Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/91D7E637769370333FD6DBB9FF49354BED2FD28E.cer
File:                     91D7E637769370333FD6DBB9FF49354BED2FD28E.cer (raw, json)
Hash identifier:          uAVUIZ33Tvv/BJf1kIiOd2C+LOv2tI9PKQyHkFJYnIM=
Subject key identifier:   91:D7:E6:37:76:93:70:33:3F:D6:DB:B9:FF:49:35:4B:ED:2F:D2:8E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       77AD2626FD7AAF2BEF4E19D96D85BEFE3F7539C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/91D7E637769370333FD6DBB9FF49354BED2FD28E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 15:08:24 +0000
Certificate not after:    Tue 21 May 2024 15:13:24 +0000
Subordinate resources:    AS: 271216
                          IP: 177.36.76.0/22
                          IP: 2804:7808::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ad:26:26:fd:7a:af:2b:ef:4e:19:d9:6d:85:be:fe:3f:75:39:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 15:08:24 2023 GMT
            Not After : May 21 15:13:24 2024 GMT
        Subject: CN=91D7E637769370333FD6DBB9FF49354BED2FD28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c8:86:dd:9b:2f:ca:43:ce:74:c0:eb:e3:3f:
                    cc:4a:50:6a:9b:ed:0d:7d:b6:0c:ca:d4:64:f9:e8:
                    86:f1:a6:0a:d7:8f:40:26:3e:b1:a3:64:7b:28:d1:
                    89:2a:0d:ed:ec:9e:f3:90:72:4d:0c:4e:b5:fc:a6:
                    5e:92:f7:83:fb:21:19:75:4d:67:34:c5:b9:8f:a1:
                    03:f9:35:db:1a:65:d9:31:41:89:38:6a:12:27:5a:
                    e3:24:2f:d9:f6:8b:58:97:f1:56:a8:c9:ac:0f:34:
                    52:d8:4f:09:c2:0e:88:57:f1:28:19:7a:43:80:ba:
                    0d:5b:1b:d0:13:12:ae:98:95:a3:a5:17:f4:dc:85:
                    b1:5c:26:fb:e9:7d:ae:3c:53:01:2d:40:e8:d2:09:
                    b7:9c:85:62:b4:ba:69:3f:fd:15:bd:9d:ef:cf:f2:
                    41:41:ea:49:d7:9f:71:e8:71:53:27:b9:06:39:08:
                    3e:eb:3e:51:64:6b:c7:81:36:14:65:b3:bc:28:45:
                    9b:5b:8d:cb:0f:af:34:8f:44:56:c6:b7:ed:5d:e4:
                    8d:f5:89:45:51:f9:d3:61:a8:fc:4a:10:a1:13:ae:
                    93:3e:97:3e:28:66:4d:66:af:1b:09:51:4f:17:b9:
                    21:f7:49:d3:19:5f:fe:e2:75:64:17:5f:2c:54:7b:
                    29:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:D7:E6:37:76:93:70:33:3F:D6:DB:B9:FF:49:35:4B:ED:2F:D2:8E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/91D7E637769370333FD6DBB9FF49354BED2FD28E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.76.0/22
                IPv6:
                  2804:7808::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271216

    Signature Algorithm: sha256WithRSAEncryption
         a1:51:37:8b:2a:94:e2:97:bb:12:5d:8e:25:c5:51:3e:fb:f4:
         9d:e9:22:e7:ac:8b:df:7a:56:d6:4a:76:e1:80:16:c1:eb:ed:
         ee:47:fb:7d:15:a0:4a:f3:7d:33:56:f8:65:13:e1:f6:c9:46:
         61:73:e5:3f:f1:4b:7e:55:a0:ae:ec:5a:af:d1:15:01:60:c9:
         c7:e5:33:0d:9d:07:f0:91:e6:e8:1e:f8:1f:7f:45:06:6f:2e:
         c5:17:70:b4:fe:30:b7:a6:68:45:28:65:24:74:4c:b8:99:e1:
         42:6f:3b:3a:d9:51:2e:53:f5:d4:b0:4a:cc:c3:8f:8d:60:2b:
         4c:7c:81:26:53:f9:d2:c0:c2:64:09:b2:6d:2d:38:fa:65:3d:
         71:26:d4:48:b5:8c:79:1e:29:5a:b8:8b:25:14:d0:72:83:44:
         5f:09:b8:f3:1d:10:22:b8:45:28:6a:d2:6e:58:78:64:1a:67:
         03:9a:85:c6:37:4d:5a:5e:0b:df:cb:f7:bf:cc:73:30:62:44:
         42:a0:a7:9b:92:21:b0:ea:fe:0e:5c:f3:6e:23:3e:e5:b1:df:
         a9:d8:b4:c3:52:02:e6:be:2e:96:5e:42:f2:97:29:d0:59:e6:
         59:fa:37:1d:ea:08:71:ae:3e:50:12:f1:be:30:bd:cc:6b:69:
         1a:14:e0:54
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUd60mJv16ryvvThnZbYW+/j91OcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjMxNTA4MjRaFw0yNDA1MjExNTEzMjRaMDMxMTAvBgNV
BAMTKDkxRDdFNjM3NzY5MzcwMzMzRkQ2REJCOUZGNDkzNTRCRUQyRkQyOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhyIbdmy/KQ850wOvjP8xKUGqb
7Q19tgzK1GT56IbxpgrXj0AmPrGjZHso0YkqDe3snvOQck0MTrX8pl6S94P7IRl1
TWc0xbmPoQP5NdsaZdkxQYk4ahInWuMkL9n2i1iX8VaoyawPNFLYTwnCDohX8SgZ
ekOAug1bG9ATEq6YlaOlF/TchbFcJvvpfa48UwEtQOjSCbechWK0umk//RW9ne/P
8kFB6knXn3HocVMnuQY5CD7rPlFka8eBNhRls7woRZtbjcsPrzSPRFbGt+1d5I31
iUVR+dNhqPxKEKETrpM+lz4oZk1mrxsJUU8XuSH3SdMZX/7idWQXXyxUeylBAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSR1+Y3dpNwMz/W
27n/STVL7S/SjjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ES3dpQjNNSERVOTkxMlB4VVl1QUxkOGhHenRmWGliOVdE
QUdBQ1Q1Y25LVC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vREt3aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlX
REFHQUNUNWNuS1QvMC85MUQ3RTYzNzc2OTM3MDMzM0ZENkRCQjlGRjQ5MzU0QkVE
MkZEMjhFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKxJEwwDQQCAAIwBwMF
ACgEeAgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCNwMA0GCSqGSIb3DQEBCwUA
A4IBAQChUTeLKpTil7sSXY4lxVE++/Sd6SLnrIvfelbWSnbhgBbB6+3uR/t9FaBK
830zVvhlE+H2yUZhc+U/8Ut+VaCu7Fqv0RUBYMnH5TMNnQfwkeboHvgff0UGby7F
F3C0/jC3pmhFKGUkdEy4meFCbzs62VEuU/XUsErMw4+NYCtMfIEmU/nSwMJkCbJt
LTj6ZT1xJtRItYx5HilauIslFNByg0RfCbjzHRAiuEUoatJuWHhkGmcDmoXGN01a
Xgvfy/e/zHMwYkRCoKebkiGw6v4OXPNuIz7lsd+p2LTDUgLmvi6WXkLylynQWeZZ
+jcd6ghxrj5QEvG+ML3Ma2kaFOBU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org