Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/844507C306CCD7EF970C04192C0EB6177D5D9F92.cer
File:                     844507C306CCD7EF970C04192C0EB6177D5D9F92.cer (raw, json)
Hash identifier:          lZNGcxdbwelfzWCbYzw2kno5PYqAXwC6GcAWrTdkH70=
Subject key identifier:   84:45:07:C3:06:CC:D7:EF:97:0C:04:19:2C:0E:B6:17:7D:5D:9F:92
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       31130721D4C2356937106D53D71DEDDBB44DC050
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/844507C306CCD7EF970C04192C0EB6177D5D9F92.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Apr 2023 18:15:31 +0000
Certificate not after:    Mon 15 Apr 2024 18:20:31 +0000
Subordinate resources:    AS: 262908
                          IP: 168.196.56.0/22
                          IP: 177.38.24.0/21
                          IP: 177.52.56.0/22
                          IP: 177.91.136.0/22
                          IP: 2804:3c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:13:07:21:d4:c2:35:69:37:10:6d:53:d7:1d:ed:db:b4:4d:c0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 17 18:15:31 2023 GMT
            Not After : Apr 15 18:20:31 2024 GMT
        Subject: CN=844507C306CCD7EF970C04192C0EB6177D5D9F92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:99:65:bc:c1:4e:38:ea:e3:d3:25:c9:bd:e6:
                    1a:bf:46:07:ca:78:04:04:24:ad:4e:b1:d5:68:38:
                    d2:9d:e5:03:37:db:64:dd:df:8a:e7:b0:97:5a:e6:
                    2e:a1:ed:26:33:c2:e4:90:ff:86:53:0f:86:d5:fc:
                    fd:21:27:aa:df:5f:f4:cb:1a:ce:75:ac:33:67:3d:
                    e0:cc:e6:28:54:89:90:ee:26:65:4b:fa:44:9c:bc:
                    bc:71:81:4a:79:65:2b:1f:16:e2:41:f4:e5:ee:7f:
                    74:44:6a:24:d7:76:f3:fc:49:40:03:1c:b2:a5:31:
                    b6:71:ad:2f:48:4a:b4:67:50:55:3e:7b:46:97:e6:
                    1f:70:53:e6:f0:d5:03:52:26:07:14:3e:44:35:19:
                    cb:a6:68:93:12:53:e2:91:8f:bc:72:55:24:db:bb:
                    53:6f:f4:33:db:8c:b5:51:0f:6f:de:b0:5f:ea:4c:
                    22:6b:f4:47:d5:f1:d0:b1:a6:27:ae:b7:ac:5b:ec:
                    88:c0:49:ac:ef:80:32:7d:1a:76:c0:98:76:68:2e:
                    d1:fd:f7:88:14:c9:d1:71:8c:31:2d:30:5e:25:9f:
                    da:7b:1a:de:ae:0c:4c:aa:c1:58:67:14:77:2e:19:
                    4f:7f:de:7e:15:2b:4b:6a:de:60:ce:a4:75:0b:64:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:45:07:C3:06:CC:D7:EF:97:0C:04:19:2C:0E:B6:17:7D:5D:9F:92
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/844507C306CCD7EF970C04192C0EB6177D5D9F92.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.56.0/22
                  177.38.24.0/21
                  177.52.56.0/22
                  177.91.136.0/22
                IPv6:
                  2804:3c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262908

    Signature Algorithm: sha256WithRSAEncryption
         71:f5:fb:fb:43:f2:4f:eb:fb:1a:98:45:f1:2e:bd:13:ca:db:
         eb:b3:3e:40:b4:b9:f4:d0:71:8f:06:9c:55:bd:52:59:55:ed:
         10:03:25:a5:aa:6e:48:3b:6a:5d:c7:f1:27:dc:03:4f:f7:ef:
         fc:e3:09:d8:3b:9b:3e:3a:43:82:1f:d7:cb:28:e3:76:29:16:
         d1:7f:6b:1d:72:67:50:5b:de:46:d1:92:48:51:03:0e:1d:66:
         dc:0b:f2:e8:3a:93:8a:02:be:bd:38:66:72:98:15:72:9c:d3:
         47:f5:31:ff:9d:a4:5f:fb:ef:bb:89:b9:e7:b0:d5:cf:4a:57:
         15:a0:71:5b:ca:3a:e8:25:5d:c7:b2:fb:01:2a:5a:1c:7a:36:
         64:59:0c:40:8b:95:be:63:03:0f:dc:d8:c6:c4:26:ec:b1:30:
         ca:1c:43:26:8f:52:63:4c:c5:d8:72:bb:8e:48:bd:87:4c:0a:
         b8:98:01:62:3c:a7:9d:38:29:17:b6:d4:fd:cf:41:bd:7c:1c:
         25:b8:39:b5:c3:d7:f6:d1:b4:8e:37:fa:ed:1e:44:20:57:ec:
         7f:15:b5:af:37:ea:2f:93:38:cd:53:6d:21:b0:9c:93:2b:d5:
         5d:f6:e3:e2:42:19:c0:a1:7b:94:e0:fd:de:b5:59:87:0b:ae:
         b3:60:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org