Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/744C871E408F6C1C747A737D3AACACE3BFFA0A63.cer
File:                     744C871E408F6C1C747A737D3AACACE3BFFA0A63.cer (raw, json)
Hash identifier:          K0ichuOf/3rp7kfe0Co7Nwomj8lPPhs2EFpg2aQr/p4=
Subject key identifier:   74:4C:87:1E:40:8F:6C:1C:74:7A:73:7D:3A:AC:AC:E3:BF:FA:0A:63
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A56048899AFA0ABECF54E473AF7AFE27C7BBF54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/744C871E408F6C1C747A737D3AACACE3BFFA0A63.mft
caRepository:             rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Dec 2022 14:05:14 +0000
Certificate not after:    Tue 05 Dec 2023 14:10:14 +0000
Subordinate resources:    AS: 52748
                          IP: 177.137.248.0/21
                          IP: 177.155.64.0/20
                          IP: 2804:b30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:56:04:88:99:af:a0:ab:ec:f5:4e:47:3a:f7:af:e2:7c:7b:bf:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 14:05:14 2022 GMT
            Not After : Dec  5 14:10:14 2023 GMT
        Subject: CN=744C871E408F6C1C747A737D3AACACE3BFFA0A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:19:c4:c7:36:0d:7b:6d:12:e8:c6:d1:bb:cd:
                    4a:70:30:16:d9:cf:ff:e0:13:9a:42:81:4c:59:e5:
                    6c:d0:9c:8d:29:31:ae:f7:d1:e1:95:03:07:8e:08:
                    90:75:0b:a4:53:c6:c1:a8:a2:61:2e:fb:c9:36:18:
                    33:c8:34:e5:28:11:10:fe:04:17:fe:5d:94:0e:d1:
                    a2:a4:7d:38:7d:95:26:94:0a:c0:cb:27:d1:2e:fa:
                    67:38:0c:26:f1:f7:16:88:24:c8:74:b1:39:b8:e9:
                    9e:c8:b2:d7:26:25:1f:74:12:19:e6:64:65:c0:2d:
                    f4:9c:fb:7b:55:52:a3:56:75:4d:44:2c:a8:04:be:
                    31:18:c2:74:d9:8d:d5:62:78:71:b7:5e:90:ab:25:
                    4b:4a:c9:3c:5d:48:b5:2e:70:4f:e8:bb:dd:77:f6:
                    37:01:ab:6c:05:06:cd:67:dc:04:fd:c0:10:fd:b7:
                    66:77:24:59:8c:57:0d:c2:5d:39:90:99:7b:3b:d5:
                    ce:6b:96:5c:67:8a:40:c6:26:ad:3d:88:3e:64:4b:
                    8b:42:00:7e:9e:d2:e1:28:8c:ae:76:6a:81:f6:9f:
                    cb:a2:cf:a3:56:d0:7d:59:12:f2:9c:58:fe:0b:5d:
                    45:23:56:92:eb:20:f5:d3:bd:26:47:77:a5:73:9c:
                    b2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:4C:87:1E:40:8F:6C:1C:74:7A:73:7D:3A:AC:AC:E3:BF:FA:0A:63
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/744C871E408F6C1C747A737D3AACACE3BFFA0A63.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.248.0/21
                  177.155.64.0/20
                IPv6:
                  2804:b30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52748

    Signature Algorithm: sha256WithRSAEncryption
         ad:2a:15:f9:63:12:9b:fe:02:33:79:b3:3f:78:2b:d8:21:ee:
         bf:4b:88:07:d6:ab:8e:66:45:e0:04:ff:ea:03:92:2e:ce:5f:
         9a:65:b3:cd:94:59:0c:87:d8:d9:54:8d:29:f0:46:d4:6e:e5:
         d2:8a:72:f9:fd:01:95:6d:2b:60:d3:e2:8e:e6:a5:c4:75:bc:
         e2:d0:a1:d8:cb:3e:4a:f1:9d:e8:d3:21:00:90:f3:36:fe:65:
         9b:ed:7d:43:c4:7c:69:9a:76:34:63:66:5f:cc:1d:6a:7e:b3:
         de:b6:84:d9:bd:ad:15:cb:4f:21:10:40:ba:f9:08:ce:1b:e0:
         84:cf:f0:ff:01:b8:1f:ec:b8:61:b4:5f:f8:c4:b6:bb:33:26:
         07:e8:c6:d8:34:f7:64:6f:a7:bd:f8:a2:89:0d:f6:bf:87:5b:
         af:30:85:f5:14:17:03:44:2f:77:a7:f7:c1:78:8a:a1:79:29:
         dd:fc:02:d4:90:ff:fb:dc:d2:29:49:af:7f:ea:3b:46:1a:ed:
         4a:02:b7:13:dc:4e:cb:68:c2:e5:9d:ed:02:1d:f4:77:e5:ad:
         b2:a7:8f:a0:14:4a:82:09:f9:78:9b:38:03:c2:80:77:3b:30:
         d7:d2:34:77:5a:20:a1:ed:5d:2b:0d:4a:41:e8:33:c2:a4:72:
         84:2b:71:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org