Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/771EE25CE0914B1C3809E045F906D45F3616AA34.cer
File:                     771EE25CE0914B1C3809E045F906D45F3616AA34.cer (raw, json)
Hash identifier:          pR7IJ2VvyWt3cHn0ZKgRs7t+oCWFwAtoQ2geg8Jbnfk=
Subject key identifier:   77:1E:E2:5C:E0:91:4B:1C:38:09:E0:45:F9:06:D4:5F:36:16:AA:34
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01A665D7BD3EA05B77D3F4DBC6E279C85975A3C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/0/771EE25CE0914B1C3809E045F906D45F3616AA34.mft
caRepository:             rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Oct 2023 00:05:49 +0000
Certificate not after:    Thu 17 Oct 2024 00:10:49 +0000
Subordinate resources:    AS: 262394
                          IP: 138.118.76.0/22
                          IP: 168.121.228.0/22
                          IP: 168.197.192.0/22
                          IP: 177.125.152.0/21
                          IP: 177.129.88.0/21
                          IP: 2804:8cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a6:65:d7:bd:3e:a0:5b:77:d3:f4:db:c6:e2:79:c8:59:75:a3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 19 00:05:49 2023 GMT
            Not After : Oct 17 00:10:49 2024 GMT
        Subject: CN=771EE25CE0914B1C3809E045F906D45F3616AA34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:fd:14:92:fd:49:1e:00:64:e8:f1:48:bf:
                    11:8c:f1:0c:f0:52:47:e1:c0:ed:42:e4:7f:74:22:
                    1b:45:9c:e9:87:56:62:91:4f:4c:20:40:d0:e1:84:
                    95:96:e6:ef:bf:73:02:28:3e:cc:a9:c4:81:d4:49:
                    08:65:86:b7:be:45:93:16:6f:b2:32:58:59:95:85:
                    6b:cd:2b:22:c9:43:f0:61:41:7c:b1:ff:90:db:8f:
                    db:11:4f:ba:e9:c9:b3:77:24:cb:3c:50:21:08:e5:
                    a7:26:84:ce:cc:df:b4:62:1b:85:26:67:ff:73:b0:
                    18:e0:f5:fb:2d:25:ac:88:3b:89:80:42:47:71:2f:
                    a5:a9:cd:27:96:c8:d3:f4:7f:45:ce:46:da:37:d2:
                    b3:ca:4f:10:f5:9c:7b:42:b2:ae:55:2d:15:f0:5f:
                    c3:67:2b:de:dd:c7:40:a5:fc:ce:b4:4e:68:a1:38:
                    d0:94:e1:1f:b3:e2:74:a6:dc:5f:ae:72:19:37:b1:
                    96:dc:ae:78:e0:21:18:9a:ce:c6:95:0d:70:0a:66:
                    d0:76:0b:4a:85:e9:8e:7c:51:ca:b8:df:a3:12:b7:
                    c9:59:20:de:80:72:f5:76:03:79:8f:4e:e0:e9:61:
                    56:ed:78:eb:e6:e4:91:be:e6:47:13:82:89:9c:db:
                    4c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:1E:E2:5C:E0:91:4B:1C:38:09:E0:45:F9:06:D4:5F:36:16:AA:34
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/0/771EE25CE0914B1C3809E045F906D45F3616AA34.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.76.0/22
                  168.121.228.0/22
                  168.197.192.0/22
                  177.125.152.0/21
                  177.129.88.0/21
                IPv6:
                  2804:8cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262394

    Signature Algorithm: sha256WithRSAEncryption
         23:3d:ea:30:48:db:b5:0d:0a:ae:80:8a:de:e7:a7:b3:2d:94:
         5a:72:25:d4:53:3a:05:db:d8:a4:fd:c7:6b:c0:24:43:eb:df:
         6c:15:37:0c:3a:3a:d1:5c:b8:89:df:63:3c:bb:36:90:3a:1a:
         aa:34:0a:0b:95:15:61:b0:d5:67:e2:1c:da:6b:69:54:52:74:
         ce:cd:c2:84:f5:60:df:fd:ee:7e:b8:0d:07:01:9e:b5:91:84:
         3b:6f:7c:24:13:d8:6e:fe:cd:9b:47:ad:00:8e:0d:60:6f:7e:
         50:7b:66:2c:d4:f4:0e:6f:88:f7:fd:33:14:da:fc:d6:b3:75:
         9b:cc:20:4a:c4:21:eb:2b:0a:8c:43:30:14:dc:25:c0:19:4b:
         8f:01:b5:09:63:1b:8f:4b:78:60:b4:4b:fd:59:7c:f9:c4:08:
         15:95:5b:b6:fd:4d:7f:6e:9d:b8:b6:f4:a1:26:dc:bf:ae:7e:
         4e:72:db:58:0e:76:56:30:48:47:c6:4e:0f:cd:7b:55:20:94:
         c9:54:39:8d:be:68:2f:75:8c:9d:6b:71:e2:6f:8f:63:e2:eb:
         08:90:2f:e0:7e:dd:3f:ba:e4:0e:36:d9:c9:8b:b4:1d:fe:95:
         c7:76:50:d1:c4:09:e7:b3:b1:13:51:eb:b9:a9:1f:3c:5e:6e:
         85:16:5d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org