Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer
File:                     77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer (raw, json)
Hash identifier:          EsUz58pB7zxvHe3gPGwxca/4/rjshzDuVDL2Ld92X8o=
Subject key identifier:   77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       35EC47B27DEE3D4D9B8FDCC43C1AF3DE93EAB2B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Aug 2023 14:10:10 +0000
Certificate not after:    Tue 30 Jul 2024 14:15:10 +0000
Subordinate resources:    AS: 266447
                          IP: 170.82.204.0/22
                          IP: 2804:37f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ec:47:b2:7d:ee:3d:4d:9b:8f:dc:c4:3c:1a:f3:de:93:ea:b2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  1 14:10:10 2023 GMT
            Not After : Jul 30 14:15:10 2024 GMT
        Subject: CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:c8:a5:31:da:2d:2d:93:d8:d4:0c:d2:6e:
                    e4:13:d9:ac:e2:35:95:4f:d5:9d:b6:59:ee:55:2e:
                    9c:00:c1:d4:5e:f2:83:fc:b7:87:56:d8:2e:4c:b5:
                    85:ff:3b:38:91:57:7d:c5:bd:60:a9:14:3e:bb:5f:
                    67:46:63:23:44:01:7d:87:40:44:f8:3d:b3:33:ac:
                    11:8e:f1:b6:95:c1:11:6b:c5:91:ea:ec:3e:e8:1d:
                    2c:65:80:dd:9c:ba:91:8e:41:a6:26:ac:3e:a4:65:
                    5a:63:9c:f0:63:b9:89:ce:ed:01:b3:68:61:36:0e:
                    e8:0b:c5:e5:aa:b0:4a:ef:2e:35:2d:ef:f4:f3:01:
                    01:0e:bb:95:40:02:69:5d:c8:d8:3d:f7:8b:92:d5:
                    f1:6c:15:02:75:b2:bc:d0:d7:64:63:25:b0:08:bb:
                    4c:28:e9:0f:ae:71:33:8c:6c:59:bd:a9:35:f5:34:
                    dd:02:47:bb:5e:ac:4c:18:81:17:f6:b0:98:41:e0:
                    cc:66:c2:10:77:12:70:85:1f:d2:5b:06:94:44:9a:
                    32:70:98:9c:02:88:96:8d:c2:fe:c2:a7:81:01:6e:
                    7c:0c:0f:40:a8:35:1b:28:39:86:10:75:0a:3a:28:
                    0c:a9:4b:ef:cb:4e:a9:1e:b3:f1:d6:4f:a3:7d:3c:
                    a9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.204.0/22
                IPv6:
                  2804:37f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266447

    Signature Algorithm: sha256WithRSAEncryption
         69:46:d8:76:69:76:8a:2a:8e:64:c2:b7:83:72:75:ed:6a:49:
         48:2c:47:e1:ea:31:0f:84:90:a5:b9:28:43:0a:8b:7d:9e:81:
         9a:28:f5:ac:a1:72:be:0a:59:83:41:31:db:3a:fd:a0:41:27:
         78:6f:b3:7a:ec:16:21:88:9a:5a:00:b7:7f:3f:19:74:89:49:
         3d:b9:31:7b:cb:8f:aa:8e:09:28:14:d3:67:df:30:63:bb:5b:
         54:b6:c2:ea:3c:72:ea:f6:58:e4:41:3b:e9:d5:d0:f6:e8:61:
         de:e3:b0:31:fc:b1:dd:d3:20:31:c5:ce:77:76:42:8d:2a:13:
         a6:bd:ec:8b:97:a7:a5:0b:7e:b2:ff:bb:52:dd:49:8e:e6:56:
         05:d1:32:84:b4:47:23:52:57:14:e6:25:ca:63:5f:4b:15:d4:
         e0:af:1b:58:0a:30:42:e0:b1:01:3b:84:c0:06:24:63:1e:e7:
         cf:70:99:65:f0:1e:23:d0:a0:de:d8:a9:f0:36:76:3a:77:f5:
         cc:d7:25:b8:c3:94:98:73:5d:ac:56:01:c7:57:94:8c:f3:92:
         9a:8e:b2:f8:90:28:06:4b:9b:56:86:7e:c2:a8:38:51:31:b1:
         d6:6b:1d:f4:a6:a7:41:9b:86:cb:2d:2d:64:41:2c:1f:6f:07:
         0a:83:fb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org