.cer
File:                     017789994B5EBE04D1C64E5CBA3A077BD787F1BD.cer (raw, json)
Hash identifier:          0tUhKFOFcLH6iPkwNpV4tjZUyEpn+WzS5SsWmcLtyEA=
Subject key identifier:   01:77:89:99:4B:5E:BE:04:D1:C6:4E:5C:BA:3A:07:7B:D7:87:F1:BD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C545E974F23929EB8DEF1B224B6350D81A279AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/017789994B5EBE04D1C64E5CBA3A077BD787F1BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Feb 2023 12:52:45 +0000
Certificate not after:    Wed 31 Jan 2024 12:57:45 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:54:5e:97:4f:23:92:9e:b8:de:f1:b2:24:b6:35:0d:81:a2:79:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 12:52:45 2023 GMT
            Not After : Jan 31 12:57:45 2024 GMT
        Subject: CN=017789994B5EBE04D1C64E5CBA3A077BD787F1BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d3:72:44:2c:e6:17:48:02:7f:f1:8a:03:6c:
                    8e:45:8f:1b:4f:52:b4:27:cf:91:76:7e:11:a4:af:
                    7b:22:bc:fe:3b:90:72:6c:51:9d:f5:77:28:79:56:
                    7a:b6:ec:46:00:51:fd:c4:48:41:ea:b7:b5:18:d1:
                    1f:25:b6:4e:4e:72:a9:14:55:f8:91:da:44:c5:32:
                    4b:4e:e2:d9:fa:1e:30:73:b6:ef:ca:00:44:93:f6:
                    0b:d5:76:e2:7e:47:7f:56:3e:12:e3:fe:2f:d5:bb:
                    21:ce:8b:c0:ee:1b:c6:af:3a:90:f7:5f:12:f6:64:
                    52:77:80:da:d7:85:1d:6f:e0:4a:86:81:27:09:d0:
                    f7:1d:20:fb:0d:c9:96:9c:4f:4f:db:f6:5f:58:47:
                    13:49:34:8f:7a:22:86:73:d2:30:e7:e8:19:a5:d1:
                    9c:94:a8:53:d3:a1:a6:30:e8:58:96:98:fc:c5:a6:
                    2a:b1:2c:36:81:41:61:96:68:8e:00:29:c5:2e:14:
                    72:a4:ce:41:3f:98:cc:bc:e2:88:1a:cc:d0:ab:64:
                    4e:e5:60:fc:a0:97:ef:78:88:36:75:38:67:02:c8:
                    30:07:9e:0f:bc:58:bf:3f:2b:03:81:71:7b:50:78:
                    25:8c:fc:3a:72:6a:7f:56:b8:da:29:e6:a1:7a:9c:
                    17:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:77:89:99:4B:5E:BE:04:D1:C6:4E:5C:BA:3A:07:7B:D7:87:F1:BD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/017789994B5EBE04D1C64E5CBA3A077BD787F1BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         79:e3:36:2b:be:5c:c1:ab:3e:69:f2:0e:78:fd:4f:5e:25:f5:
         3c:d7:e7:cb:51:98:a8:e1:6c:58:a5:27:74:ff:b9:36:eb:1b:
         f2:1f:84:c3:93:58:24:1b:ae:ad:c5:58:4b:aa:be:86:b8:9c:
         1a:4b:96:1b:44:8e:dc:77:f8:27:08:38:7b:c5:80:44:6a:b7:
         24:3e:a4:5e:75:aa:50:cf:3f:44:53:73:99:80:38:07:d1:57:
         1f:ba:c3:1f:cd:5d:d3:88:e3:ad:ef:99:c2:2c:b0:b2:f2:00:
         66:ca:b8:f4:a0:b7:64:9f:f7:12:b7:da:84:9b:f7:33:8c:25:
         da:74:4f:8a:b0:51:87:7b:3b:6c:1f:f7:c9:0a:b1:5e:6f:74:
         73:c1:cd:7e:23:fc:08:78:aa:d7:05:ca:34:7d:96:d1:2d:79:
         e5:9a:4b:50:27:57:ba:22:50:5d:00:7a:49:21:81:f3:dc:85:
         e3:ea:46:61:37:d6:64:12:23:45:74:b7:ba:64:cb:24:de:cb:
         17:59:ba:d8:0f:b2:e2:6e:ab:18:65:87:c2:7d:4c:5e:ca:1c:
         b7:66:87:cc:52:72:93:92:be:cc:67:80:5e:47:43:67:59:f5:
         42:a1:0a:15:46:be:82:4f:93:ea:b1:2c:f2:f8:61:1f:32:31:
         29:e5:22:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org