Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/44A0A3F77E79040FEEC7F1822ADB061950301667.cer
File:                     44A0A3F77E79040FEEC7F1822ADB061950301667.cer (raw, json)
Hash identifier:          Z3k8bHaNwWPCbfuoGM5oi7i/29vWTXPEwVVag3XIamQ=
Subject key identifier:   44:A0:A3:F7:7E:79:04:0F:EE:C7:F1:82:2A:DB:06:19:50:30:16:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       28ECFF02BC718255FF2F2F2B7CB64ADA45C3A380
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/44A0A3F77E79040FEEC7F1822ADB061950301667.mft
caRepository:             rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 13:03:03 +0000
Certificate not after:    Tue 09 Apr 2024 13:08:03 +0000
Subordinate resources:    AS: 271155
                          IP: 177.87.248.0/23
                          IP: 2804:77a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ec:ff:02:bc:71:82:55:ff:2f:2f:2b:7c:b6:4a:da:45:c3:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 13:03:03 2023 GMT
            Not After : Apr  9 13:08:03 2024 GMT
        Subject: CN=44A0A3F77E79040FEEC7F1822ADB061950301667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:2e:c0:90:bf:9d:9e:e9:3a:e1:c8:53:9f:
                    5b:05:b7:ff:d5:a3:57:fd:b3:52:b4:0a:6c:f5:e0:
                    05:ad:4f:b1:d6:6a:dc:c4:e2:59:28:7c:d5:29:a0:
                    c2:63:7f:fb:b9:95:42:12:2d:fd:2a:b5:f8:9f:13:
                    58:f1:93:5c:71:1c:71:47:43:4a:bb:d5:e9:d0:45:
                    a5:29:49:b0:6a:04:c0:62:0e:bd:d4:21:2b:8b:8c:
                    58:02:c1:37:4a:e2:3c:04:82:62:36:11:8b:68:6d:
                    f3:08:47:68:8a:05:65:58:d4:6f:cc:3f:14:33:0e:
                    30:35:2f:03:c6:b7:f9:bc:98:35:fb:5b:0e:10:3f:
                    bf:6d:45:f5:55:09:6a:43:5e:0c:c5:fa:af:b2:71:
                    50:8a:69:b6:2e:a1:b8:fb:5c:cf:6d:ad:3e:64:31:
                    d6:30:41:56:c2:c9:4a:0d:90:a2:c3:13:93:a2:90:
                    23:4e:99:76:48:5f:82:14:9c:94:ee:dd:85:ab:52:
                    4e:d7:59:3b:7f:3d:87:b6:e2:e1:55:ef:1e:a0:55:
                    1b:29:3f:dc:b4:8a:e3:f6:44:c3:c7:89:87:73:1f:
                    c9:74:14:aa:bc:62:b6:7c:3d:f2:9d:32:78:1d:81:
                    9c:0b:7b:48:ee:01:f5:74:c1:4f:fe:85:59:10:ba:
                    a2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:A0:A3:F7:7E:79:04:0F:EE:C7:F1:82:2A:DB:06:19:50:30:16:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/44A0A3F77E79040FEEC7F1822ADB061950301667.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.248.0/23
                IPv6:
                  2804:77a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271155

    Signature Algorithm: sha256WithRSAEncryption
         2b:ba:e6:2f:b0:71:fd:f5:fa:c6:da:e6:22:0a:4a:8c:ec:8c:
         43:40:ef:24:c1:db:90:da:3f:e1:8a:1f:02:29:1a:e6:f1:53:
         ee:0a:0d:fe:52:58:bc:a4:11:5d:b9:b5:d1:7f:ea:6c:df:2b:
         fc:64:b6:1e:27:0c:80:2d:ec:b2:24:18:99:6d:7a:e8:61:51:
         13:c2:4e:51:5e:97:ea:ec:7f:7e:85:3d:2f:f2:8e:d6:6c:dc:
         a0:d2:51:98:70:b3:60:31:8c:4d:af:5c:13:dd:e9:d2:47:46:
         83:dc:35:85:95:f1:83:4f:ea:68:8a:27:73:29:5e:a5:2e:f4:
         7a:e0:77:e5:ca:5b:8d:8b:c1:16:16:9f:89:6b:a7:de:98:fd:
         34:7c:88:5a:07:a2:43:18:28:a3:97:e8:31:53:3d:96:54:04:
         65:e5:24:46:72:74:f9:d5:52:67:3c:3f:cc:6d:5e:a5:59:0a:
         2e:b1:7f:09:2a:12:7a:d5:a8:e3:e1:8e:1d:2b:5a:12:c7:37:
         9c:76:3f:cf:0c:cc:96:2b:6d:fb:55:02:34:f9:c2:1e:82:6a:
         5b:6f:63:21:b1:ca:e5:45:db:85:0d:e0:e9:9e:4c:b6:8d:76:
         c0:fa:d6:f4:6f:d8:71:78:3f:cf:46:c0:3e:c3:2e:3a:63:f7:
         45:57:b8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org