Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/77221E37456D3A3771F725418DF86A07924D70B8.cer
File:                     77221E37456D3A3771F725418DF86A07924D70B8.cer (raw, json)
Hash identifier:          4ElNeW/Hm/Z394iqauyJyp1Zbas3xyrOmJcwp066SC0=
Subject key identifier:   77:22:1E:37:45:6D:3A:37:71:F7:25:41:8D:F8:6A:07:92:4D:70:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4BAB03AFBDCA4317896FF7CA1D03C80EA92D7513
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/0/77221E37456D3A3771F725418DF86A07924D70B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:30 +0000
Certificate not after:    Tue 21 May 2024 09:25:30 +0000
Subordinate resources:    AS: 268683
                          IP: 45.165.164.0/22
                          IP: 2804:5500::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ab:03:af:bd:ca:43:17:89:6f:f7:ca:1d:03:c8:0e:a9:2d:75:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:30 2023 GMT
            Not After : May 21 09:25:30 2024 GMT
        Subject: CN=77221E37456D3A3771F725418DF86A07924D70B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:f0:14:e9:3f:4b:7e:f5:b6:52:9c:b7:e3:
                    de:fa:52:e5:9d:78:72:4c:86:aa:d2:e6:f4:19:02:
                    ce:77:fc:9c:d8:85:8e:47:d4:ee:44:73:62:be:b0:
                    6d:d0:8b:44:7c:0f:ff:49:5f:14:31:a8:c8:2d:92:
                    a6:d5:28:fd:13:dd:f6:9e:19:d4:c2:75:0a:c1:55:
                    a2:f6:f1:0b:22:f8:e7:c2:f1:35:82:37:32:dd:cf:
                    ce:c8:f0:6a:e6:92:0e:c7:a8:22:b8:05:79:24:9d:
                    f8:ee:a8:a8:85:93:a3:78:97:d6:86:0d:a5:24:ec:
                    ee:d0:a9:15:50:ce:51:69:e0:94:b5:e9:3b:ab:f1:
                    4d:dc:5a:d2:45:5b:3a:32:21:48:ec:ee:9d:fc:bd:
                    ad:b2:37:c3:da:89:59:f7:48:85:11:d9:e9:ce:d4:
                    b0:cd:32:55:04:d6:0c:36:be:f9:71:0d:38:e2:70:
                    5e:37:20:96:ba:a5:f2:1d:b2:8b:08:44:d3:f6:b5:
                    5d:fb:31:61:e2:db:2a:12:30:83:f4:c6:18:4d:2d:
                    18:11:9c:42:68:79:b4:12:5b:76:93:45:60:50:1a:
                    cd:01:24:57:52:30:b1:72:a1:26:10:16:db:59:ed:
                    95:6c:64:d7:8d:4a:04:1d:91:4a:d3:7d:cc:9d:a9:
                    e2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:22:1E:37:45:6D:3A:37:71:F7:25:41:8D:F8:6A:07:92:4D:70:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/0/77221E37456D3A3771F725418DF86A07924D70B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.164.0/22
                IPv6:
                  2804:5500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268683

    Signature Algorithm: sha256WithRSAEncryption
         28:07:2c:c4:ad:26:10:9f:58:27:be:32:7e:e8:f9:a3:09:b9:
         0d:d5:b4:b9:1d:9a:19:ad:09:0c:7b:fa:42:d3:b9:a5:42:27:
         90:f3:7d:bb:e4:0e:6e:41:d6:9a:85:17:92:c2:58:56:5e:38:
         af:42:a7:82:de:9c:ba:52:93:fc:62:d7:ce:fd:d9:78:e8:74:
         ab:17:ac:f8:61:ad:1b:0f:b7:22:83:50:9a:71:d5:e2:98:a4:
         3c:5d:a3:00:60:26:55:48:78:4f:91:e6:ac:08:bd:85:ad:3a:
         61:ce:1f:df:66:d8:f7:2d:1e:80:d5:e5:87:bf:0d:ca:43:e8:
         87:a6:03:ec:6f:3e:80:23:42:a6:a2:79:bb:e8:c6:ca:3a:fa:
         d1:96:8b:cd:59:58:dc:ee:b7:21:60:83:12:04:d2:f7:28:02:
         f6:74:8a:a9:2f:b2:86:52:99:f0:6e:06:06:5a:a7:7a:7b:f6:
         c2:63:76:db:00:9c:40:7f:a7:9c:c3:63:07:94:1d:38:d3:16:
         5a:a9:0d:f5:f4:70:15:8d:ec:b4:8c:98:ae:9d:a0:39:22:7b:
         90:a4:07:9e:0a:dc:f6:ca:81:c4:5d:93:3f:6a:91:9f:4c:ff:
         05:91:d3:30:a2:c6:be:36:2a:db:49:d5:07:4e:5a:f7:9a:90:
         17:d8:bc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org