Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/977763171B41C527CE9BEBF931FB49B2ED545A8B.cer
File:                     977763171B41C527CE9BEBF931FB49B2ED545A8B.cer (raw, json)
Hash identifier:          jv4qd8RTUpTEfXy5KvPxzbLdvqIQZfOgKeopNIue+cw=
Subject key identifier:   97:77:63:17:1B:41:C5:27:CE:9B:EB:F9:31:FB:49:B2:ED:54:5A:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B1102AE423499132325D7DE1E879882A5187D1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/977763171B41C527CE9BEBF931FB49B2ED545A8B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Mar 2024 12:22:26 +0000
Certificate not after:    Wed 12 Mar 2025 12:27:26 +0000
Subordinate resources:    AS: 269131
                          IP: 45.180.56.0/22
                          IP: 2804:5fe8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:11:02:ae:42:34:99:13:23:25:d7:de:1e:87:98:82:a5:18:7d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 13 12:22:26 2024 GMT
            Not After : Mar 12 12:27:26 2025 GMT
        Subject: CN=977763171B41C527CE9BEBF931FB49B2ED545A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:89:bf:4d:74:8a:4a:7e:b1:6b:ed:04:98:cd:
                    0e:e4:f2:08:91:47:d1:cb:2a:cf:55:43:52:c2:cb:
                    c5:e7:5d:11:f0:af:f6:ea:36:46:f5:e5:3b:9c:79:
                    a6:7a:35:0b:ed:4b:be:14:00:69:3c:6a:02:ba:4a:
                    a8:02:80:d9:96:c7:07:eb:fb:cf:1b:a0:93:bb:23:
                    ed:e4:a0:8b:7a:58:b0:91:d2:e9:e9:f6:08:64:7e:
                    15:e7:72:b2:5c:23:5e:cd:02:93:02:32:b6:99:26:
                    d8:95:70:b4:91:ae:4a:c8:27:14:e3:3c:62:9e:9a:
                    eb:36:8d:dc:2d:9f:28:80:a2:c8:78:a9:88:51:20:
                    11:f5:c4:8d:e8:60:5c:f6:c3:3b:ed:3b:be:d5:c4:
                    36:1d:19:90:d6:16:cd:89:a6:63:69:39:8a:fe:7f:
                    59:c1:f4:3e:ad:b1:e2:55:7d:c0:bd:e5:29:4f:9d:
                    02:30:f2:a8:96:be:cc:d0:09:25:cc:be:d5:50:60:
                    02:dd:40:d6:c0:0c:71:93:16:61:33:9d:83:32:14:
                    88:24:84:69:12:38:86:97:69:e3:85:e0:cd:9b:aa:
                    5c:ee:f8:70:9f:c1:d3:12:b7:39:d0:de:65:8f:64:
                    e1:0f:b9:42:37:c4:36:51:88:38:61:30:02:1a:0b:
                    70:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:77:63:17:1B:41:C5:27:CE:9B:EB:F9:31:FB:49:B2:ED:54:5A:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/977763171B41C527CE9BEBF931FB49B2ED545A8B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.56.0/22
                IPv6:
                  2804:5fe8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269131

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:f2:4c:29:5d:5f:2e:37:ef:85:0e:3c:8a:0c:dd:d6:5f:
         8c:56:95:ac:7a:18:75:e0:fc:f0:34:3d:c6:64:48:9d:79:e6:
         61:6a:8f:f4:2d:80:d6:d5:04:02:98:ac:63:ca:28:e4:b1:bc:
         df:75:9b:7a:07:9f:ca:93:94:b2:f2:a7:b3:c1:17:08:87:a5:
         1f:29:00:2c:f7:c7:db:1d:81:57:19:e0:a3:54:8d:91:72:00:
         ac:87:00:a1:99:df:e3:c3:fa:b3:73:a6:0d:8b:11:53:44:82:
         7f:00:b9:10:74:2f:f0:96:01:e3:40:9d:af:d9:1b:e7:33:bb:
         88:4b:38:8b:10:96:55:62:ec:e2:8d:ba:2a:aa:9c:18:29:a7:
         31:a7:33:46:5f:a4:1b:61:25:39:f3:60:05:3f:56:ce:a0:9a:
         3b:10:38:ef:61:b3:86:fa:e9:c6:9b:06:a8:6e:14:09:ac:a4:
         9e:70:fe:27:d6:45:15:4d:ee:31:5a:39:de:8d:56:cf:8f:80:
         e1:da:8f:28:71:fe:f2:d2:9a:64:a1:aa:41:5f:cc:7a:76:a9:
         be:a5:05:da:e4:66:7d:b4:20:7f:9b:fb:17:d5:93:83:32:07:
         64:92:f5:6f:b5:74:6e:58:32:42:63:2a:ae:ce:13:be:b2:2a:
         0c:78:32:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org