Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/77A4CB39D6601A8BDC2BD28E7CB9106511C5B968.cer
File:                     77A4CB39D6601A8BDC2BD28E7CB9106511C5B968.cer (raw, json)
Hash identifier:          irH9oKc3HLUqeb1UysUx6nL+kt2MobUt3zBmWmmHbro=
Subject key identifier:   77:A4:CB:39:D6:60:1A:8B:DC:2B:D2:8E:7C:B9:10:65:11:C5:B9:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       468EF94D73D9B4E6E9C3ED949E26FAD839E10611
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/77A4CB39D6601A8BDC2BD28E7CB9106511C5B968.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Sep 2023 13:54:33 +0000
Certificate not after:    Tue 17 Sep 2024 13:59:33 +0000
Subordinate resources:    AS: 266207
                          IP: 170.80.36.0/22
                          IP: 216.98.208.0/22
                          IP: 2804:3c60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8e:f9:4d:73:d9:b4:e6:e9:c3:ed:94:9e:26:fa:d8:39:e1:06:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 19 13:54:33 2023 GMT
            Not After : Sep 17 13:59:33 2024 GMT
        Subject: CN=77A4CB39D6601A8BDC2BD28E7CB9106511C5B968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2e:7d:d8:18:85:66:db:eb:1c:71:aa:92:28:
                    d1:ea:10:f6:94:59:ca:21:5b:42:d5:2a:8f:84:70:
                    91:4b:90:04:0c:c5:05:8a:e6:63:f5:a6:05:c8:e9:
                    ad:38:fd:da:82:b5:c3:8a:1e:b6:52:c6:9a:a3:9d:
                    18:2d:31:d7:4c:02:5a:7a:eb:f6:42:55:08:ba:f6:
                    9e:35:1f:73:d9:e2:63:bc:83:5b:b7:94:71:d6:2c:
                    af:1d:c9:d3:ef:42:86:79:69:14:7f:3c:99:ce:8c:
                    19:66:57:61:78:8e:7a:26:ae:24:4b:48:00:2e:5e:
                    3f:b8:03:13:ed:f7:3e:b4:7e:74:34:15:1a:85:2a:
                    0c:ba:dc:de:58:55:a4:90:bd:f6:56:14:20:67:59:
                    4f:a5:b2:78:ad:23:c5:26:e7:7e:b2:6f:79:92:75:
                    4c:16:ae:47:d9:05:64:4f:a0:57:7d:a1:02:78:c0:
                    47:62:2c:5e:fb:43:ac:93:8c:d9:55:66:2a:b0:f4:
                    27:7f:31:e5:99:97:06:25:3b:e1:ca:73:87:66:52:
                    d4:97:6d:06:98:8c:d7:4f:76:e0:17:62:da:dd:b4:
                    0f:01:fc:5e:c4:57:ee:a2:ff:e7:df:37:c4:56:fd:
                    cb:fd:a8:3f:f5:33:03:6f:7f:4b:dc:5b:da:ee:27:
                    42:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:A4:CB:39:D6:60:1A:8B:DC:2B:D2:8E:7C:B9:10:65:11:C5:B9:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/77A4CB39D6601A8BDC2BD28E7CB9106511C5B968.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.36.0/22
                  216.98.208.0/22
                IPv6:
                  2804:3c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266207

    Signature Algorithm: sha256WithRSAEncryption
         8e:50:f8:db:90:66:73:56:31:c3:f1:b0:43:da:14:01:75:36:
         f3:c0:f4:39:98:8b:c0:27:d5:59:83:9a:3e:d0:e4:d1:63:91:
         44:94:10:95:9d:c2:3a:7f:ef:a0:aa:84:a4:3d:bf:21:0d:5b:
         f6:9a:3a:be:4b:dd:7e:76:f8:3b:3d:a4:a4:42:36:39:d8:1c:
         76:56:b6:a0:5c:0c:3a:75:a2:43:9b:bf:81:0d:02:7e:d0:2d:
         49:ea:e2:2f:4b:bd:27:98:6f:79:13:97:3b:0a:8a:c7:a7:4f:
         19:f6:0a:3a:28:5f:ac:55:52:4c:aa:d4:2d:63:82:33:6f:ab:
         cf:a1:40:00:58:3e:37:07:eb:84:eb:6d:71:6b:b8:d2:f5:43:
         34:36:f7:62:91:ac:8a:8f:dd:f2:bd:86:e6:2a:5f:99:85:9d:
         da:82:35:7a:72:d9:f7:bf:0c:f3:6a:83:ad:5f:bd:7f:41:14:
         f3:4a:b9:a6:30:70:3d:f4:bc:c2:80:57:07:a1:f5:44:97:f1:
         d9:64:e5:8a:4c:c8:15:df:fc:d7:32:4a:ba:36:a5:7c:03:1f:
         e6:57:50:ce:07:b8:1f:01:e7:8d:96:53:82:a4:c3:a6:ce:22:
         d3:d9:8a:87:31:24:21:13:66:6a:f2:d6:39:17:cd:6e:ef:2c:
         d6:7a:56:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org