Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/77F52C1B6E3375D43FFCB23DBFCC5DA24585E09F.cer
File:                     77F52C1B6E3375D43FFCB23DBFCC5DA24585E09F.cer (raw, json)
Hash identifier:          HbNToy1bit2atNdy5ihhxC/YvmKxQ8/UvCxBVpA0AJo=
Subject key identifier:   77:F5:2C:1B:6E:33:75:D4:3F:FC:B2:3D:BF:CC:5D:A2:45:85:E0:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6E84EB341C66AC4B91E819C42092F2C86109FA0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/0/77F52C1B6E3375D43FFCB23DBFCC5DA24585E09F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Jan 2024 19:35:10 +0000
Certificate not after:    Thu 09 Jan 2025 19:40:10 +0000
Subordinate resources:    AS: 272603
                          IP: 2804:85d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:84:eb:34:1c:66:ac:4b:91:e8:19:c4:20:92:f2:c8:61:09:fa:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 11 19:35:10 2024 GMT
            Not After : Jan  9 19:40:10 2025 GMT
        Subject: CN=77F52C1B6E3375D43FFCB23DBFCC5DA24585E09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:a9:3f:da:aa:49:9d:65:4b:4c:40:43:10:
                    5f:61:30:7e:48:26:c4:c6:12:d9:95:a8:fd:4a:43:
                    9b:e2:8d:9b:34:7f:1d:c5:60:c8:ef:e2:15:9f:1b:
                    d3:c7:ac:e8:39:32:21:87:0e:6c:e5:34:02:9b:3a:
                    cb:c7:93:0a:95:f3:30:7b:e5:f0:e9:64:02:95:0e:
                    8d:32:ed:d2:4c:18:e9:70:e6:a0:e7:bd:b9:76:53:
                    ad:c2:78:b5:40:ff:d4:0b:94:41:a6:b5:a5:bd:32:
                    4b:d7:db:0e:d9:49:01:e6:1b:f1:48:bc:74:b9:a5:
                    93:01:9c:18:a7:4a:5e:df:14:bd:af:3a:a0:68:0b:
                    00:7b:4e:ec:86:9f:35:25:1d:a5:ba:d2:30:33:6d:
                    67:e7:d0:05:14:90:57:8f:c2:91:8a:09:60:47:60:
                    b9:f7:ae:3d:e4:ca:42:af:bf:02:18:f2:1a:22:3b:
                    22:6d:76:9b:1e:97:30:12:2c:df:0a:54:bd:aa:f9:
                    96:cb:32:62:ec:c2:a4:2a:ee:6b:09:a9:79:25:5b:
                    db:47:76:dd:0f:8a:0a:8e:65:aa:45:93:4a:04:36:
                    e3:da:38:28:d7:4d:06:62:57:09:12:2b:45:92:9d:
                    0d:de:7a:ab:a7:9f:bc:cf:34:90:56:41:5c:26:dc:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:F5:2C:1B:6E:33:75:D4:3F:FC:B2:3D:BF:CC:5D:A2:45:85:E0:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/0/77F52C1B6E3375D43FFCB23DBFCC5DA24585E09F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:85d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272603

    Signature Algorithm: sha256WithRSAEncryption
         b4:2a:4a:2c:ae:a0:a6:e9:96:8b:12:b4:c9:62:94:dc:ee:b4:
         13:60:ce:fc:23:a9:2b:79:bb:01:62:d4:06:ea:e1:bd:e7:0a:
         80:a8:71:89:91:ee:7c:91:6f:f8:20:d8:e8:d5:48:43:5b:9e:
         5f:10:b2:d0:60:ba:c8:05:cc:8a:51:2d:ec:c6:65:e9:11:09:
         cb:00:88:ee:96:cb:31:4e:9a:5c:5a:74:ac:7c:1d:6c:fd:14:
         f4:65:f5:eb:35:2d:3d:46:78:3b:92:7b:a2:fa:57:c9:d5:4f:
         a9:ff:1d:ca:12:8c:cc:4d:da:d0:65:ce:5a:b4:a8:ad:42:51:
         72:d4:8d:5d:46:a8:dd:d3:38:ee:96:59:ad:ce:6c:3b:2f:f1:
         59:ed:fa:89:09:ee:4c:ee:9f:67:1b:20:fc:9a:65:41:35:88:
         02:70:58:53:03:93:e5:6a:c7:4f:68:83:bc:3f:ee:78:6b:82:
         a0:68:92:8d:71:b4:f7:08:00:18:13:3d:57:f5:49:95:90:7d:
         51:7f:19:3c:c9:4b:66:23:62:7b:44:97:f0:12:08:e7:7c:ce:
         58:aa:03:7b:86:88:1b:3c:ed:eb:88:1e:c8:a3:26:f8:7c:31:
         47:3e:c8:89:35:d1:ee:fc:31:3c:2c:92:9c:be:57:9b:09:79:
         42:78:b9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org