Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/876F8C1F6C6405B966A93B542B578351FABA5EB0.cer
File:                     876F8C1F6C6405B966A93B542B578351FABA5EB0.cer (raw, json)
Hash identifier:          aXlP2Vy8gQPo8UtFTNXdXfcKmaJngAWWXaZUCFH4qM4=
Subject key identifier:   87:6F:8C:1F:6C:64:05:B9:66:A9:3B:54:2B:57:83:51:FA:BA:5E:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       549C720DB056EB20358D597F11F279B0EA8F9F73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/876F8C1F6C6405B966A93B542B578351FABA5EB0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2024 20:24:40 +0000
Certificate not after:    Fri 07 Feb 2025 20:29:40 +0000
Subordinate resources:    AS: 52762
                          IP: 177.23.28.0/22
                          IP: 2804:b7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9c:72:0d:b0:56:eb:20:35:8d:59:7f:11:f2:79:b0:ea:8f:9f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 20:24:40 2024 GMT
            Not After : Feb  7 20:29:40 2025 GMT
        Subject: CN=876F8C1F6C6405B966A93B542B578351FABA5EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:18:bf:c0:fa:74:87:bf:7b:da:65:56:d8:c8:
                    05:69:73:cf:b3:83:52:1b:56:29:de:43:2b:6e:1b:
                    35:d5:7c:4d:29:09:f7:08:ae:18:78:53:1f:ee:39:
                    b1:5d:f8:48:de:c4:41:dd:3c:47:4a:b6:05:c8:f3:
                    e7:dc:60:61:3b:ba:47:94:37:dd:f2:b1:59:d6:2d:
                    83:23:10:6c:a9:46:58:7e:41:b3:4e:d3:cf:b7:58:
                    f0:c3:a9:e3:e8:39:f1:21:b0:93:4d:0f:0c:f1:db:
                    e4:46:a7:4b:6f:00:12:54:6e:4a:3f:6f:42:de:1e:
                    fe:39:48:de:0f:16:c6:1b:42:2e:91:03:02:50:fb:
                    14:41:0a:d5:1a:d5:6d:4d:25:d1:e6:4f:ba:21:60:
                    52:e0:b6:4c:28:d2:68:00:72:e4:29:5b:c1:fe:2c:
                    55:04:00:8a:ba:69:9b:24:0e:05:f6:54:6a:4b:17:
                    c8:75:db:13:23:be:50:19:a0:fa:25:8a:4b:b5:9a:
                    b4:42:1d:ab:98:92:39:b8:dd:b0:fa:22:88:b7:1e:
                    04:36:60:45:c6:8d:ea:58:3e:51:fd:b9:ea:e5:a5:
                    c4:5c:57:fd:a6:80:96:77:cd:d5:fc:c2:78:c4:b1:
                    e2:69:8b:e0:f5:ad:d3:bb:12:f7:fd:74:2d:07:02:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:6F:8C:1F:6C:64:05:B9:66:A9:3B:54:2B:57:83:51:FA:BA:5E:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/876F8C1F6C6405B966A93B542B578351FABA5EB0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.28.0/22
                IPv6:
                  2804:b7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52762

    Signature Algorithm: sha256WithRSAEncryption
         66:12:1c:78:23:5a:1f:59:f8:4e:09:0e:da:0f:91:24:a1:d7:
         ba:e5:4c:bc:00:8d:91:02:70:3f:cc:5b:9b:b7:7e:f6:2e:9f:
         a4:3e:45:98:f4:74:51:b4:d1:9c:df:a9:f4:a0:84:79:d3:cd:
         ae:14:66:f6:c0:93:3b:3b:1c:8a:a1:c1:b1:2f:4a:9d:f3:dd:
         5b:de:76:30:c9:9b:91:8d:c5:17:db:4f:c9:ef:34:60:40:8d:
         4f:9e:18:72:f4:5b:94:a0:b6:99:3f:37:72:7b:82:12:8c:0e:
         2e:42:2a:fa:b6:f1:08:23:ec:66:df:41:c2:75:2a:19:07:f0:
         b7:e5:0e:9e:39:26:5a:26:08:86:5d:de:52:20:4f:db:9b:0e:
         9c:4a:40:c9:99:7f:58:cf:85:78:79:a0:d6:32:2b:3e:fb:4e:
         05:fd:96:24:26:1d:57:87:d3:07:10:6e:86:c4:14:11:d0:3f:
         d1:5b:88:42:b9:8b:cc:99:b4:ca:69:8a:6d:8d:35:d3:8a:a1:
         29:bf:a0:7d:85:57:c0:f7:c7:81:0c:61:df:02:f3:f3:2c:a2:
         dc:1b:04:20:9d:46:0b:f5:7f:ba:46:b4:b2:d5:bc:9b:76:70:
         5e:a4:3d:95:d7:f4:ff:61:13:68:77:4f:cb:88:0f:44:2a:fe:
         77:30:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org