Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/77F958717D0A9CCDFCFA2B83A02ABDA1B3406580.cer
File:                     77F958717D0A9CCDFCFA2B83A02ABDA1B3406580.cer (raw, json)
Hash identifier:          iDHZAv2YmnvrCRsvu5BIyvsMW/c1H/hSGKB9rv95x1E=
Subject key identifier:   77:F9:58:71:7D:0A:9C:CD:FC:FA:2B:83:A0:2A:BD:A1:B3:40:65:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       054EE9DB3D79FF540D754679FB91D0959B7BA9A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/77F958717D0A9CCDFCFA2B83A02ABDA1B3406580.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 18:49:27 +0000
Certificate not after:    Wed 15 Jan 2025 18:54:27 +0000
Subordinate resources:    AS: 269548
                          IP: 45.189.16.0/22
                          IP: 2804:6650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4e:e9:db:3d:79:ff:54:0d:75:46:79:fb:91:d0:95:9b:7b:a9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 18:49:27 2024 GMT
            Not After : Jan 15 18:54:27 2025 GMT
        Subject: CN=77F958717D0A9CCDFCFA2B83A02ABDA1B3406580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:23:77:dd:ae:f2:0c:c7:04:10:6c:6a:d9:
                    f4:61:22:a5:06:26:cf:a8:f4:f1:17:97:6d:a6:a3:
                    78:c9:e1:41:c2:9b:bb:3e:f9:29:7f:17:22:44:07:
                    81:9b:01:26:69:ff:8e:af:0a:83:8d:77:6d:0e:6d:
                    0f:75:ca:7c:b5:f4:1a:58:89:0b:72:d7:cb:21:43:
                    4b:a8:d9:ca:03:e5:db:f2:4c:9c:64:33:1f:b1:e9:
                    39:64:e4:f3:e2:c8:5d:27:8d:47:e3:70:24:7c:bd:
                    4a:d7:80:e0:80:3e:eb:6d:7a:fb:30:b2:c6:ad:aa:
                    35:17:15:ec:86:e7:21:11:8f:77:59:11:e0:70:30:
                    e2:91:57:83:83:04:56:1a:a6:5d:e4:51:fe:26:79:
                    9a:2b:bc:b5:47:1c:07:6a:6e:e8:03:c8:cb:30:a3:
                    9e:be:1a:1e:56:bc:23:ca:87:19:b6:70:80:28:f0:
                    81:43:a4:88:d6:59:1b:88:0d:91:ea:54:0f:fa:ca:
                    07:5d:65:78:33:c5:ae:62:32:f6:28:51:c3:8c:74:
                    74:71:69:29:71:e9:b2:84:7d:c7:f6:b9:a8:b0:4e:
                    e4:30:df:c2:29:36:aa:d0:e8:3d:00:50:23:c5:dc:
                    eb:8a:77:32:1f:87:18:e8:1a:65:9b:8e:89:7b:a3:
                    d6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:F9:58:71:7D:0A:9C:CD:FC:FA:2B:83:A0:2A:BD:A1:B3:40:65:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/77F958717D0A9CCDFCFA2B83A02ABDA1B3406580.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.16.0/22
                IPv6:
                  2804:6650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269548

    Signature Algorithm: sha256WithRSAEncryption
         14:2b:ed:d6:67:89:01:b9:af:50:09:29:55:09:1e:1c:98:5b:
         7e:27:0f:8d:f0:46:eb:b8:9d:48:0a:24:2c:bb:e8:68:fa:e8:
         91:1c:bc:04:d9:66:e6:b6:51:ec:3b:c8:43:f2:44:ad:92:43:
         1c:e3:5d:19:fe:94:d6:dd:6f:90:c4:7b:a3:51:c8:c4:a9:d1:
         a4:9a:5f:8d:7b:99:36:5c:ab:d3:4d:a2:f5:51:bf:d5:8a:d7:
         a2:b2:37:09:22:fa:35:db:f8:1c:17:99:27:89:ec:16:08:21:
         14:93:a8:3b:88:fd:eb:f0:b1:bd:c0:27:c6:f2:3b:ed:a1:5d:
         eb:08:05:f8:2f:91:22:41:2f:10:8c:49:c8:f9:31:f4:f9:a1:
         a8:98:01:db:51:00:2c:17:49:fe:cc:c4:d2:73:fd:34:3d:58:
         78:74:29:39:fe:3c:56:c3:3c:3e:f2:23:c2:81:4c:c9:a8:bf:
         95:2d:89:3f:93:70:fe:99:1d:a0:31:76:ba:1b:c9:df:b1:cb:
         d3:1c:cd:46:d1:09:b2:2f:80:b3:6b:63:33:f7:6a:c4:fb:e0:
         3b:ef:00:fd:83:c2:9f:e3:31:63:7c:04:13:0a:2b:b4:59:0b:
         fa:17:1e:31:1b:0c:7c:9b:4f:48:93:56:6d:9d:5d:fd:6f:17:
         89:4f:9c:f9
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBU7p2z15/1QNdUZ5+5HQlZt7qakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTcxODQ5MjdaFw0yNTAxMTUxODU0MjdaMDMxMTAvBgNV
BAMTKDc3Rjk1ODcxN0QwQTlDQ0RGQ0ZBMkI4M0EwMkFCREExQjM0MDY1ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91iN33a7yDMcEEGxq2fRhIqUG
Js+o9PEXl22mo3jJ4UHCm7s++Sl/FyJEB4GbASZp/46vCoONd20ObQ91yny19BpY
iQty18shQ0uo2coD5dvyTJxkMx+x6Tlk5PPiyF0njUfjcCR8vUrXgOCAPuttevsw
ssatqjUXFeyG5yERj3dZEeBwMOKRV4ODBFYapl3kUf4meZorvLVHHAdqbugDyMsw
o56+Gh5WvCPKhxm2cIAo8IFDpIjWWRuIDZHqVA/6ygddZXgzxa5iMvYoUcOMdHRx
aSlx6bKEfcf2uaiwTuQw38IpNqrQ6D0AUCPF3OuKdzIfhxjoGmWbjol7o9axAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR3+VhxfQqczfz6
K4OgKr2hs0BlgDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FamRGdWZDNXpLOGhGdWVQNzlCU2lnTk5xNlhpajlBRE1V
NWdpcWs1b1hKOC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRWpkRnVmQzV6SzhoRnVlUDc5QlNpZ05OcTZYaWo5QURN
VTVnaXFrNW9YSjgvMC83N0Y5NTg3MTdEMEE5Q0NERkNGQTJCODNBMDJBQkRBMUIz
NDA2NTgwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItvRAwDQQCAAIwBwMF
ACgEZlAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBzsMA0GCSqGSIb3DQEBCwUA
A4IBAQAUK+3WZ4kBua9QCSlVCR4cmFt+Jw+N8EbruJ1ICiQsu+ho+uiRHLwE2Wbm
tlHsO8hD8kStkkMc410Z/pTW3W+QxHujUcjEqdGkml+Ne5k2XKvTTaL1Ub/Vitei
sjcJIvo12/gcF5kniewWCCEUk6g7iP3r8LG9wCfG8jvtoV3rCAX4L5EiQS8QjEnI
+TH0+aGomAHbUQAsF0n+zMTSc/00PVh4dCk5/jxWwzw+8iPCgUzJqL+VLYk/k3D+
mR2gMXa6G8nfscvTHM1G0QmyL4Cza2Mz92rE++A77wD9g8Kf4zFjfAQTCiu0WQv6
Fx4xGwx8m09Ik1ZtnV39bxeJT5z5
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org