Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/776410FE4FF1392B2F3571E75EAE3CE92208D632.cer
File:                     776410FE4FF1392B2F3571E75EAE3CE92208D632.cer (raw, json)
Hash identifier:          QckAue8B5HnctjJAmkklGj9uxTJFf0Ad3hRoLSKS8Rg=
Subject key identifier:   77:64:10:FE:4F:F1:39:2B:2F:35:71:E7:5E:AE:3C:E9:22:08:D6:32
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F00A2DCA99D5ED13783EDC9BAF7D4D54CE9E217
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/776410FE4FF1392B2F3571E75EAE3CE92208D632.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Mar 2024 18:58:51 +0000
Certificate not after:    Fri 14 Mar 2025 19:03:51 +0000
Subordinate resources:    AS: 270776
                          IP: 200.39.140.0/22
                          IP: 2804:713c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:00:a2:dc:a9:9d:5e:d1:37:83:ed:c9:ba:f7:d4:d5:4c:e9:e2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 15 18:58:51 2024 GMT
            Not After : Mar 14 19:03:51 2025 GMT
        Subject: CN=776410FE4FF1392B2F3571E75EAE3CE92208D632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:bc:09:1b:94:4d:61:51:c1:c1:dc:48:9e:
                    9d:3b:61:00:db:ba:ab:a3:be:69:b6:1a:9a:e4:34:
                    22:cf:0e:36:db:b5:ac:93:c1:f9:7b:89:80:50:f3:
                    c5:04:1d:ad:76:1f:a1:5f:6a:f4:a7:33:3b:2f:20:
                    bb:cf:77:ef:04:47:b0:f6:61:09:ad:86:23:a7:17:
                    dd:6b:4a:cf:c4:6d:4e:66:5f:e9:fd:6a:d0:d7:0e:
                    2f:46:91:f5:4d:ee:5a:ff:5a:d5:d8:79:b9:08:05:
                    a2:29:79:3e:a0:69:be:3f:db:29:32:c1:51:35:d6:
                    eb:18:62:29:e8:4a:1b:0d:c3:d9:ca:00:99:59:8b:
                    87:91:76:d2:de:f3:df:80:df:56:25:57:86:04:60:
                    8b:ed:df:04:3c:c7:e3:d8:e5:8e:91:f3:7e:12:fc:
                    55:37:bd:21:6d:27:ef:59:bb:00:1b:e2:7c:e0:25:
                    5b:a8:b0:cb:6d:5b:4a:7c:72:3a:18:74:40:41:ef:
                    62:a2:e9:e9:67:47:73:15:12:18:ce:64:ad:65:ae:
                    61:0d:6f:4d:b5:9f:b5:bf:9a:b3:44:8a:d0:05:c8:
                    0c:fa:13:ce:ef:76:d8:01:21:52:ee:90:12:4e:69:
                    07:a5:1b:f3:4e:be:2d:51:9d:1d:dd:d1:5a:84:25:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:64:10:FE:4F:F1:39:2B:2F:35:71:E7:5E:AE:3C:E9:22:08:D6:32
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/776410FE4FF1392B2F3571E75EAE3CE92208D632.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.140.0/22
                IPv6:
                  2804:713c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270776

    Signature Algorithm: sha256WithRSAEncryption
         a6:1e:d9:8c:53:f5:a0:73:f8:5a:5a:48:fd:a3:f6:80:a2:b8:
         53:2b:32:e2:7b:e8:21:77:0c:4d:53:56:a8:cc:be:1f:f9:e3:
         0f:78:87:a1:9a:d2:30:33:57:37:36:1b:42:56:13:80:14:7c:
         3b:36:0b:23:4a:9b:fb:6f:4e:8b:a7:23:07:81:6e:d8:57:68:
         93:55:6b:d5:1a:09:37:9f:b5:d3:af:57:da:73:86:fa:09:25:
         51:0c:a4:76:d4:a7:6c:f1:8c:26:48:38:22:e5:a0:7d:ac:09:
         a8:d6:db:24:b9:c6:3d:94:53:e1:d7:29:35:5c:a5:73:1d:2d:
         30:4a:43:92:fe:10:2f:54:e2:16:58:21:be:42:db:ad:df:eb:
         b4:ff:a0:ed:b7:68:20:4a:45:12:40:24:6b:98:98:23:ce:7a:
         5c:0e:e2:9f:05:44:f4:4c:0e:81:71:b2:87:39:05:96:60:9e:
         4d:1f:d9:f4:e8:0f:c9:1b:bd:b0:54:32:2d:65:06:f7:84:65:
         f4:41:41:4f:f3:59:b1:d8:e7:4c:16:bb:b6:63:7e:7c:04:d2:
         29:1c:49:ac:c8:a0:e4:28:ee:08:d1:97:01:f9:7f:2a:e6:f2:
         09:54:04:82:5c:2d:98:52:0b:b2:06:95:14:66:68:e1:49:13:
         77:f2:f4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org