Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0.cer
File:                     37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0.cer (raw, json)
Hash identifier:          s8LEEmaZcam24Sj6jO1/yXWCsB0svYmH2K9zdgP+oIo=
Subject key identifier:   37:76:1C:1F:1A:6C:B7:9B:A8:AA:12:FC:BF:F4:F0:7B:FB:CF:A7:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       191B30C535A87B3FFD4F40E157A44E81870CB3C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Oct 2023 15:31:52 +0000
Certificate not after:    Tue 01 Oct 2024 15:36:52 +0000
Subordinate resources:    AS: 28187
                          IP: 138.185.168.0/22
                          IP: 187.60.128.0/20
                          IP: 189.89.208.0/20
                          IP: 2804:200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1b:30:c5:35:a8:7b:3f:fd:4f:40:e1:57:a4:4e:81:87:0c:b3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  3 15:31:52 2023 GMT
            Not After : Oct  1 15:36:52 2024 GMT
        Subject: CN=37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:c2:1a:01:16:7c:b8:81:70:34:9f:df:76:
                    9e:cc:95:bd:05:5b:8a:d8:28:2a:91:c0:92:82:7d:
                    8e:d3:0d:70:e9:9d:cf:ea:9d:9e:75:c1:1a:9d:db:
                    b9:60:64:b4:1c:60:cc:db:08:1a:ec:86:b0:f1:da:
                    5c:46:2a:8a:74:f2:ec:78:53:45:55:09:b5:0a:bb:
                    1b:7f:d2:e5:44:80:a8:29:bd:6e:e3:86:94:b4:57:
                    b1:7d:b0:44:99:98:48:82:1b:96:3a:3f:26:7e:d3:
                    11:d3:bd:19:1c:41:1f:de:5b:a3:d2:f6:b1:a7:39:
                    43:3f:ab:aa:23:e6:c2:85:81:94:57:0f:f6:7e:aa:
                    e8:54:0f:fc:f7:8b:bf:b2:b1:9c:ee:14:1e:d0:e0:
                    17:aa:13:11:ef:33:4b:6e:10:45:0e:07:8b:bb:18:
                    66:20:19:5e:ef:88:57:c4:06:5c:b2:e1:83:32:5f:
                    91:4d:a0:56:df:9d:f4:b9:14:6f:06:9e:e8:ae:9b:
                    f1:f8:eb:b8:f0:0a:85:ed:57:5a:8f:5b:55:96:d7:
                    68:71:47:c4:de:d8:81:b8:29:4b:e7:c5:68:2a:d6:
                    1e:f1:73:eb:78:cd:fb:1e:e5:14:9b:5a:e8:6f:a7:
                    43:83:50:98:56:14:32:33:64:3b:e8:a2:8e:53:66:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:76:1C:1F:1A:6C:B7:9B:A8:AA:12:FC:BF:F4:F0:7B:FB:CF:A7:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.168.0/22
                  187.60.128.0/20
                  189.89.208.0/20
                IPv6:
                  2804:200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28187

    Signature Algorithm: sha256WithRSAEncryption
         97:43:d4:7d:54:c0:ac:b0:4d:b9:9d:c7:4a:57:f0:05:6c:c5:
         df:7f:2d:4e:82:fd:de:7d:ac:68:3e:18:33:52:8c:9c:9d:12:
         7c:59:d6:99:19:e2:99:5e:af:81:87:09:f3:80:6f:6f:12:77:
         22:10:ae:0a:a7:f9:73:89:6e:d0:b5:08:57:6c:6d:c6:a1:95:
         5a:3c:74:a3:40:c3:c9:b7:6d:7e:98:2e:24:5b:8a:53:62:ae:
         78:a9:91:e4:6b:d0:11:44:c7:a6:71:bc:e1:be:20:fd:35:ef:
         4b:4f:9c:84:a3:d7:27:e9:90:6e:a8:fb:49:bf:bb:84:d9:3c:
         8d:24:a3:3f:93:df:21:72:38:7e:31:45:2c:4a:e0:9a:0b:e8:
         62:d0:5c:ca:b2:07:36:53:04:4b:8b:6a:97:75:98:98:be:36:
         11:3b:0a:6d:81:f5:d2:d4:d8:f0:2e:8a:cc:f1:21:5b:5d:b8:
         6e:9b:5c:ef:ab:67:f4:f5:aa:41:61:28:5b:51:1d:dc:9d:22:
         83:04:58:31:7e:ba:de:87:ea:34:f5:88:51:22:c7:2e:48:bf:
         66:bf:7f:72:91:a8:75:2b:03:59:1f:c3:9e:13:90:0f:d5:07:
         d8:93:0a:f8:7f:52:e1:9d:fc:6f:37:63:2a:4c:fc:95:7f:e9:
         b3:24:e7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org