Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B137C77C7DCC54336B5542D4571EBAB2E89F0C4E.cer
File:                     B137C77C7DCC54336B5542D4571EBAB2E89F0C4E.cer (raw, json)
Hash identifier:          6kxwUfwUTqfRx5gIvo0/qMVC/NlU/c7yQidRlmAEdNc=
Subject key identifier:   B1:37:C7:7C:7D:CC:54:33:6B:55:42:D4:57:1E:BA:B2:E8:9F:0C:4E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       26C4D69F162A4552A2E8AC95393533FDCF704D68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/B137C77C7DCC54336B5542D4571EBAB2E89F0C4E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 21:20:17 +0000
Certificate not after:    Thu 20 Jul 2023 21:25:17 +0000
Subordinate resources:    AS: 265442
                          IP: 168.196.40.0/22
                          IP: 2804:3434::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c4:d6:9f:16:2a:45:52:a2:e8:ac:95:39:35:33:fd:cf:70:4d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 21:20:17 2022 GMT
            Not After : Jul 20 21:25:17 2023 GMT
        Subject: CN=B137C77C7DCC54336B5542D4571EBAB2E89F0C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f7:62:cf:5a:4e:c1:7e:56:ad:8e:c6:7d:7a:
                    fa:aa:b5:68:bb:fa:1c:f1:d1:95:b5:86:c7:5c:3b:
                    bf:0c:32:de:fc:4c:0f:a1:95:49:f2:cb:45:77:75:
                    45:7d:ca:6a:0f:ce:23:99:d9:79:cc:62:be:48:b3:
                    11:e6:5d:9a:49:3a:ff:5c:0f:c3:5f:2a:dc:bf:ad:
                    dd:5a:03:45:b7:dc:da:b4:3e:59:37:66:ef:ef:6e:
                    43:3b:ec:b2:7e:87:57:58:c0:07:d6:73:6c:6d:8d:
                    df:1c:e7:ec:74:bd:33:59:e5:83:69:26:05:cd:3d:
                    4d:b0:31:a6:64:cb:bd:45:64:4e:21:00:f3:fd:7f:
                    fa:60:8e:c2:5a:2d:59:ec:08:84:38:97:e5:c5:4b:
                    25:dd:d5:a7:1e:3f:c4:ef:a6:60:b5:e2:49:9b:2a:
                    ed:9a:7f:fd:d4:a1:60:fb:fe:cd:f2:84:27:6c:52:
                    cd:a7:20:13:ed:c5:35:bb:21:56:3c:6b:e5:36:64:
                    48:c9:28:81:03:3c:81:75:5d:7a:f2:53:b6:45:fb:
                    0b:80:fa:88:38:c9:9e:7e:ae:02:e2:8f:49:64:15:
                    44:85:41:c2:26:b3:27:16:5a:ba:62:7b:81:65:50:
                    a9:99:7b:49:55:e3:4a:9e:83:11:68:32:ba:f4:4f:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:37:C7:7C:7D:CC:54:33:6B:55:42:D4:57:1E:BA:B2:E8:9F:0C:4E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/B137C77C7DCC54336B5542D4571EBAB2E89F0C4E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.40.0/22
                IPv6:
                  2804:3434::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265442

    Signature Algorithm: sha256WithRSAEncryption
         32:f4:80:e7:85:86:2c:12:c3:9e:c7:41:9e:d1:ed:cf:59:2c:
         05:92:03:18:03:43:af:19:b1:f6:ac:03:ef:f9:f4:43:5a:8d:
         c5:8e:ca:73:ef:84:41:02:e4:1f:be:b4:fc:93:a3:42:91:ee:
         b0:53:b7:fa:de:8b:2d:d0:c9:94:34:b9:38:24:22:84:0e:1c:
         9a:49:da:c2:98:8b:58:5c:08:0e:8f:de:70:82:3b:62:49:60:
         f8:53:05:dc:df:00:82:9e:8c:63:8e:32:57:4a:bb:c4:64:e2:
         a9:4a:d0:ef:39:f5:53:46:4d:47:d7:74:ed:95:40:24:d9:d2:
         9b:88:81:fa:b2:13:77:59:10:16:45:38:b3:bf:d5:37:20:c7:
         7f:22:82:fd:0a:ac:af:74:55:9a:34:5f:c2:eb:bf:ad:bb:15:
         2b:cf:1c:76:79:23:b8:0f:9d:3e:20:67:df:82:5d:76:34:6d:
         ab:ae:fe:6d:8d:af:05:dd:5e:64:a4:a9:be:79:0a:2d:99:04:
         24:0e:e7:74:44:ea:89:54:1c:50:b4:57:fc:39:39:5e:eb:81:
         7c:6b:8f:fd:58:3a:c1:76:76:b7:39:ef:ef:d1:9c:24:1d:2a:
         b9:2b:62:d4:04:cc:5e:76:95:37:06:49:ce:53:9d:eb:00:ac:
         34:8a:e3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org