Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/77AE68B099E747C3E2C0BC971CDBDAEAE2E9E9AE.cer
File:                     77AE68B099E747C3E2C0BC971CDBDAEAE2E9E9AE.cer (raw, json)
Hash identifier:          q0wRZgB9uoini5hdqOKibqQBxdGDgwyWWVBWeYa1SyU=
Subject key identifier:   77:AE:68:B0:99:E7:47:C3:E2:C0:BC:97:1C:DB:DA:EA:E2:E9:E9:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0BB58C416371FAF710AA440654C157DCFAA9BA3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/77AE68B099E747C3E2C0BC971CDBDAEAE2E9E9AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Dec 2021 16:57:28 +0000
Certificate not after:    Tue 13 Dec 2022 17:02:28 +0000
Subordinate resources:    AS: 264126
                          IP: 138.59.200.0/22
                          IP: 2804:22d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b5:8c:41:63:71:fa:f7:10:aa:44:06:54:c1:57:dc:fa:a9:ba:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 16:57:28 2021 GMT
            Not After : Dec 13 17:02:28 2022 GMT
        Subject: CN=77AE68B099E747C3E2C0BC971CDBDAEAE2E9E9AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e6:ba:08:c8:6c:d2:e3:0c:60:b7:37:ee:5f:
                    c9:30:6a:62:66:96:f3:74:76:66:3c:32:2a:ee:d8:
                    a5:95:99:d3:cb:23:9c:be:cb:df:ae:57:e6:4b:0f:
                    66:62:fe:90:a5:ff:78:c0:04:a7:74:9b:53:26:6a:
                    e8:fd:bd:9f:14:79:5e:c4:82:85:1b:63:ac:3b:0a:
                    84:cf:0c:47:91:87:8d:6d:e7:d3:4d:48:15:cb:d2:
                    c8:c6:fc:29:e4:d5:3e:5d:87:5f:8d:d4:06:ec:12:
                    af:a9:20:fe:6b:29:1d:1d:26:a7:c7:c5:d4:09:80:
                    4e:0b:0d:b2:b6:48:85:d2:b8:97:1f:b8:cd:a2:5b:
                    18:4b:a1:63:49:10:51:86:e6:36:e3:22:72:4e:57:
                    62:71:34:72:63:7c:a5:c1:a7:d2:ac:8d:a4:03:ad:
                    a3:48:f2:fe:52:df:16:92:c0:9b:c5:b8:9a:33:df:
                    b2:08:66:a0:e2:90:a6:2c:52:1b:61:57:4f:3d:a9:
                    44:b8:bd:d9:8e:c2:5a:66:1f:1d:1b:75:90:1d:4c:
                    eb:3e:8e:52:59:f9:b3:36:fa:b1:4e:5d:1a:30:4a:
                    11:fb:ae:e7:ac:24:6e:38:99:03:dd:9e:a0:56:50:
                    b8:d6:bb:7b:89:0d:d8:f4:05:52:d4:7c:0f:8c:d0:
                    4c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:AE:68:B0:99:E7:47:C3:E2:C0:BC:97:1C:DB:DA:EA:E2:E9:E9:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/77AE68B099E747C3E2C0BC971CDBDAEAE2E9E9AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.200.0/22
                IPv6:
                  2804:22d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264126

    Signature Algorithm: sha256WithRSAEncryption
         26:6b:fd:65:40:dc:0b:08:c0:52:f2:6c:aa:52:d4:c6:6f:d4:
         89:ae:4a:ff:83:e9:51:8e:9e:57:02:56:08:ba:94:a7:91:95:
         c1:aa:35:4e:8d:16:cd:a4:49:98:f4:14:fe:fe:94:f9:71:70:
         2b:5a:4e:62:91:ff:29:f1:48:64:e1:dd:e9:49:9f:30:5a:b2:
         ec:a2:b4:16:bb:ee:f1:7d:81:aa:a5:36:b7:73:89:d2:a6:78:
         12:e4:b8:14:c5:01:98:f4:2f:1a:ef:78:9b:e0:72:36:02:db:
         f3:19:44:a8:0a:a9:50:30:ef:26:24:23:d9:f8:db:cb:6b:7c:
         c2:14:47:43:a6:b0:87:9f:e8:9d:bf:d4:65:22:76:be:a7:3b:
         05:9b:61:92:0e:88:a3:11:19:59:23:99:3e:32:3b:b0:1c:36:
         da:24:2f:fe:f4:76:72:61:93:c6:11:bd:1a:26:2e:cf:82:01:
         5b:83:72:c6:32:4d:0e:75:75:50:bd:15:c8:42:14:29:66:9c:
         da:8b:0b:07:03:fd:90:01:ba:57:b7:ae:91:9c:25:d1:d3:38:
         2d:f0:fd:db:e7:38:82:b6:de:8a:47:1c:ea:b1:67:f9:d0:f8:
         f5:cd:96:bd:82:ca:45:fe:ee:fd:d7:4a:48:98:65:02:1c:6a:
         fa:f3:dd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org