Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0A0E1035A424A928603BB73BF73FD98C8EAAE900.cer
File:                     0A0E1035A424A928603BB73BF73FD98C8EAAE900.cer (raw, json)
Hash identifier:          HcEwetgW1g9RxFrw5GxK5aWhJ5T/L4elwUhqTNlzmz4=
Subject key identifier:   0A:0E:10:35:A4:24:A9:28:60:3B:B7:3B:F7:3F:D9:8C:8E:AA:E9:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5AD1EC89C8A911BA01EC03705E99B64586097A8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/0A0E1035A424A928603BB73BF73FD98C8EAAE900.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 13:38:32 +0000
Certificate not after:    Mon 24 Jun 2024 13:43:32 +0000
Subordinate resources:    AS: 262996
                          IP: 186.219.208.0/21
                          IP: 2804:9d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d1:ec:89:c8:a9:11:ba:01:ec:03:70:5e:99:b6:45:86:09:7a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 26 13:38:32 2023 GMT
            Not After : Jun 24 13:43:32 2024 GMT
        Subject: CN=0A0E1035A424A928603BB73BF73FD98C8EAAE900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a3:7a:3c:71:8b:99:5a:53:46:d2:82:93:87:
                    10:dc:0a:cb:c5:00:fe:ee:1e:f2:93:d3:af:56:02:
                    96:82:aa:8c:b1:e5:8c:ad:cf:02:e7:cc:cc:15:d8:
                    13:a4:a2:1a:27:fb:34:63:2b:50:f2:fd:cf:fe:f9:
                    37:ab:34:55:ae:68:03:fe:e0:61:2a:97:a2:d2:2a:
                    03:e3:27:5f:67:37:e8:27:b6:b5:55:1b:5c:68:ac:
                    3a:42:48:36:e0:3e:b1:4d:61:1f:e8:e6:f2:5e:10:
                    ff:4b:92:c1:20:15:32:ae:65:62:9c:c2:9d:50:d2:
                    f4:c4:ab:27:87:72:59:80:1b:07:f9:5b:2f:f9:3e:
                    b2:40:10:ce:99:ce:44:c0:c7:b8:0e:a5:67:99:a3:
                    4e:e4:92:48:3e:83:48:0f:c9:0d:df:76:34:96:4d:
                    38:57:67:12:2c:ee:35:9f:04:de:5d:be:ab:7e:ec:
                    10:4f:e4:1d:fb:31:61:31:9f:1d:99:61:02:fa:a8:
                    11:5c:8f:f9:54:45:a4:44:a3:0e:0f:74:79:82:d2:
                    4e:3e:23:ee:d9:21:55:f8:54:06:7a:db:47:f4:48:
                    d9:ce:c7:43:05:f7:95:f4:0a:77:0c:7a:c0:8c:d8:
                    05:6b:ad:36:9d:6c:7c:af:66:a7:3f:77:3b:ea:9d:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:0E:10:35:A4:24:A9:28:60:3B:B7:3B:F7:3F:D9:8C:8E:AA:E9:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/0A0E1035A424A928603BB73BF73FD98C8EAAE900.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.208.0/21
                IPv6:
                  2804:9d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262996

    Signature Algorithm: sha256WithRSAEncryption
         50:d6:a7:3a:6d:ae:c0:49:09:7a:69:50:6f:0b:7d:db:6f:02:
         50:9d:23:a3:2c:f4:99:21:44:4c:26:6d:dc:0b:4a:57:6f:80:
         52:47:74:c8:0d:20:12:a6:86:3a:3c:94:2f:89:a8:e9:3d:a4:
         40:39:4d:de:df:76:6a:7b:c8:e1:6a:18:84:00:07:36:b4:58:
         c3:47:50:40:90:de:f1:2d:47:15:81:4b:7b:fb:04:2b:19:be:
         89:a8:f5:28:11:9b:45:27:24:69:a0:69:56:d3:43:6f:2b:47:
         4b:2e:d9:a0:a7:51:63:84:a2:74:c2:f5:8a:16:cc:5c:ce:ec:
         3a:fc:01:66:4b:a0:e8:89:c8:bd:46:10:2e:35:cc:58:18:82:
         bb:e7:a3:bb:21:bf:7e:84:94:9e:07:e1:47:d2:73:10:ac:c1:
         63:63:bb:57:fc:c8:56:da:06:ae:cd:57:05:56:a6:59:89:0a:
         8f:6f:ac:e1:de:e5:e3:17:af:3b:78:5f:44:97:ad:88:f7:8e:
         a4:31:d7:57:12:41:38:c6:97:17:40:a6:52:cb:ba:6f:ee:28:
         35:46:34:3d:8c:75:84:92:29:0e:bc:73:3e:96:b1:c0:cc:2e:
         05:e3:29:18:cb:20:69:cc:04:65:18:5d:7a:dd:79:95:19:c6:
         cb:0e:8a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org