Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/77B9ED95961E8C023E74FA5308D04686D4546BBF.cer
File:                     77B9ED95961E8C023E74FA5308D04686D4546BBF.cer (raw, json)
Hash identifier:          mm39WxhR7VzIsP2glbbgLSgvxoSnjgGOcXWAYLg5iVY=
Subject key identifier:   77:B9:ED:95:96:1E:8C:02:3E:74:FA:53:08:D0:46:86:D4:54:6B:BF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       48ABDFEEC76D0C5DAB0357E177461878490F0AC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0/77B9ED95961E8C023E74FA5308D04686D4546BBF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Oct 2023 12:24:40 +0000
Certificate not after:    Mon 30 Sep 2024 12:29:40 +0000
Subordinate resources:    AS: 266512
                          IP: 170.245.33.0/24
                          IP: 2801:80:1bd0::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ab:df:ee:c7:6d:0c:5d:ab:03:57:e1:77:46:18:78:49:0f:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  2 12:24:40 2023 GMT
            Not After : Sep 30 12:29:40 2024 GMT
        Subject: CN=77B9ED95961E8C023E74FA5308D04686D4546BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:e7:c7:59:83:48:53:96:8d:ce:2c:20:08:
                    d6:55:45:1c:5c:14:0a:8b:b1:33:cc:37:b3:b0:f9:
                    de:f7:77:a0:3c:0d:bc:f4:bc:88:62:a2:88:ba:ea:
                    40:ff:f3:c3:e0:06:e0:d2:b9:99:0c:e8:52:93:1c:
                    5a:4b:82:da:b3:3a:49:a4:7b:3c:0b:6d:fc:24:bf:
                    1a:25:e7:78:72:7d:fb:47:b5:ad:12:bf:f6:79:2d:
                    9e:f6:72:e8:ba:2b:b2:b3:98:d1:f6:fa:ce:18:00:
                    d7:4a:c0:ed:bd:14:df:4c:8d:3a:40:3c:a2:16:0e:
                    78:30:a2:cb:13:e4:19:9f:8d:44:fc:6b:60:a2:ed:
                    84:55:c6:60:7e:98:ad:1b:a1:9c:b9:4c:3f:94:51:
                    4d:65:7e:c9:b5:3a:cd:a8:b2:e6:ad:26:ca:49:55:
                    ed:1e:e1:d9:a3:05:1b:96:d0:87:c5:6a:42:c5:c5:
                    2b:c8:c9:43:ab:ad:a6:68:b3:e4:e9:01:6f:e1:1a:
                    ba:ff:95:7b:15:be:a5:5c:ec:f2:9c:25:5a:43:5a:
                    c3:ff:03:d8:12:e3:a5:be:88:19:8e:fe:9a:37:b4:
                    f5:49:cd:46:d8:d6:7e:06:fc:ff:64:5e:15:ea:a9:
                    15:0e:92:0a:fa:93:60:17:c2:93:b6:a5:68:96:e7:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:B9:ED:95:96:1E:8C:02:3E:74:FA:53:08:D0:46:86:D4:54:6B:BF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0/77B9ED95961E8C023E74FA5308D04686D4546BBF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.33.0/24
                IPv6:
                  2801:80:1bd0::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266512

    Signature Algorithm: sha256WithRSAEncryption
         5c:90:73:69:f4:08:43:04:14:4a:3a:f7:3f:c5:69:56:7a:12:
         63:ee:30:77:3c:07:2d:5e:fe:10:0d:6c:10:c5:bf:e1:2a:4c:
         c8:54:e5:d9:54:23:36:c6:a7:52:47:25:39:8d:21:5f:3f:ba:
         93:14:3d:b0:cb:2b:35:22:8f:2f:c9:b6:98:95:49:a0:74:ff:
         75:d4:e7:27:d3:62:67:43:a4:35:9c:35:d3:a5:45:2e:de:8f:
         4e:ba:1e:cf:b9:f5:e8:89:44:34:04:90:54:ce:d7:88:f8:fb:
         c6:52:c4:b0:d2:07:05:d7:5e:b0:05:20:c4:e3:d6:ec:22:52:
         9b:cf:fa:82:98:5b:4d:eb:bf:cc:69:d9:86:ff:3b:39:3c:05:
         08:30:29:fc:4e:e2:38:fb:69:79:d9:ee:0d:5c:f7:17:71:7c:
         23:ee:c2:e1:ba:19:83:0c:59:23:57:c6:68:26:19:dd:cd:15:
         c9:54:12:b8:9c:af:f4:5f:10:3a:28:cc:42:7f:22:b2:a8:0d:
         b4:19:20:a1:72:c2:fb:4e:05:04:cd:1c:fa:b2:09:44:c8:b5:
         64:de:eb:2a:e5:fe:24:d6:97:78:88:2d:93:b2:68:23:03:5b:
         da:3b:9a:3b:59:93:f9:35:70:04:a5:9d:01:c3:55:2a:a2:6a:
         50:74:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org