Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/77C5F5A6B86894507D22C6DCD7FF91940FBD4052.cer
File:                     77C5F5A6B86894507D22C6DCD7FF91940FBD4052.cer (raw, json)
Hash identifier:          Q9xF6yejleBjaZksDlKatu0CNJCbly7MupmU+FtKcoc=
Subject key identifier:   77:C5:F5:A6:B8:68:94:50:7D:22:C6:DC:D7:FF:91:94:0F:BD:40:52
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2FFA81290A163387FD2372D7F5B343AE6AAB4A7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/0/77C5F5A6B86894507D22C6DCD7FF91940FBD4052.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 12 Nov 2023 15:28:00 +0000
Certificate not after:    Sun 10 Nov 2024 15:33:00 +0000
Subordinate resources:    AS: 53180
                          IP: 186.226.160.0/20
                          IP: 2804:2ab8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fa:81:29:0a:16:33:87:fd:23:72:d7:f5:b3:43:ae:6a:ab:4a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 12 15:28:00 2023 GMT
            Not After : Nov 10 15:33:00 2024 GMT
        Subject: CN=77C5F5A6B86894507D22C6DCD7FF91940FBD4052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:a3:f8:b5:57:3d:4a:8f:15:9b:ed:31:13:
                    66:b5:ae:4d:8c:c1:dd:38:5e:2e:50:1c:b8:fe:07:
                    c2:7b:e8:70:22:50:05:7d:1f:ae:d1:c1:40:10:db:
                    42:ab:63:7d:cc:6a:92:79:13:fe:d6:ae:df:43:ac:
                    c5:00:bd:05:d1:9e:5f:02:b8:00:38:b5:2c:3d:11:
                    6d:3f:ed:21:ee:b4:b4:40:92:36:22:e6:e8:bd:81:
                    6d:49:29:32:43:5d:31:12:49:ce:ed:90:69:5c:8c:
                    a7:bb:31:8d:f5:b9:eb:39:39:50:31:ff:b9:8d:26:
                    52:32:0a:97:e9:16:9e:80:0f:49:bb:5e:66:b9:18:
                    19:a9:e4:6f:54:33:17:a1:08:b6:fb:4a:b3:2c:57:
                    3c:78:e0:c8:10:ba:53:20:1e:0e:11:e0:e7:52:5d:
                    26:88:8e:c9:cd:2e:c2:9c:08:06:80:9d:fc:bb:3c:
                    60:f6:9f:28:9e:88:25:b2:ac:e3:6c:59:9d:f8:e5:
                    61:b4:11:9a:3f:45:f2:c6:8b:e6:45:95:1c:38:d7:
                    ed:ce:dc:82:0f:08:81:66:5e:b8:84:f5:ac:27:13:
                    fa:52:03:f4:73:b6:98:2f:82:a9:83:5f:5d:c1:7d:
                    63:bd:41:14:cc:81:92:a5:8f:a3:13:34:b1:a8:9d:
                    54:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:C5:F5:A6:B8:68:94:50:7D:22:C6:DC:D7:FF:91:94:0F:BD:40:52
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8BLYrcrc9ifSqrwgWVfqGoky4dm53PwqmjCBkLJyeZSJ/0/77C5F5A6B86894507D22C6DCD7FF91940FBD4052.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.160.0/20
                IPv6:
                  2804:2ab8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53180

    Signature Algorithm: sha256WithRSAEncryption
         b7:a0:ee:a9:4a:72:7b:46:5b:38:3f:b1:c9:a8:6e:ab:05:93:
         4f:22:15:fd:42:3e:2e:0d:6f:4b:5b:e4:dd:00:90:c6:eb:a1:
         5b:8b:8a:72:c7:c9:48:51:aa:33:62:81:77:0b:1b:0f:33:ae:
         20:0f:f0:fa:7d:cc:db:cf:b3:2e:bf:e3:06:37:ec:37:cf:34:
         91:4f:1a:5b:e0:b3:b4:28:46:5a:fa:77:93:1f:08:ec:29:ee:
         d1:f2:3e:30:ce:50:36:60:67:f8:4c:94:e9:73:e3:aa:ed:54:
         02:8b:2b:bc:cb:29:38:77:f9:95:24:be:57:a9:ac:6d:f8:6d:
         df:fe:80:1b:94:b9:5d:56:dd:86:d7:2d:47:58:37:9d:bf:5c:
         fa:44:9d:62:4d:f1:89:b6:fe:07:51:3b:ec:a9:7e:70:de:56:
         d4:9f:bc:c8:a8:9a:c7:73:19:30:88:c1:e2:df:de:c7:d6:b4:
         a8:9a:e8:b6:09:66:93:4d:4e:41:60:67:ea:07:b6:f1:e6:0a:
         18:0f:83:e4:12:f0:df:02:fa:27:bc:e0:be:73:3a:a5:47:0c:
         65:15:ba:41:fa:2f:ea:2a:aa:e4:2f:04:32:82:3e:58:af:c8:
         bc:d5:86:79:1e:79:d8:fc:7e:40:24:bb:b7:05:cd:05:ed:e7:
         09:c5:06:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org