Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5D77E76260CCABED0891B4ABD8776DDDFCA1C24A.cer
File:                     5D77E76260CCABED0891B4ABD8776DDDFCA1C24A.cer (raw, json)
Hash identifier:          jpE/boNCUhygjj97s7qp8tn6oKfpD3XnV9gyBCp4Ofo=
Subject key identifier:   5D:77:E7:62:60:CC:AB:ED:08:91:B4:AB:D8:77:6D:DD:FC:A1:C2:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       13984AD9E1223C9477D7F56DD604654C0FD125C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/0/5D77E76260CCABED0891B4ABD8776DDDFCA1C24A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Oct 2023 16:15:12 +0000
Certificate not after:    Mon 14 Oct 2024 16:20:12 +0000
Subordinate resources:    AS: 267489
                          IP: 192.141.160.0/22
                          IP: 2804:4244::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:98:4a:d9:e1:22:3c:94:77:d7:f5:6d:d6:04:65:4c:0f:d1:25:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 16 16:15:12 2023 GMT
            Not After : Oct 14 16:20:12 2024 GMT
        Subject: CN=5D77E76260CCABED0891B4ABD8776DDDFCA1C24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:63:4e:88:a4:91:65:a0:f2:ec:00:02:a2:a6:
                    89:fd:15:cf:39:7e:2a:5f:0a:a0:07:04:4a:82:d1:
                    e9:f5:b4:13:dc:3e:d6:c2:24:15:ae:5b:5f:ea:b2:
                    aa:e2:e4:62:3c:d8:d8:91:61:65:3b:c0:43:9e:f9:
                    3c:8a:30:dd:d2:d2:ae:5b:2e:46:dc:b4:8b:0b:64:
                    ba:16:b3:16:f2:51:8e:41:b0:e7:5b:77:56:35:05:
                    74:ce:b1:b2:37:f6:d4:b3:76:54:11:59:57:d4:3c:
                    0a:e1:fd:70:65:3f:8d:6f:48:fb:e0:6a:8b:78:55:
                    bb:36:51:ba:43:a0:51:72:5d:61:f4:aa:38:ec:b9:
                    1d:32:e5:fc:2e:59:97:d5:f3:fc:37:9c:6b:98:c2:
                    84:fd:16:67:ae:e1:af:23:38:76:11:06:67:61:44:
                    b0:98:da:2b:3b:8c:35:90:4f:1b:ea:2d:14:b1:4d:
                    47:c9:8c:33:24:61:e3:66:1e:61:bd:9f:28:cc:66:
                    86:58:de:57:bd:74:19:06:83:6b:39:45:87:96:a8:
                    a2:89:17:8a:30:9f:a0:ed:23:52:4a:ad:80:1f:4a:
                    6c:13:57:26:c5:24:b3:fb:37:d3:92:70:a2:bd:6a:
                    41:93:a5:a2:15:e7:01:c5:91:a5:ba:84:f6:e0:e7:
                    5f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:77:E7:62:60:CC:AB:ED:08:91:B4:AB:D8:77:6D:DD:FC:A1:C2:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/0/5D77E76260CCABED0891B4ABD8776DDDFCA1C24A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.160.0/22
                IPv6:
                  2804:4244::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267489

    Signature Algorithm: sha256WithRSAEncryption
         47:79:1e:4c:3a:59:b4:01:07:4d:7f:bb:53:e8:b7:d1:ce:c1:
         62:83:2c:71:24:37:5f:59:3d:cc:c9:62:84:50:b4:d8:a8:68:
         c2:4d:54:74:d1:37:27:49:52:79:c9:03:74:f4:81:6f:33:30:
         c8:f2:ce:10:64:79:25:11:1c:d3:95:dd:76:f2:35:ca:e2:bb:
         d9:d9:4c:83:64:02:8b:e2:09:40:e7:0d:96:bd:91:31:7f:6c:
         ec:8c:0b:18:30:f7:f0:f1:29:a4:9b:79:b1:2c:d3:e6:14:aa:
         1c:14:14:34:78:9b:78:eb:2d:48:21:9f:4a:70:f4:55:54:da:
         78:08:a4:37:4b:59:76:52:c8:1a:34:bd:d7:08:cb:92:87:ea:
         cb:5b:e4:45:1a:09:52:0d:f0:fa:f8:db:e5:ab:f2:af:6d:08:
         a9:7c:fd:5f:97:c3:aa:d1:c1:b7:c4:cd:98:c7:15:d9:87:61:
         16:35:00:bf:1e:33:b4:60:28:fd:c9:43:d0:7c:79:66:96:e8:
         b6:5d:c0:f3:74:56:43:9f:c1:8e:db:bc:28:55:cc:01:38:39:
         28:4c:a2:d6:96:af:99:a9:c1:fd:1f:9d:2d:bf:33:36:ee:9c:
         9d:8a:f0:6c:53:61:90:86:64:83:7f:72:2c:77:de:89:4c:df:
         d5:c1:a3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org