Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A877D667C3230BCA9C20F999F657F1B95646CCB2.cer
File:                     A877D667C3230BCA9C20F999F657F1B95646CCB2.cer (raw, json)
Hash identifier:          Tg0AG4aHj3ho0YLDxErrZWoPgBEYhEkP/+MOb2MQjqA=
Subject key identifier:   A8:77:D6:67:C3:23:0B:CA:9C:20:F9:99:F6:57:F1:B9:56:46:CC:B2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       286EA1C10D4464C04144A922902E8A6A97B92318
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/A877D667C3230BCA9C20F999F657F1B95646CCB2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 02 Dec 2023 22:23:10 +0000
Certificate not after:    Sat 30 Nov 2024 22:28:10 +0000
Subordinate resources:    AS: 271573
                          IP: 200.0.179.0/24
                          IP: 200.6.134.0/23
                          IP: 201.131.106.0/24
                          IP: 2804:7da0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6e:a1:c1:0d:44:64:c0:41:44:a9:22:90:2e:8a:6a:97:b9:23:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  2 22:23:10 2023 GMT
            Not After : Nov 30 22:28:10 2024 GMT
        Subject: CN=A877D667C3230BCA9C20F999F657F1B95646CCB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:28:58:fb:a3:cd:c3:75:ed:44:56:f0:a6:
                    0b:f9:0a:26:7a:60:dd:ab:64:2e:ef:cd:69:31:80:
                    75:f3:03:a0:df:c6:97:b8:f4:3b:8a:eb:6e:2c:48:
                    88:56:98:c0:99:90:0a:8f:5b:90:e1:d8:27:43:57:
                    f9:6a:81:b8:58:86:d3:5c:8a:8d:11:9e:ad:5b:07:
                    0d:59:26:08:ee:f7:0b:de:e2:5e:8c:33:a5:df:68:
                    f8:45:b5:40:a7:15:7c:b1:19:1b:02:64:34:8c:a0:
                    e0:82:b4:5e:1a:84:aa:ad:f8:1c:b7:53:cf:fa:9a:
                    68:0c:2a:2a:46:48:1d:0a:f2:3d:21:5b:45:31:7b:
                    3a:32:f6:c7:d7:9d:ac:3e:58:42:59:cc:f2:14:9b:
                    9c:20:4b:b7:49:53:12:28:1a:9b:49:c6:c4:f0:62:
                    76:16:58:98:e1:7d:d2:29:45:83:0a:fd:f1:b7:bb:
                    58:65:cd:e4:79:3b:f6:21:90:14:31:b1:bc:01:f0:
                    93:80:3c:f8:29:90:bd:75:df:39:f7:07:64:25:29:
                    2a:20:b1:0c:b5:ef:20:78:0f:a8:08:25:c1:07:97:
                    96:58:71:a4:86:78:c9:91:93:4a:f3:cc:57:43:d4:
                    76:2e:09:bf:57:a6:9a:c4:3c:0b:f4:8a:9e:fc:ee:
                    ca:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:77:D6:67:C3:23:0B:CA:9C:20:F9:99:F6:57:F1:B9:56:46:CC:B2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/A877D667C3230BCA9C20F999F657F1B95646CCB2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.179.0/24
                  200.6.134.0/23
                  201.131.106.0/24
                IPv6:
                  2804:7da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271573

    Signature Algorithm: sha256WithRSAEncryption
         52:d1:6e:f2:1b:66:78:f0:15:5d:30:25:ba:58:6d:b5:e0:ec:
         97:a5:bc:ea:45:49:71:87:b5:64:cd:ff:64:39:cd:d3:36:1c:
         7d:08:36:d0:a2:59:5c:29:6d:d0:ad:10:d7:27:6c:a5:73:2c:
         6f:4c:2d:32:47:88:12:9a:61:dd:9b:20:98:f8:81:d9:b0:b8:
         ba:24:f2:14:5d:66:61:c9:00:06:4e:fd:c5:60:32:b1:4b:a6:
         5d:59:53:d7:f5:8a:3a:54:4b:c7:1d:1a:dc:84:a7:f3:f3:c1:
         4f:6d:26:ec:a7:c9:a2:e1:00:53:8d:fe:d7:d9:c6:ee:ad:30:
         d5:03:39:c9:e3:bf:e3:f0:55:21:2e:82:81:6e:f9:77:87:9b:
         5d:e8:04:d1:82:82:f0:ff:97:cb:c8:ba:87:bc:a2:40:f1:91:
         ee:d6:e8:22:41:8c:03:5f:f9:42:7f:09:24:dd:4a:43:bc:9d:
         6c:83:fc:2a:4c:4f:cd:ac:59:a1:17:9b:a8:3e:57:41:fc:e9:
         7b:2e:c6:fc:ff:99:ac:89:ce:57:53:3a:0a:16:de:a4:95:cb:
         6a:49:d6:42:58:c9:df:b2:3a:64:9c:16:ad:23:54:a5:b1:51:
         cf:ef:5e:d7:c9:92:ae:ca:7d:14:47:54:cd:90:fb:d2:b1:58:
         d2:86:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org