Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/43776BCC03A02AECDEDDF74F3558BD76D054B5EF.cer
File:                     43776BCC03A02AECDEDDF74F3558BD76D054B5EF.cer (raw, json)
Hash identifier:          RkRc1ohzMn+8JSDklquiEZLuNKLC66+MEUDqWhaR1QI=
Subject key identifier:   43:77:6B:CC:03:A0:2A:EC:DE:DD:F7:4F:35:58:BD:76:D0:54:B5:EF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32D0D5FBF6432AA825C19F971F0E81F5CDAD1D0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/43776BCC03A02AECDEDDF74F3558BD76D054B5EF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Oct 2023 17:41:46 +0000
Certificate not after:    Mon 30 Sep 2024 17:46:46 +0000
Subordinate resources:    AS: 267517
                          IP: 201.182.120.0/22
                          IP: 2804:42a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d0:d5:fb:f6:43:2a:a8:25:c1:9f:97:1f:0e:81:f5:cd:ad:1d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  2 17:41:46 2023 GMT
            Not After : Sep 30 17:46:46 2024 GMT
        Subject: CN=43776BCC03A02AECDEDDF74F3558BD76D054B5EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:08:90:49:ef:23:bb:8d:2d:d9:59:94:67:
                    e6:aa:38:1b:01:b8:f3:b9:5b:a1:04:33:d6:66:13:
                    79:ca:b3:5d:f9:83:0f:c1:35:7e:ac:bb:7d:b2:eb:
                    58:a3:d4:f1:71:90:62:58:ac:d7:c9:14:35:2b:c0:
                    df:89:61:c6:36:80:92:5b:43:22:4f:84:b0:36:7d:
                    ff:7f:66:a5:37:a0:07:0d:b7:73:38:d2:eb:c4:f5:
                    60:9e:02:77:28:6c:00:8f:c5:da:c2:57:a6:b5:79:
                    4e:e1:cf:79:f5:1c:c9:5c:7c:78:d9:74:4a:2a:cb:
                    ad:1e:dd:41:e7:c1:9c:3f:46:af:41:cd:eb:a8:53:
                    c4:36:72:6f:49:8c:7a:48:31:c4:55:01:95:ca:86:
                    c4:77:38:fe:34:61:01:41:69:06:1c:cc:e0:55:1e:
                    08:ee:94:40:f9:b7:8f:b3:3a:5c:8c:b1:db:d4:86:
                    77:19:85:1a:ba:a6:85:0f:7a:59:f8:de:02:a8:86:
                    26:bb:6c:3a:50:24:26:ae:63:0d:7c:95:3a:2b:77:
                    4e:8b:03:6e:71:49:b9:b0:58:75:92:e0:33:47:f0:
                    57:5c:dc:09:b2:05:c1:ee:a7:3c:70:5d:01:bb:94:
                    82:ea:15:58:96:5a:03:5d:72:ee:50:cc:99:d2:07:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:77:6B:CC:03:A0:2A:EC:DE:DD:F7:4F:35:58:BD:76:D0:54:B5:EF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/43776BCC03A02AECDEDDF74F3558BD76D054B5EF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.120.0/22
                IPv6:
                  2804:42a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267517

    Signature Algorithm: sha256WithRSAEncryption
         9b:68:ff:a1:f5:fd:b0:b4:40:2f:46:11:02:fe:89:94:22:60:
         f6:40:52:a0:6c:33:12:47:78:85:83:99:20:0d:2b:28:ff:24:
         46:54:0b:0a:b7:cd:72:52:ac:7c:da:c8:bd:9e:50:02:c1:dd:
         69:9a:20:ee:22:bd:1c:3d:ae:78:f7:7f:60:ee:4c:f7:12:a3:
         1e:67:31:b4:3d:15:a5:1c:25:94:95:a6:5e:01:2d:10:f3:8e:
         2f:8e:a0:85:f6:da:6e:52:46:e5:31:07:99:77:db:8d:0e:29:
         40:2f:a3:89:bc:70:bb:09:b6:b9:fd:4a:6d:91:a7:72:33:77:
         45:e7:ff:ad:8a:a8:2d:e9:5f:d6:3a:4f:32:7f:00:1d:ea:58:
         3f:b0:79:94:27:8b:61:d6:23:4d:45:b8:ec:2a:20:f7:c1:d6:
         15:83:7c:96:b0:dd:a8:6b:f7:34:ee:12:dd:0e:3e:43:8e:07:
         b7:d4:78:6b:22:fc:8d:1f:1d:48:e3:bd:5b:1b:3c:55:6b:e2:
         b3:e0:a7:ed:a3:fe:dd:d0:cd:82:26:f4:59:18:c0:a9:84:b5:
         e9:3c:41:c5:6e:6b:f0:e9:90:bc:66:1a:70:9e:4b:6e:c6:6b:
         e7:f8:bb:08:61:da:21:05:70:aa:45:03:54:31:5d:05:5a:f0:
         c8:d3:0a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org