Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer
File:                     B776754A2C8B100218B061AA79BE9186F191500D.cer (raw, json)
Hash identifier:          JEmGNadJ39nOEdOwL+XoVy1jNKjYcyEOlhdRvmvdXjs=
Subject key identifier:   B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D48B7B825D0F4A75AD62BF552E5CC287236EEFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/B776754A2C8B100218B061AA79BE9186F191500D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 11 Nov 2023 20:52:54 +0000
Certificate not after:    Sat 09 Nov 2024 20:57:54 +0000
Subordinate resources:    AS: 267027
                          IP: 45.227.168.0/22
                          IP: 2804:4708::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:48:b7:b8:25:d0:f4:a7:5a:d6:2b:f5:52:e5:cc:28:72:36:ee:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 11 20:52:54 2023 GMT
            Not After : Nov  9 20:57:54 2024 GMT
        Subject: CN=B776754A2C8B100218B061AA79BE9186F191500D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:d7:a3:75:d0:5b:74:41:98:85:d3:de:d6:
                    de:6e:57:73:e8:21:fe:0d:04:1f:a3:df:55:74:4c:
                    1b:be:33:ca:bf:a3:86:c0:69:d9:a1:72:ad:d6:d7:
                    71:1c:8f:35:cc:1c:5f:f0:b3:43:72:0f:ee:8b:65:
                    68:e4:4e:57:44:2f:09:d7:e6:c2:42:df:a6:75:ff:
                    e8:c2:6f:4d:cb:65:8a:45:ff:89:66:66:46:03:94:
                    93:8a:3e:b5:34:22:4c:20:37:4e:ed:b5:31:df:7b:
                    54:23:df:fd:e5:5b:64:a2:f8:3f:fa:5b:2c:40:a0:
                    a3:90:9b:f4:f1:c1:21:52:ea:c2:99:68:98:df:b5:
                    d0:8a:47:8d:87:17:f8:d3:8e:45:07:a0:25:ff:57:
                    96:85:55:22:71:47:4f:a6:f0:25:f2:f1:c5:c0:75:
                    4f:4a:06:46:bc:d3:d0:7f:1d:d7:25:03:b7:6d:f4:
                    19:17:e1:d6:b0:86:2f:6c:e7:b1:01:ff:03:de:02:
                    36:15:02:42:06:4f:b9:ac:d5:53:7b:89:4f:bb:9d:
                    c4:8d:c8:81:17:03:d0:63:d9:56:f7:da:c4:71:d0:
                    8f:ef:3b:69:73:ab:d3:3c:c8:5f:76:ca:20:8d:45:
                    34:94:4a:95:80:55:c3:8c:dd:9e:3a:fd:81:e1:aa:
                    03:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/B776754A2C8B100218B061AA79BE9186F191500D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.168.0/22
                IPv6:
                  2804:4708::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267027

    Signature Algorithm: sha256WithRSAEncryption
         06:8d:8b:f0:21:a0:c1:cf:09:94:1a:03:65:8b:05:0c:c9:b8:
         2c:57:98:b9:00:27:95:fb:f9:71:2b:4b:b0:9b:13:de:79:43:
         c5:93:bd:a6:88:1b:d3:3c:72:01:ea:49:3f:85:7a:b9:24:ee:
         cb:6e:af:12:f7:0c:2c:4e:e3:13:d2:4b:19:af:18:54:49:47:
         fb:7a:1c:be:59:7f:44:32:8c:56:62:26:6d:b5:0d:c4:46:1f:
         d5:2a:97:68:26:f5:18:9d:67:44:6b:4c:37:32:03:4c:1d:90:
         0e:dd:48:1f:fa:83:b9:0b:8e:36:84:c6:9b:4c:67:d3:a9:8b:
         e6:19:e7:25:63:fc:1b:7a:7e:84:e4:76:71:bd:46:93:c6:a2:
         76:67:c0:dd:ba:e5:08:56:86:3a:a6:98:88:13:6f:f2:e7:d6:
         07:71:11:c0:35:85:bd:65:dd:28:0d:17:04:de:87:91:13:75:
         5f:06:91:54:d1:5b:ca:7c:c5:d2:64:25:5b:2a:55:7b:c1:47:
         87:93:05:64:74:d2:eb:bf:bb:24:55:92:16:31:78:66:9c:59:
         6f:f6:f5:f8:ca:a7:f7:e9:5e:37:1d:54:2b:a5:f8:ed:ce:8f:
         f7:dc:47:74:17:0f:f0:86:9b:fb:ef:b3:bb:9a:47:91:99:74:
         08:90:63:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org