Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.cer
File:                     177CC1F044635CDEFDDF40B78BE59FC17A2383BF.cer (raw, json)
Hash identifier:          r+YadK7aokW1Yk5/jQ1F2sdlJgMOOMzeH1pJrjeTfZ0=
Subject key identifier:   17:7C:C1:F0:44:63:5C:DE:FD:DF:40:B7:8B:E5:9F:C1:7A:23:83:BF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20314DB06F77C9A7430077F44A7324C7705E9D71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Jul 2023 14:06:34 +0000
Certificate not after:    Wed 24 Jul 2024 14:11:34 +0000
Subordinate resources:    AS: 268070
                          IP: 45.167.122.0/23
                          IP: 2804:5788::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:31:4d:b0:6f:77:c9:a7:43:00:77:f4:4a:73:24:c7:70:5e:9d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 26 14:06:34 2023 GMT
            Not After : Jul 24 14:11:34 2024 GMT
        Subject: CN=177CC1F044635CDEFDDF40B78BE59FC17A2383BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:03:3a:77:50:ae:6a:23:03:32:89:5b:0d:
                    c4:99:e6:1b:d7:62:49:a9:a4:89:76:55:d7:38:26:
                    4b:bd:af:3c:45:71:06:c8:79:cd:ec:db:21:0c:20:
                    d2:c8:56:17:0f:b3:77:ed:4f:a8:68:3a:4a:fa:e8:
                    2a:b4:6e:15:55:7b:38:16:13:23:7b:dd:c9:15:d8:
                    cc:77:23:0a:86:87:3e:5a:b5:81:38:d4:e4:bd:7f:
                    f2:70:56:b5:6a:92:4b:bb:21:8d:87:22:da:76:1a:
                    0a:9e:c6:d5:73:df:63:2f:51:30:55:97:ad:70:68:
                    c0:86:a8:86:80:d2:44:3d:35:61:0c:ad:57:30:10:
                    ac:cd:31:89:07:4c:83:74:f8:75:e0:de:a5:63:16:
                    43:28:c3:77:8f:a0:1d:cb:cb:e2:c5:44:5e:b6:a6:
                    7f:39:30:0a:9b:79:58:e3:f7:06:da:d2:1c:f9:be:
                    cc:41:2f:15:57:12:23:6d:c4:39:e8:60:06:a0:e6:
                    2f:c6:c1:d5:45:3f:f2:55:b3:4d:b3:52:d4:7a:ba:
                    59:8d:ca:f0:f5:a1:85:67:7f:7b:cb:25:cd:9e:2b:
                    ba:c1:eb:b3:e6:1d:b8:7a:98:cb:48:66:61:f5:27:
                    50:39:c5:8f:b6:6d:9b:bd:54:25:0d:79:cf:84:11:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:7C:C1:F0:44:63:5C:DE:FD:DF:40:B7:8B:E5:9F:C1:7A:23:83:BF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.122.0/23
                IPv6:
                  2804:5788::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268070

    Signature Algorithm: sha256WithRSAEncryption
         4d:49:17:83:9e:01:d7:1f:cf:7d:a3:bb:0c:e9:db:de:a8:64:
         42:29:e2:06:e6:a3:88:6d:1b:68:c2:1a:b9:a3:8f:b8:09:d6:
         bc:b0:c2:29:02:a5:26:70:ba:90:4e:c4:38:26:13:6f:41:3a:
         78:70:11:e0:1f:bd:bb:d5:aa:2c:73:f7:60:97:3b:eb:89:46:
         b4:a2:de:c1:80:9f:8b:26:61:d8:c4:99:6a:59:57:f4:26:76:
         b9:68:b7:b5:e5:7d:9f:bc:0a:05:af:c6:9c:9d:63:60:1a:53:
         c9:62:eb:dc:ea:09:fa:e7:d4:f2:65:e9:15:da:96:94:77:c7:
         78:5a:ac:83:6d:9a:6f:c2:2e:c3:18:ed:ee:3c:a4:70:76:0b:
         a6:18:f9:c7:9f:73:78:1f:c3:08:a8:39:08:58:c2:ce:55:af:
         1a:66:e2:9e:5b:31:de:79:d4:cc:d3:76:74:12:8d:d8:a1:7d:
         0a:9e:ac:47:c6:fb:c4:c9:1f:95:eb:90:ff:b9:00:c6:9e:70:
         dd:1b:d6:e7:df:35:27:ce:ec:7c:f8:8f:84:f8:9c:6f:ac:8b:
         31:57:c4:ca:5c:5f:54:45:e4:71:ba:04:aa:a3:8e:ec:b6:3d:
         ba:2b:f8:6f:59:a8:bf:38:b1:41:58:1b:e1:ee:27:1d:20:29:
         5e:06:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org