Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.cer
File:                     477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.cer (raw, json)
Hash identifier:          ifZKEbRUpE3FfTsdHQOKTDf3kTuGKrPC/iza5uocs2s=
Subject key identifier:   47:7B:4C:60:DF:33:1F:B1:CD:2F:F1:CF:32:73:E9:24:3B:2F:A9:50
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A16413DB06468C74EEEB9E83D1713B7FBD322CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F7sX888sWMqu6A79ZZYZJDaU8XvdCWdGFPA6seHFNNnm/0/477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F7sX888sWMqu6A79ZZYZJDaU8XvdCWdGFPA6seHFNNnm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Feb 2022 19:29:15 +0000
Certificate not after:    Mon 20 Feb 2023 19:34:15 +0000
Subordinate resources:    AS: 266428
                          IP: 170.81.152.0/22
                          IP: 2804:37a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:16:41:3d:b0:64:68:c7:4e:ee:b9:e8:3d:17:13:b7:fb:d3:22:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 19:29:15 2022 GMT
            Not After : Feb 20 19:34:15 2023 GMT
        Subject: CN=477B4C60DF331FB1CD2FF1CF3273E9243B2FA950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:d2:d4:6a:51:f0:c6:27:b3:ac:d3:bd:af:
                    d2:a8:1a:49:fe:e1:24:bd:fe:6f:4c:fe:8a:3e:8c:
                    d6:63:8b:1f:16:ae:fd:59:5f:d6:6b:98:72:7d:f0:
                    18:8a:3d:c6:36:4b:54:77:99:9c:28:f3:3c:ec:b8:
                    44:fc:80:eb:3e:45:52:c6:3d:ad:5b:ee:dd:8d:5e:
                    fd:0c:d4:18:a3:c4:30:06:bb:10:cd:d3:e8:be:b3:
                    fa:a7:7d:cc:d7:4a:d8:39:15:9a:53:70:a3:71:34:
                    40:1f:71:6b:3d:7d:25:92:19:39:13:89:bf:ba:3d:
                    36:37:a6:ac:70:23:fe:59:95:ca:29:29:3b:45:9c:
                    9c:9e:9d:a0:0e:6d:fa:7a:7b:f0:f7:57:62:20:e8:
                    a0:8d:d6:e4:d0:34:a5:36:0c:81:de:1a:69:73:47:
                    b8:ac:d5:79:a2:55:c7:38:fe:a6:a3:4a:fb:e8:7d:
                    07:a9:e8:96:57:e0:2d:08:de:4d:76:e6:85:68:59:
                    ab:ee:b5:79:ed:fb:a1:d9:71:2e:72:6a:0a:0d:e6:
                    73:24:c1:22:03:03:a8:cc:cb:f5:22:85:81:01:1c:
                    42:fe:76:94:52:4b:76:17:1a:ad:52:da:1d:ec:b5:
                    e8:2c:8b:cb:b1:a8:b8:6a:9e:b9:c5:15:31:c3:b3:
                    b5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:7B:4C:60:DF:33:1F:B1:CD:2F:F1:CF:32:73:E9:24:3B:2F:A9:50
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7sX888sWMqu6A79ZZYZJDaU8XvdCWdGFPA6seHFNNnm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7sX888sWMqu6A79ZZYZJDaU8XvdCWdGFPA6seHFNNnm/0/477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.152.0/22
                IPv6:
                  2804:37a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266428

    Signature Algorithm: sha256WithRSAEncryption
         13:5c:09:70:02:91:bd:0a:b7:41:41:32:da:6a:cb:80:36:c4:
         3d:87:f4:0a:15:8c:2b:c8:64:be:c9:e9:b3:9e:d3:10:4c:3a:
         5e:ee:ef:55:be:31:e9:c5:7f:05:1b:aa:66:d7:df:d9:31:ed:
         81:73:80:73:b1:26:82:09:4e:dd:5f:16:03:35:af:0e:67:0d:
         10:ca:68:f0:40:4b:9f:e4:3a:76:42:f3:3b:a2:be:d9:3e:68:
         26:22:f6:2a:17:e4:2d:3a:78:20:84:ba:ca:25:24:e5:15:68:
         ff:0c:0e:1a:86:36:8d:e3:ed:0a:cb:5c:ea:86:b7:a5:72:58:
         98:0c:d5:b5:dd:43:0b:f8:13:de:77:d2:16:00:72:cf:88:6c:
         f9:40:ef:c1:b8:62:f0:fc:13:74:d0:c1:fc:90:f3:2f:af:f6:
         26:de:55:47:14:d2:7f:7c:05:36:d7:62:40:73:7e:bd:2a:b8:
         62:1d:63:1a:6a:7f:3c:95:05:e5:7f:cc:4e:a5:6b:7f:72:d0:
         1e:fa:1a:26:8d:1d:b2:da:e7:5c:ff:5d:14:71:d4:a2:e8:91:
         6e:c9:97:1e:0a:37:a8:97:0f:90:8f:a5:31:74:36:2c:09:46:
         5c:f0:7e:6c:df:fb:b5:62:b1:4e:c2:09:05:98:1d:63:d0:fe:
         26:56:b2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org