Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0B10E3039E53148B83591B0E6E74BEC6DCBF8FB8.cer
File:                     0B10E3039E53148B83591B0E6E74BEC6DCBF8FB8.cer (raw, json)
Hash identifier:          eE2Sr4FdR2FSD2D+e+Abvc2Ry/nsVcAxesuXUK7p2Zs=
Subject key identifier:   0B:10:E3:03:9E:53:14:8B:83:59:1B:0E:6E:74:BE:C6:DC:BF:8F:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       093A39E5A5A638AA91F1DD5CC11BEAC49DD7169A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/0B10E3039E53148B83591B0E6E74BEC6DCBF8FB8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 11:16:50 +0000
Certificate not after:    Tue 18 Feb 2025 11:21:50 +0000
Subordinate resources:    AS: 272717
                          IP: 167.250.124.0/23
                          IP: 2804:8790::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3a:39:e5:a5:a6:38:aa:91:f1:dd:5c:c1:1b:ea:c4:9d:d7:16:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 11:16:50 2024 GMT
            Not After : Feb 18 11:21:50 2025 GMT
        Subject: CN=0B10E3039E53148B83591B0E6E74BEC6DCBF8FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:23:20:de:44:fc:88:5c:48:a3:13:bd:17:
                    26:be:d3:5d:89:88:eb:32:fb:c7:cb:37:95:84:11:
                    e5:4f:a1:c2:0e:88:9e:c6:ac:02:8c:aa:9b:e8:50:
                    c8:4a:42:27:32:9b:d5:6f:44:7c:a4:de:1b:30:84:
                    a8:bd:ba:16:29:c3:3e:9f:e0:81:c3:8d:a0:f7:29:
                    d7:f3:94:34:34:af:c0:b3:fa:0e:17:ce:e1:78:c0:
                    65:70:ce:c4:6a:78:af:17:db:64:cd:6d:75:c7:e2:
                    da:90:2d:0e:53:2b:42:d8:5f:d5:9e:a7:37:5f:f7:
                    cd:be:af:23:9b:a8:f8:af:94:eb:f3:d6:a9:0a:4c:
                    ef:bc:41:18:77:db:e5:a5:57:ee:62:c9:53:fa:26:
                    62:83:d6:f2:e4:92:c5:03:89:1a:a6:5b:77:16:7f:
                    65:69:29:16:7d:21:d7:1d:df:bc:8f:47:ab:cd:ad:
                    22:df:41:e3:a4:7b:a1:31:3b:2a:92:c9:87:ce:0f:
                    80:00:8e:b2:bb:7c:03:cd:8b:7b:a3:25:f6:d0:eb:
                    c7:98:6c:e9:93:89:2e:17:de:b6:13:53:0d:bf:84:
                    22:4c:04:30:2a:e5:55:46:6e:a4:78:00:03:cb:49:
                    7c:5f:f9:f0:17:10:77:fd:64:ec:ae:4f:64:96:43:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:10:E3:03:9E:53:14:8B:83:59:1B:0E:6E:74:BE:C6:DC:BF:8F:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/0B10E3039E53148B83591B0E6E74BEC6DCBF8FB8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.124.0/23
                IPv6:
                  2804:8790::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272717

    Signature Algorithm: sha256WithRSAEncryption
         46:1b:9d:dc:2f:3e:8c:e5:ca:96:51:ec:e6:1b:0d:30:09:15:
         9b:80:9f:9b:bf:11:cd:34:fe:59:8a:a5:1b:9e:50:d3:a5:cf:
         84:22:a1:63:68:ca:cb:0d:79:99:39:d5:7a:d4:35:3c:77:c6:
         1c:7a:89:4c:4b:c2:2e:b7:68:8c:8c:0b:41:7a:73:39:19:bb:
         f0:1e:e2:e7:b1:ed:9c:64:1e:0a:42:9b:b3:98:29:a5:76:42:
         72:a1:da:db:0c:b2:bb:d1:8b:99:5f:a1:d5:11:91:55:97:2d:
         db:ee:a8:da:da:5f:b1:14:fa:8e:b1:0f:ef:94:ab:9d:06:92:
         26:0d:23:09:88:de:80:3e:9d:23:c5:c9:92:0b:a0:08:3f:df:
         7e:f0:39:e0:68:a5:c4:17:b3:f0:bc:96:26:fa:58:3d:80:36:
         2f:6e:3e:b1:b6:45:49:56:93:10:ed:13:12:7f:50:4a:0c:a6:
         03:bc:50:73:ce:07:8e:5d:ba:fc:6e:42:81:a1:70:87:5a:03:
         cb:70:47:4a:d4:b3:38:00:9c:0a:91:61:5a:aa:36:05:f3:10:
         a1:06:4d:70:6f:d8:31:09:60:2b:29:53:8f:71:69:e7:7a:48:
         61:8f:0d:ab:65:74:b3:95:18:2b:5e:ff:23:23:65:d6:43:59:
         05:81:3d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org