Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/10B05660CB8C13B3B13E3B0810B278833D500547.cer
File:                     10B05660CB8C13B3B13E3B0810B278833D500547.cer (raw, json)
Hash identifier:          lLR0s/HsRwX2WdegF80Suzave+aZPhVT6GanBzHAUms=
Subject key identifier:   10:B0:56:60:CB:8C:13:B3:B1:3E:3B:08:10:B2:78:83:3D:50:05:47
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60C360E2EFA6E39E19DDC7A87D2863D3B4389F23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/10B05660CB8C13B3B13E3B0810B278833D500547.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Jun 2023 17:29:31 +0000
Certificate not after:    Thu 13 Jun 2024 17:34:31 +0000
Subordinate resources:    AS: 266154
                          IP: 192.140.8.0/22
                          IP: 2804:3b84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c3:60:e2:ef:a6:e3:9e:19:dd:c7:a8:7d:28:63:d3:b4:38:9f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 15 17:29:31 2023 GMT
            Not After : Jun 13 17:34:31 2024 GMT
        Subject: CN=10B05660CB8C13B3B13E3B0810B278833D500547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:67:d1:02:b0:92:be:c7:1d:ff:1f:fa:1c:42:
                    d4:19:24:f2:e6:75:4c:62:55:1f:35:4f:eb:d8:2a:
                    1b:d4:66:b3:7e:d2:1c:07:4b:e5:ef:12:71:02:bb:
                    62:2b:8b:f4:2d:46:7f:59:d3:42:35:97:30:46:5e:
                    68:fd:1d:a1:e2:5c:6d:03:13:b7:c3:4c:aa:9c:b1:
                    ab:0d:6d:18:56:8f:a9:31:b1:e6:71:28:27:93:c8:
                    be:25:50:f3:dd:cc:b3:26:94:0f:cd:35:69:9d:e7:
                    1e:48:11:4c:e4:a7:e7:2b:10:d4:f5:11:17:72:66:
                    1f:5e:ca:07:c8:5d:73:7b:3b:0c:d7:e5:16:ac:58:
                    34:01:a5:f6:56:83:a3:fc:c3:b6:63:88:05:ef:ea:
                    a5:a2:be:a7:b4:b5:9d:12:2f:67:44:58:89:ce:db:
                    c8:52:50:b8:ab:8e:f5:18:02:9e:dc:4d:df:0b:09:
                    9e:ab:de:f5:13:f9:29:7a:9a:50:18:74:39:67:25:
                    da:66:ae:fd:d1:48:7c:0b:ce:b0:fe:02:f6:00:2c:
                    53:ba:28:62:55:9c:47:5e:1c:6f:fd:ae:47:1e:ea:
                    00:f9:25:19:1a:87:b8:5d:1e:ec:00:ab:61:66:6b:
                    5c:1d:67:3b:99:45:74:10:3c:02:8e:b2:a4:42:35:
                    b8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:B0:56:60:CB:8C:13:B3:B1:3E:3B:08:10:B2:78:83:3D:50:05:47
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/10B05660CB8C13B3B13E3B0810B278833D500547.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.8.0/22
                IPv6:
                  2804:3b84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266154

    Signature Algorithm: sha256WithRSAEncryption
         48:29:7a:85:96:81:e9:11:8f:37:6f:55:44:6c:04:2b:d6:a6:
         01:24:14:ba:a7:3d:6d:80:77:c5:f7:14:79:46:5e:a5:99:46:
         b2:84:de:af:da:1c:a2:36:91:68:b9:4a:2f:87:6f:8c:41:60:
         40:21:22:34:95:e0:ad:1e:d5:d8:50:81:cf:2e:f5:21:c6:d9:
         32:29:bb:16:d8:ef:b9:8c:3e:3a:89:d3:6e:f7:21:13:7f:23:
         34:94:01:0d:6c:0b:85:59:bc:fe:35:a7:2f:11:d0:27:11:04:
         69:44:9e:01:32:5e:42:0e:43:b0:af:8a:4a:0b:e5:ff:30:50:
         5c:8c:43:06:c7:71:a3:61:ea:03:79:b4:ff:43:27:af:1d:5c:
         9c:f6:fa:12:80:c8:bc:d2:17:35:60:82:4c:7f:b3:da:1b:de:
         6b:10:7c:35:c0:58:74:75:cb:75:50:0b:40:e8:7a:62:ea:3d:
         ef:b0:66:95:8f:c9:da:a8:1d:be:fc:c4:c2:8f:a1:ef:9a:ef:
         76:d8:8f:22:bc:b5:0f:38:ce:9b:9c:00:53:b1:c3:a2:19:f2:
         dc:63:90:35:48:8f:70:d6:96:22:0a:62:ac:62:78:5d:8c:ca:
         21:71:2d:a1:fd:07:84:a6:f5:f2:26:83:10:20:99:c2:c0:8b:
         14:ab:dc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org