Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/377F801BEB5144AC2F372D71468128A44E8B48D6.cer
File:                     377F801BEB5144AC2F372D71468128A44E8B48D6.cer (raw, json)
Hash identifier:          q84ZLZqUPgsmbf49qXwaVTdv2QTYKh34cYKyccGfSc4=
Subject key identifier:   37:7F:80:1B:EB:51:44:AC:2F:37:2D:71:46:81:28:A4:4E:8B:48:D6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1FDCD077825B50DB9166CD9170B40961F5B1961A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/377F801BEB5144AC2F372D71468128A44E8B48D6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Feb 2023 17:56:48 +0000
Certificate not after:    Mon 12 Feb 2024 18:01:48 +0000
Subordinate resources:    AS: 268449
                          IP: 45.161.72.0/22
                          IP: 2804:5164::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:dc:d0:77:82:5b:50:db:91:66:cd:91:70:b4:09:61:f5:b1:96:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 17:56:48 2023 GMT
            Not After : Feb 12 18:01:48 2024 GMT
        Subject: CN=377F801BEB5144AC2F372D71468128A44E8B48D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:3e:a8:37:14:9a:25:33:4d:ed:21:81:6d:
                    d5:db:16:38:65:c8:e1:2f:bd:ba:2c:cd:75:b1:9f:
                    eb:ef:c4:d0:6a:6d:92:d0:29:fa:45:6f:a0:6c:32:
                    d5:b2:54:27:df:76:26:3a:ee:58:5f:30:1a:f7:49:
                    aa:45:3b:90:76:c2:ea:1c:0d:4f:ae:01:f8:c3:0d:
                    5e:cc:b7:b7:a1:a8:88:ad:6c:e6:d8:98:e1:34:de:
                    ce:e4:df:ff:53:bc:93:3d:ec:de:62:f3:57:15:d8:
                    e5:74:1a:6c:72:7b:3e:a2:e4:c4:82:17:31:42:96:
                    f7:ef:0f:a5:2e:86:28:20:ba:32:12:3c:7e:d9:6f:
                    f5:d0:2a:61:8f:38:62:42:0a:37:a5:9d:e7:4d:bf:
                    fe:55:71:9f:f6:80:2e:05:82:ae:21:ca:5e:cd:2f:
                    5b:2f:be:e4:f9:98:08:ba:f8:99:36:c1:91:dc:fd:
                    5d:f9:25:fd:c6:d7:94:40:8e:1a:e6:d4:6a:9a:5c:
                    c0:ce:e1:2f:25:73:ee:dc:f6:01:39:98:80:84:cf:
                    7c:6f:dc:3d:ed:94:1e:50:71:f2:df:46:49:c0:2c:
                    bd:c1:30:ec:ed:97:2a:e5:0c:e2:95:bb:13:7f:ab:
                    f5:f1:a6:a2:1e:fb:b6:e2:1a:f4:61:5f:06:85:60:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:7F:80:1B:EB:51:44:AC:2F:37:2D:71:46:81:28:A4:4E:8B:48:D6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/377F801BEB5144AC2F372D71468128A44E8B48D6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.72.0/22
                IPv6:
                  2804:5164::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268449

    Signature Algorithm: sha256WithRSAEncryption
         a4:72:99:4d:e0:32:1f:9e:0b:15:1b:76:38:bb:fa:60:f0:cf:
         2a:a7:11:92:13:3e:bd:67:b1:10:f8:bc:82:3a:e1:be:3b:24:
         79:60:20:a8:83:b0:a6:9b:bd:e9:3a:cc:21:53:e6:a4:d3:4e:
         1b:6b:bb:ef:dd:b1:92:b3:22:61:6b:3f:bb:64:99:67:76:1e:
         41:ae:9c:93:72:06:62:0b:bb:74:85:ed:54:66:46:55:5d:99:
         f0:3b:19:06:0e:90:e6:fe:93:24:f4:95:3b:b8:39:43:23:61:
         32:ca:f9:00:4d:58:e6:38:96:6d:d8:81:e1:1c:b3:fc:b7:24:
         05:dc:ab:d6:43:46:47:11:11:82:fc:b8:2f:bc:9a:28:a9:14:
         33:76:9c:d7:ce:9f:22:fa:bc:c2:23:9d:ed:7c:06:77:9f:6e:
         8f:c8:5d:6c:2b:4d:7e:af:80:62:f0:1d:bc:f0:46:a4:55:e6:
         17:a9:ed:28:43:59:dc:1a:4a:13:32:45:3f:1e:e6:b5:43:59:
         71:e8:5f:ec:81:c7:e3:20:d4:98:f2:86:df:13:dc:65:e8:e6:
         b6:76:46:ba:35:a2:78:4f:28:cf:db:2b:b0:90:4e:e7:2d:5f:
         21:38:f2:d9:4d:df:ab:5a:4a:74:f4:7d:41:74:18:ab:3c:fb:
         d6:34:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org