Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/76E9BD0DD7027668B8B47535B502BF5B007BC805.cer
File:                     76E9BD0DD7027668B8B47535B502BF5B007BC805.cer (raw, json)
Hash identifier:          X9Jm+8NG5slxVsB3waSonsKA190iGMUrQNchNspAUd8=
Subject key identifier:   76:E9:BD:0D:D7:02:76:68:B8:B4:75:35:B5:02:BF:5B:00:7B:C8:05
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4EDAAF9B14C61D74E6EF23C5BA85788CA5943CA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/1/76E9BD0DD7027668B8B47535B502BF5B007BC805.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:26:30 +0000
Certificate not after:    Wed 02 Apr 2025 19:31:30 +0000
Subordinate resources:    AS: 263278
                          IP: 186.227.124.0/22
                          IP: 2804:1648::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:da:af:9b:14:c6:1d:74:e6:ef:23:c5:ba:85:78:8c:a5:94:3c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 19:26:30 2024 GMT
            Not After : Apr  2 19:31:30 2025 GMT
        Subject: CN=76E9BD0DD7027668B8B47535B502BF5B007BC805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:4c:5d:7e:27:48:45:bc:55:63:dd:f8:3a:
                    a2:d3:30:4c:d1:d4:b2:5f:07:da:1e:e2:99:77:e8:
                    4e:12:f6:26:24:c5:e5:93:6d:5a:1a:82:fa:de:eb:
                    58:85:0b:93:99:b1:63:93:49:7f:36:d7:6d:53:c9:
                    ec:03:1c:bd:6f:97:90:ec:bf:1b:b2:63:57:d2:1b:
                    f5:f7:cf:0b:b5:0a:5c:74:d2:f3:42:b4:81:db:d9:
                    fd:cd:3b:9a:81:11:43:ea:c8:7a:e0:85:65:39:ed:
                    47:f0:a2:bb:cf:c8:66:ee:66:0d:5f:dc:29:01:04:
                    a1:17:5d:30:1d:03:89:bb:bc:9c:c7:33:c3:d8:21:
                    2a:21:81:c3:2f:71:97:48:47:6a:8e:8b:c5:24:ac:
                    8c:95:77:d9:93:da:65:a2:dc:5e:2e:80:58:c6:39:
                    cf:0f:e8:42:6f:69:d7:22:61:2f:be:f7:ce:77:cd:
                    09:1f:93:24:20:3b:9c:08:44:30:74:3d:8a:0d:aa:
                    6f:e2:5c:16:ad:2a:e8:63:fc:87:64:bc:89:9c:6a:
                    de:58:dc:2c:9c:6b:8a:07:c8:d0:16:61:c5:7f:82:
                    86:f7:85:d1:c2:e5:fa:bf:fc:c2:3e:ba:ee:d5:01:
                    de:0d:cb:42:66:68:1f:d9:30:c3:58:03:5e:ac:fa:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:E9:BD:0D:D7:02:76:68:B8:B4:75:35:B5:02:BF:5B:00:7B:C8:05
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/1/76E9BD0DD7027668B8B47535B502BF5B007BC805.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.124.0/22
                IPv6:
                  2804:1648::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263278

    Signature Algorithm: sha256WithRSAEncryption
         78:28:ec:29:a8:fd:28:f3:1f:3e:da:42:b5:4d:f8:a4:3d:fc:
         53:23:33:12:05:1e:e0:33:c1:eb:11:ee:72:9a:80:ee:ab:47:
         50:c0:87:17:c2:f4:ca:eb:91:a0:d4:31:da:50:c4:26:3e:af:
         10:9f:44:1f:de:9f:13:6e:41:16:fb:c2:5b:b6:23:b3:c4:ba:
         ce:92:4c:f6:14:7f:77:59:02:f2:de:85:d6:e8:ee:84:48:08:
         e4:19:92:da:34:99:05:f9:c9:c3:a8:0a:3a:21:4e:88:d7:9a:
         79:25:be:ac:c3:72:c9:c8:f6:26:7f:d3:a0:e3:6e:92:c7:8c:
         6b:7e:d4:ba:bf:1b:3f:68:d5:64:17:68:1e:c6:f8:ad:be:a3:
         f4:b5:a7:33:3c:09:b5:d3:b9:83:8b:13:b3:ee:c9:bb:65:1d:
         9e:8a:45:46:de:e4:94:89:37:77:32:a0:e3:bb:a2:dd:f3:91:
         27:3f:fc:63:17:37:2c:d8:31:da:80:98:98:02:14:d9:3d:6c:
         35:ef:4b:c2:1b:21:6c:25:61:47:be:31:0e:52:03:69:72:b5:
         52:20:f5:cb:25:e0:18:8f:84:45:c8:e1:85:9a:30:60:79:9f:
         8f:1d:61:20:86:ae:8b:79:9f:75:ff:99:9a:56:af:67:b2:92:
         ac:b7:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org