Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.cer
File:                     43A0CC77B7FDD53F8542952069B48C25D2B5F450.cer (raw, json)
Hash identifier:          ID2bAwOBMScuI9IWsIMyYhwafDmStZ+bbrOvKNGTqwA=
Subject key identifier:   43:A0:CC:77:B7:FD:D5:3F:85:42:95:20:69:B4:8C:25:D2:B5:F4:50
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       782D876846D7957151378D0DF79CAB329A62AFDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 12:55:18 +0000
Certificate not after:    Tue 28 May 2024 13:00:18 +0000
Subordinate resources:    AS: 271353
                          IP: 190.52.76.0 -- 190.52.78.255
                          IP: 2804:7a30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2d:87:68:46:d7:95:71:51:37:8d:0d:f7:9c:ab:32:9a:62:af:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 12:55:18 2023 GMT
            Not After : May 28 13:00:18 2024 GMT
        Subject: CN=43A0CC77B7FDD53F8542952069B48C25D2B5F450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:56:3f:5e:53:2c:3e:ea:9c:91:99:d6:7a:
                    ab:46:37:78:6d:7d:e0:07:2c:89:35:65:ba:31:38:
                    c8:2a:ff:84:58:fd:e3:18:12:1e:b1:f4:92:09:8c:
                    8b:8b:7a:6d:93:60:64:07:f0:cc:f1:e9:bd:b7:c8:
                    76:59:03:14:c5:91:0d:ce:81:19:c5:70:db:9e:e2:
                    9f:2a:54:32:a0:ee:2b:9f:87:f8:05:39:48:3c:e8:
                    3b:bf:28:53:c5:f0:a4:70:dd:4f:cb:44:37:89:5d:
                    cc:5c:a7:eb:ab:20:82:4b:d9:42:29:6e:78:dc:ef:
                    0d:bc:6d:67:70:c3:c5:33:28:ac:29:e0:4d:09:55:
                    e6:02:7f:17:9c:83:44:c8:c4:6e:d2:79:28:30:f6:
                    f4:4d:82:0c:e8:ec:a6:4d:5f:b3:82:57:62:c0:9c:
                    ed:b9:2b:16:3c:62:4b:67:ee:af:ad:eb:bf:6a:2a:
                    3f:1d:7a:7a:39:9f:6e:b0:94:a6:9d:e2:03:f8:e1:
                    60:06:6a:fc:f6:81:ff:fe:c0:c5:7b:e6:5f:b9:2c:
                    9c:77:76:11:17:cc:e1:28:85:1a:83:03:33:df:87:
                    06:28:e3:57:5d:63:76:dd:8d:ea:2c:14:a4:24:cc:
                    7f:10:9c:1b:ea:34:8e:a8:ae:73:ca:ac:c8:31:6f:
                    eb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:A0:CC:77:B7:FD:D5:3F:85:42:95:20:69:B4:8C:25:D2:B5:F4:50
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.76.0-190.52.78.255
                IPv6:
                  2804:7a30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271353

    Signature Algorithm: sha256WithRSAEncryption
         72:e3:88:5c:41:da:25:4c:7b:5e:cf:00:8e:89:65:ca:c8:ec:
         45:61:fb:4f:75:0f:30:a3:ae:f1:95:bb:e2:6f:1d:ad:34:91:
         d6:44:d3:52:0c:28:4d:e5:59:d1:66:a5:a7:b2:81:24:76:41:
         fa:0d:e9:78:57:94:05:bf:c0:66:65:7f:58:b7:cb:7e:6e:b6:
         ec:27:56:e2:1d:78:e0:59:23:b5:ec:f3:53:46:75:a7:56:d7:
         a2:1d:6b:92:0d:34:bc:2d:59:f4:3c:ad:ad:89:81:c8:df:bc:
         78:97:48:bd:17:84:fb:5a:d1:09:1c:42:fc:f3:91:9e:03:d6:
         69:3a:21:39:1c:7e:81:bd:b0:c2:36:b0:df:e5:93:92:71:50:
         b1:f1:c8:0e:95:30:5b:11:b2:46:80:18:44:52:02:1b:6b:31:
         d3:47:0c:2e:0c:f5:da:3e:0c:3b:48:ba:8f:c5:f8:be:d3:ea:
         3a:a0:76:8b:d6:3f:32:37:43:af:23:c1:3b:38:21:48:1b:b3:
         2b:d8:09:9d:d5:31:7a:d3:cd:e1:65:a1:4b:ed:b6:e0:39:66:
         64:a4:32:6d:95:d7:f2:06:d0:4e:37:dd:8e:f7:a5:37:8a:d6:
         62:ca:43:95:f4:fb:fc:ac:cf:d9:8c:0e:0a:1f:55:fe:95:c5:
         da:bb:79:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org