Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/772D2DA99452DDF39D69460E60393F2ADBA0CB21.cer
File:                     772D2DA99452DDF39D69460E60393F2ADBA0CB21.cer (raw, json)
Hash identifier:          1B9pU9MU06no94Ix3D1CsExSlIXiFCXkcW2TrDa0D/A=
Subject key identifier:   77:2D:2D:A9:94:52:DD:F3:9D:69:46:0E:60:39:3F:2A:DB:A0:CB:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D57039C6460C4D97375920E8061129F182A0AF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/0/772D2DA99452DDF39D69460E60393F2ADBA0CB21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 07 Apr 2024 02:50:21 +0000
Certificate not after:    Sun 06 Apr 2025 02:55:21 +0000
Subordinate resources:    AS: 266402
                          IP: 170.81.104.0/22
                          IP: 2804:374c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:57:03:9c:64:60:c4:d9:73:75:92:0e:80:61:12:9f:18:2a:0a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  7 02:50:21 2024 GMT
            Not After : Apr  6 02:55:21 2025 GMT
        Subject: CN=772D2DA99452DDF39D69460E60393F2ADBA0CB21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:34:ce:5e:2b:41:ac:60:8c:39:1c:e2:e7:
                    56:0d:f8:0a:65:01:77:a5:8a:6b:be:d1:64:79:df:
                    b9:aa:5a:03:f6:9d:8e:c7:0d:68:76:ae:4a:c5:03:
                    c1:86:0d:50:66:d0:27:57:8f:4e:fc:26:60:95:72:
                    7d:81:bc:1d:d7:c0:f5:33:2b:ba:15:e7:4d:94:4d:
                    ea:88:ea:4b:33:ee:5d:35:b1:89:f1:47:1b:e4:8b:
                    1c:92:18:ba:b2:60:63:e6:41:ae:d9:e5:69:79:a9:
                    e6:9f:1b:bc:7a:07:4d:1c:d5:b6:28:70:38:7a:fe:
                    a9:7a:9a:ea:07:43:f7:29:54:9f:4d:cc:be:a4:81:
                    6f:ec:98:55:fa:39:8c:11:80:93:f4:b8:5a:9a:7d:
                    83:60:28:cc:3c:6d:38:02:3d:a5:26:b6:cd:21:79:
                    10:7e:ca:62:28:a5:78:43:10:d2:69:d2:96:05:c7:
                    5a:ea:f6:ec:42:58:bf:ee:92:ff:46:5c:b4:6b:71:
                    d8:46:aa:c7:aa:42:d0:5e:19:f7:60:70:1e:00:2b:
                    78:b3:41:a1:50:60:b1:0a:90:cc:64:65:e4:9d:65:
                    dc:f0:0c:01:3d:9d:50:3d:eb:ae:d1:29:d5:c1:ae:
                    d6:9f:7f:5b:34:10:67:fd:5a:e2:dd:71:49:d8:fc:
                    c2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:2D:2D:A9:94:52:DD:F3:9D:69:46:0E:60:39:3F:2A:DB:A0:CB:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/0/772D2DA99452DDF39D69460E60393F2ADBA0CB21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.104.0/22
                IPv6:
                  2804:374c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266402

    Signature Algorithm: sha256WithRSAEncryption
         30:53:8e:82:b4:c1:7b:6f:bc:05:20:f8:74:5f:e7:27:5b:f3:
         b1:df:bd:2e:6e:b9:ce:f3:1d:11:62:4b:a7:b7:46:e0:cd:38:
         d4:d9:72:aa:98:41:6f:0b:63:d9:2e:b5:53:45:db:1c:9b:de:
         88:06:9d:e5:cc:df:7f:f3:fd:d0:96:86:10:ce:fe:ad:b0:61:
         65:45:d7:29:ce:9a:59:fc:69:3d:67:c3:8b:bc:8f:8c:0c:5d:
         f3:cc:34:4d:cb:c1:f3:eb:4d:9f:c3:e2:1f:f5:0b:30:77:36:
         42:f7:be:a0:4f:ae:67:05:3c:d5:db:25:17:fc:d1:07:f3:43:
         9e:c5:36:ad:ee:6c:a2:c8:73:16:dc:30:aa:c9:0f:80:c9:b3:
         75:7d:64:e3:53:e7:fa:4f:7d:48:16:43:0c:73:71:35:18:47:
         90:96:df:4b:a3:e1:85:f2:a7:b3:0a:a3:74:a9:22:71:bd:27:
         c1:82:43:ea:0a:c5:f6:7f:4e:36:6a:41:39:2a:d2:e9:91:96:
         91:d2:bb:56:c7:d2:ea:c7:80:32:9b:6a:59:f0:fa:e0:af:91:
         11:a1:02:a7:72:0a:56:61:e2:a8:fd:09:ac:7d:b3:67:58:a7:
         15:90:74:96:c2:6e:41:7d:26:39:84:92:a7:96:9f:d0:a2:65:
         e8:11:d4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org