Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.cer
File:                     B8A77988EAC7E76375143BCCA6FA803A833D4C0F.cer (raw, json)
Hash identifier:          AlRjwDLpG/+2JOTnPHXq92vpHNeQLpvE7haZkGx+ZhI=
Subject key identifier:   B8:A7:79:88:EA:C7:E7:63:75:14:3B:CC:A6:FA:80:3A:83:3D:4C:0F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       447B67B18807E810FA31799961CACFD8F080E77E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 14:30:33 +0000
Certificate not after:    Mon 27 Jan 2025 14:35:33 +0000
Subordinate resources:    AS: 268097
                          IP: 45.169.44.0/22
                          IP: 131.108.88.0/22
                          IP: 168.194.208.0/22
                          IP: 2804:57f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7b:67:b1:88:07:e8:10:fa:31:79:99:61:ca:cf:d8:f0:80:e7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 29 14:30:33 2024 GMT
            Not After : Jan 27 14:35:33 2025 GMT
        Subject: CN=B8A77988EAC7E76375143BCCA6FA803A833D4C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:20:5b:9b:2d:ab:aa:09:98:6c:21:13:d4:
                    75:77:fb:29:2c:4e:3f:10:01:cc:a6:65:93:f6:03:
                    22:53:65:25:82:d3:bf:2e:ef:29:ac:cd:74:2b:b4:
                    fb:7b:33:e3:9e:cf:37:b0:7d:0f:1f:40:3d:60:76:
                    a6:53:32:2a:20:d1:67:d2:a3:3e:07:a7:96:74:c4:
                    c7:06:5b:f4:ad:1a:8b:21:04:8d:19:59:7c:78:a0:
                    34:4c:87:a4:a8:70:21:05:f8:d1:bd:22:74:49:a3:
                    8e:0a:0e:c9:52:c9:0c:8e:7d:a1:69:9b:f0:5e:2d:
                    8c:96:22:16:1f:29:50:4f:24:13:cd:5e:5e:dd:e1:
                    f2:39:73:3e:27:7d:e4:cd:f2:7a:88:72:1a:2f:ba:
                    26:8a:a0:e6:ab:50:7e:6b:ae:7b:54:4d:07:2a:0b:
                    c3:3d:fc:e2:ea:b5:78:a9:e4:53:95:48:20:bb:d1:
                    37:6d:6e:cf:ed:db:63:90:3d:f2:2d:8c:6f:74:7f:
                    71:ad:61:33:e3:b3:c4:5c:bd:17:26:c3:91:fd:1e:
                    9e:b7:0b:9f:52:b7:52:c9:f6:19:4d:7a:3e:cc:41:
                    8b:13:1a:b9:7c:5e:33:21:6f:6d:0f:09:40:05:21:
                    dd:7c:7b:9e:48:27:01:37:b7:83:f9:ca:1e:6a:e6:
                    26:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:A7:79:88:EA:C7:E7:63:75:14:3B:CC:A6:FA:80:3A:83:3D:4C:0F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.44.0/22
                  131.108.88.0/22
                  168.194.208.0/22
                IPv6:
                  2804:57f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268097

    Signature Algorithm: sha256WithRSAEncryption
         af:c2:16:5b:be:88:34:a2:d3:73:c9:35:af:c4:be:84:b0:71:
         de:12:7f:ad:10:5d:41:08:3e:61:a8:50:32:dd:37:79:0c:71:
         8c:4b:25:db:3e:34:c6:b6:d6:65:74:d6:ac:0e:cd:7d:a4:4d:
         10:35:63:75:8c:ca:17:b5:99:04:57:34:c5:c0:33:ec:4e:46:
         8c:ab:04:e4:1c:13:88:ba:35:c4:d8:09:f5:e1:d2:1a:a7:22:
         79:33:15:ba:ca:73:d1:4f:0f:0e:fa:5c:7a:24:6a:98:e4:09:
         5c:a8:39:f9:1e:67:75:98:e5:16:4d:6b:62:83:d5:6a:6d:33:
         a3:5e:5f:ba:4f:78:ec:c6:91:92:63:c3:10:c1:92:52:a1:e1:
         5f:16:63:53:50:ba:e4:75:1b:21:97:54:cd:6f:a2:16:71:85:
         c7:f5:f3:e6:2d:60:5d:e1:c4:9c:57:46:d8:13:3b:cc:23:35:
         32:fe:90:65:f0:59:4d:42:b2:ff:5b:44:e9:0c:b9:4f:39:f4:
         fc:c6:a3:7a:71:26:cc:92:4c:c3:ae:46:c4:6d:41:bc:80:1e:
         ba:94:97:37:da:47:cc:c9:74:7f:6f:1a:f5:8e:06:7c:af:82:
         85:77:81:9e:76:ee:52:6d:38:04:76:a8:f2:86:88:72:ce:bc:
         e4:1b:74:14
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIURHtnsYgH6BD6MXmZYcrP2PCA534wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMjkxNDMwMzNaFw0yNTAxMjcxNDM1MzNaMDMxMTAvBgNV
BAMTKEI4QTc3OTg4RUFDN0U3NjM3NTE0M0JDQ0E2RkE4MDNBODMzRDRDMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pCBbmy2rqgmYbCET1HV3+yks
Tj8QAcymZZP2AyJTZSWC078u7ymszXQrtPt7M+OezzewfQ8fQD1gdqZTMiog0WfS
oz4Hp5Z0xMcGW/StGoshBI0ZWXx4oDRMh6SocCEF+NG9InRJo44KDslSyQyOfaFp
m/BeLYyWIhYfKVBPJBPNXl7d4fI5cz4nfeTN8nqIchovuiaKoOarUH5rrntUTQcq
C8M9/OLqtXip5FOVSCC70Tdtbs/t22OQPfItjG90f3GtYTPjs8RcvRcmw5H9Hp63
C59St1LJ9hlNej7MQYsTGrl8XjMhb20PCUAFId18e55IJwE3t4P5yh5q5ibNAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS4p3mI6sfnY3UU
O8ym+oA6gz1MDzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81dVNha2dhQk51TUxvM0JkblZnRGVwdTQ5WUx0V3RqRkdj
SjN1UWhqakExaC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNXVTYWtnYUJOdU1MbzNCZG5WZ0RlcHU0OVlMdFd0akZH
Y0ozdVFoampBMWgvMC9COEE3Nzk4OEVBQzdFNzYzNzUxNDNCQ0NBNkZBODAzQTgz
M0Q0QzBGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAItqSwDBAKDbFgDBAKo
wtAwDQQCAAIwBwMFACgEV/QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBdBMA0G
CSqGSIb3DQEBCwUAA4IBAQCvwhZbvog0otNzyTWvxL6EsHHeEn+tEF1BCD5hqFAy
3Td5DHGMSyXbPjTGttZldNasDs19pE0QNWN1jMoXtZkEVzTFwDPsTkaMqwTkHBOI
ujXE2An14dIapyJ5MxW6ynPRTw8O+lx6JGqY5AlcqDn5Hmd1mOUWTWtig9VqbTOj
Xl+6T3jsxpGSY8MQwZJSoeFfFmNTULrkdRshl1TNb6IWcYXH9fPmLWBd4cScV0bY
EzvMIzUy/pBl8FlNQrL/W0TpDLlPOfT8xqN6cSbMkkzDrkbEbUG8gB66lJc32kfM
yXR/bxr1jgZ8r4KFd4Gedu5SbTgEdqjyhohyzrzkG3QU
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org