Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.cer
File:                     77947C88DBADADCA74224F342BBB9D3AE9B34D31.cer (raw, json)
Hash identifier:          vAuw0ZRh2+45kWWi4FRHRnjJIus/YjO4cQMwongQ+Rs=
Subject key identifier:   77:94:7C:88:DB:AD:AD:CA:74:22:4F:34:2B:BB:9D:3A:E9:B3:4D:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B05D19BA9108793181796F76ADC9A7A7B9DB8A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Sep 2023 15:22:21 +0000
Certificate not after:    Fri 27 Sep 2024 15:27:21 +0000
Subordinate resources:    AS: 265328
                          IP: 168.181.64.0/22
                          IP: 2804:2e28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:05:d1:9b:a9:10:87:93:18:17:96:f7:6a:dc:9a:7a:7b:9d:b8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 29 15:22:21 2023 GMT
            Not After : Sep 27 15:27:21 2024 GMT
        Subject: CN=77947C88DBADADCA74224F342BBB9D3AE9B34D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:aa:ee:c4:fd:4b:a7:07:0d:f5:03:2b:59:ec:
                    53:39:dc:75:04:e4:76:76:1c:dc:4a:b5:8e:3e:e0:
                    a9:da:46:6e:04:cb:db:4e:6c:65:7e:c7:d1:72:00:
                    78:09:c5:02:34:a0:60:3d:d3:78:19:76:0c:2a:17:
                    c9:a8:84:96:11:36:65:fd:06:9a:e4:11:15:48:6d:
                    99:67:d7:98:d2:d7:f7:02:32:b8:ce:ca:64:ab:03:
                    84:a2:15:74:30:8f:39:a2:1f:8e:3b:f9:4c:40:70:
                    9e:33:dd:4d:ef:e7:91:8f:b4:52:6f:1b:d4:d0:6c:
                    75:6c:12:52:90:ee:d0:24:bd:9a:00:0a:fe:ab:f8:
                    d0:32:9b:2e:3a:78:d3:c1:ec:21:7b:25:10:ff:59:
                    84:43:7b:5b:73:7c:ff:ed:ba:26:a5:6b:29:2e:dd:
                    13:ba:fd:79:c5:7c:f4:33:d8:bf:8e:ec:3d:c1:7c:
                    1c:83:7c:b0:45:15:b8:71:90:86:e2:68:62:86:5e:
                    ee:50:6a:be:d6:63:1f:77:b1:ea:de:51:4f:c8:2b:
                    18:a2:db:e6:4e:bb:cf:f6:43:47:04:b2:77:65:27:
                    9b:3c:54:69:ff:46:1f:57:18:3f:b4:3a:bc:f4:30:
                    e0:e5:87:d0:54:0d:a9:b0:c0:79:88:36:b0:d1:03:
                    65:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:94:7C:88:DB:AD:AD:CA:74:22:4F:34:2B:BB:9D:3A:E9:B3:4D:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.64.0/22
                IPv6:
                  2804:2e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265328

    Signature Algorithm: sha256WithRSAEncryption
         3d:25:82:e0:1a:ea:f0:d3:a8:a9:a2:3d:1b:df:a7:21:ad:3c:
         7d:2b:c4:67:58:91:4b:95:38:c0:e0:32:95:02:9c:02:8c:ee:
         b8:2a:11:4d:5a:9c:c6:e4:3a:87:e6:7c:d8:07:d6:67:5b:f4:
         9d:d8:97:ea:58:60:6d:5f:75:8c:fe:2e:1b:4a:c8:79:bb:0c:
         89:2b:87:93:50:c1:1f:8d:a1:16:66:b5:03:96:5f:27:d8:a9:
         df:bc:35:c3:67:78:17:76:b8:59:5d:33:28:7d:d7:30:ff:97:
         37:3c:59:af:bd:85:b5:9e:e7:f2:7e:f4:40:f6:7f:48:e3:ee:
         4c:9e:18:d0:d5:e2:8c:0d:a0:e0:97:2e:3a:97:78:44:03:5f:
         73:35:24:9e:c0:46:1e:07:cb:e7:31:19:1f:7c:e3:f2:31:f9:
         7d:a1:19:e5:13:a8:d4:b3:ac:46:11:ce:d7:b0:4b:f2:ba:8b:
         3b:98:cc:cd:7e:e7:15:89:64:b0:9c:6c:8e:58:39:dc:2e:b5:
         1f:36:22:75:b0:2d:a0:59:1c:da:b1:59:9c:a6:46:42:15:7c:
         d2:f9:ba:a2:35:7f:03:5f:b4:b3:16:91:8c:77:5b:b5:49:bb:
         58:d9:b4:09:46:2e:37:ab:20:cf:a4:39:24:eb:8c:59:e1:6f:
         4b:4a:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org