Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/677D21939268558A590BDAF3CCF9128F3678673B.cer
File:                     677D21939268558A590BDAF3CCF9128F3678673B.cer (raw, json)
Hash identifier:          Z5GjtQdh50yURNWNaRbv0U5UNIy227J6jTfwNo60Z9E=
Subject key identifier:   67:7D:21:93:92:68:55:8A:59:0B:DA:F3:CC:F9:12:8F:36:78:67:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5CC0D2A60300AA3406003A9C53D629D4A4C60107
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/0/677D21939268558A590BDAF3CCF9128F3678673B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 17:48:19 +0000
Certificate not after:    Mon 16 Sep 2024 17:53:19 +0000
Subordinate resources:    AS: 263968
                          IP: 138.255.112.0/22
                          IP: 2804:288c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c0:d2:a6:03:00:aa:34:06:00:3a:9c:53:d6:29:d4:a4:c6:01:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 17:48:19 2023 GMT
            Not After : Sep 16 17:53:19 2024 GMT
        Subject: CN=677D21939268558A590BDAF3CCF9128F3678673B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:36:20:d1:cc:e9:c1:90:36:33:fa:78:40:1b:
                    7c:0a:00:41:e3:74:e8:42:a8:cf:5c:86:56:54:df:
                    96:15:6e:23:28:fe:c7:f5:9b:5c:1a:93:62:b8:58:
                    0f:49:c4:db:7d:83:bc:2a:ee:5f:dd:98:0a:a9:2e:
                    f5:c7:cc:f7:27:7b:7c:e2:58:25:e4:0f:ba:3a:79:
                    b9:6e:4e:e1:ce:54:c8:70:f5:e8:a8:08:31:6a:2b:
                    92:5f:32:e2:f0:68:16:28:f5:5f:e9:dc:b7:bc:2a:
                    69:70:95:7c:c8:7d:d4:04:25:02:bf:ed:ef:35:15:
                    b5:8b:b6:21:20:cd:51:8b:44:c8:81:f2:35:c5:4a:
                    09:e4:1b:ed:2a:64:84:f8:9f:79:43:85:f4:16:b3:
                    c0:18:58:b9:d6:fa:34:85:6b:ca:d1:f9:b6:c9:3c:
                    d6:41:b4:f4:c4:6b:38:c2:92:80:7f:41:86:24:16:
                    11:78:66:bb:53:ea:43:a1:db:5e:96:3c:af:23:97:
                    e2:1e:f5:1b:28:92:f8:8e:5d:67:10:17:36:cf:4d:
                    52:27:d7:00:8e:85:03:a5:d0:ff:2b:a4:89:ab:0b:
                    ae:5b:19:b0:46:d3:2e:20:a3:28:b2:05:49:10:f6:
                    74:f7:92:2f:bc:83:00:6c:54:7d:ec:61:66:d6:1f:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:7D:21:93:92:68:55:8A:59:0B:DA:F3:CC:F9:12:8F:36:78:67:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/0/677D21939268558A590BDAF3CCF9128F3678673B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.112.0/22
                IPv6:
                  2804:288c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263968

    Signature Algorithm: sha256WithRSAEncryption
         93:b4:55:50:cf:38:58:bf:4a:d0:d7:3c:3f:53:72:3e:15:70:
         70:5c:60:34:33:bf:2e:24:3d:13:33:71:13:c0:8a:02:d8:a9:
         61:14:cb:a1:f9:11:91:9a:d3:c5:57:61:1e:87:69:45:48:3e:
         c1:29:f4:ad:59:98:d7:50:f1:82:c0:fe:5e:ba:c8:ac:4d:45:
         42:11:e4:f2:19:17:88:c2:80:66:a6:a0:c5:b6:91:04:a1:f8:
         51:e1:0e:94:3d:b1:b6:92:c8:cd:9f:49:b0:b4:6e:02:da:4f:
         1d:64:0b:fe:79:9a:86:84:f2:a6:2b:e5:69:a9:9e:10:b4:a3:
         f4:bb:bd:14:96:c8:98:78:78:0b:5d:62:b4:aa:66:71:66:2f:
         3d:3e:39:be:f4:aa:43:c3:52:ac:ab:2a:4a:4c:87:de:43:b2:
         76:41:1f:c4:3a:8d:37:14:b6:a2:d1:33:e7:08:ce:61:6c:60:
         bc:da:5c:b4:eb:58:55:f7:b8:6e:51:5f:8e:41:9a:1d:25:9d:
         db:cc:15:c6:14:c9:e0:06:5c:2c:02:3f:38:9e:ce:e7:4d:bc:
         84:32:12:67:30:0f:4b:05:49:b1:09:8d:50:ed:57:ba:48:46:
         b8:e9:fe:a3:0c:22:09:77:ba:4c:8b:ca:8e:09:1d:08:86:43:
         4d:23:e0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org