Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC772B1299488BFAB097C81274366C7B69601348.cer
File:                     CC772B1299488BFAB097C81274366C7B69601348.cer (raw, json)
Hash identifier:          lL/0Cc9zBvJqhOaabhRCLggxfE7fELgFuJez9hQBMVA=
Subject key identifier:   CC:77:2B:12:99:48:8B:FA:B0:97:C8:12:74:36:6C:7B:69:60:13:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       710385E8B84FE486FD77F89C0EAAB21FD5040D35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/CC772B1299488BFAB097C81274366C7B69601348.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Dec 2023 18:04:39 +0000
Certificate not after:    Fri 27 Dec 2024 18:09:39 +0000
Subordinate resources:    AS: 268617
                          IP: 45.164.132.0/22
                          IP: 2804:53f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:03:85:e8:b8:4f:e4:86:fd:77:f8:9c:0e:aa:b2:1f:d5:04:0d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 29 18:04:39 2023 GMT
            Not After : Dec 27 18:09:39 2024 GMT
        Subject: CN=CC772B1299488BFAB097C81274366C7B69601348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:81:dd:d2:10:c3:bf:82:10:68:c9:d2:e4:0a:
                    1b:7f:ab:58:2d:ac:a7:e6:6f:39:f4:95:da:0f:96:
                    8c:f0:fa:2e:db:ec:c1:51:05:53:f6:ad:bc:86:48:
                    0c:e8:4f:2f:ad:fe:97:63:81:26:7c:5f:04:66:34:
                    d5:5e:8d:58:50:a8:e9:cc:2c:aa:dd:57:f3:42:ca:
                    cb:69:e0:07:48:ac:e5:ae:02:b4:34:9d:09:64:fd:
                    87:f6:14:35:0c:87:e2:4a:bf:27:4a:d5:78:ec:46:
                    4a:ab:a0:d0:b1:bf:25:47:8b:e9:47:f1:a1:1c:42:
                    85:fa:99:3b:a8:fe:33:1a:71:f5:03:24:2e:9f:d4:
                    70:3e:6d:4a:48:71:4b:27:34:b6:ce:42:b5:d0:4a:
                    ed:0b:3c:f8:08:a6:c9:37:59:83:bd:9b:2b:0e:25:
                    56:20:12:cf:ed:b0:4a:87:dd:92:60:12:72:c8:ce:
                    96:45:7b:f7:25:75:cc:29:15:17:2a:9f:df:a4:e4:
                    bd:60:6f:8a:10:86:61:72:05:43:65:df:88:b4:63:
                    cc:96:6f:9f:05:36:77:c6:49:f3:38:15:78:0c:f9:
                    8f:12:d9:6e:64:f9:0e:44:38:3b:57:97:f7:e5:8f:
                    91:63:15:1d:26:bd:ee:03:a9:de:87:3e:60:50:5b:
                    33:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:77:2B:12:99:48:8B:FA:B0:97:C8:12:74:36:6C:7B:69:60:13:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/CC772B1299488BFAB097C81274366C7B69601348.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.132.0/22
                IPv6:
                  2804:53f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268617

    Signature Algorithm: sha256WithRSAEncryption
         37:c6:aa:48:07:15:dd:a0:a4:63:3d:5a:a7:25:5a:29:ea:26:
         0f:2f:cc:5b:54:91:fe:8e:87:23:14:9b:d2:61:99:62:de:17:
         2f:92:93:d5:58:2a:52:6b:4d:c1:58:36:61:23:22:7f:a3:bf:
         d7:9a:41:e1:83:da:ad:96:a5:17:2e:44:1d:78:1c:49:dd:98:
         13:e2:70:61:50:dd:a0:43:23:f1:5b:85:69:dd:ee:40:06:8d:
         5f:a5:8c:82:63:e7:18:32:e1:95:a3:8c:67:c9:f8:a8:27:46:
         97:72:4a:08:16:04:b8:9d:87:1c:5f:d4:db:16:a1:c0:39:ce:
         ac:05:cd:39:0f:e1:b0:23:19:8e:35:2b:b9:95:a4:ce:82:7f:
         a0:3c:53:1e:03:00:41:e3:19:c9:1b:34:11:e4:83:00:9c:2d:
         fb:2a:04:78:e2:f6:25:24:e0:42:2a:40:7e:37:28:12:15:b8:
         a0:56:9c:4b:dc:4f:e7:fc:20:d5:e1:2c:2c:64:2c:74:56:8f:
         73:47:a2:ca:c6:ac:09:f8:c6:85:be:f1:e4:0f:37:d9:cc:03:
         86:c1:a0:9e:fb:32:9a:fb:1e:13:68:8e:33:dd:75:22:8d:62:
         34:a4:7f:46:bc:82:9a:47:fb:c9:4d:09:2d:ce:91:69:8e:40:
         97:c6:2c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----