Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0C1C6ED65AC27E32959512A2404C0C967A731CD8.cer
File:                     0C1C6ED65AC27E32959512A2404C0C967A731CD8.cer (raw, json)
Hash identifier:          PtTcwHOF9AoGoNimoBaKOvoQ8gMoGJxrUQgKyAjCS0s=
Subject key identifier:   0C:1C:6E:D6:5A:C2:7E:32:95:95:12:A2:40:4C:0C:96:7A:73:1C:D8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3214BE2F7A29BD8990C3D5D2F521331F1054870B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/0C1C6ED65AC27E32959512A2404C0C967A731CD8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Sep 2023 16:00:46 +0000
Certificate not after:    Fri 27 Sep 2024 16:05:46 +0000
Subordinate resources:    AS: 53181
                          IP: 138.204.64.0/22
                          IP: 191.241.64.0/20
                          IP: 201.33.160.0/20
                          IP: 2804:113c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:14:be:2f:7a:29:bd:89:90:c3:d5:d2:f5:21:33:1f:10:54:87:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 29 16:00:46 2023 GMT
            Not After : Sep 27 16:05:46 2024 GMT
        Subject: CN=0C1C6ED65AC27E32959512A2404C0C967A731CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:1c:ac:f8:18:7c:25:8e:ad:43:48:8d:e9:
                    77:92:3c:76:6b:8f:4b:a3:11:b2:3b:66:fb:ca:a2:
                    f4:93:fc:22:31:20:47:6c:29:a5:98:58:51:72:c3:
                    30:5a:75:13:69:42:6f:6e:b6:a5:56:e3:ed:2d:a2:
                    a7:49:6e:fe:2e:1e:78:96:18:3e:ac:a1:90:9f:48:
                    1e:ee:4b:46:1d:6f:69:21:be:ad:3c:a2:e8:38:4d:
                    45:28:af:50:16:39:43:70:5b:32:5f:63:37:46:a0:
                    fa:ca:02:27:53:95:b5:2e:7a:6e:25:51:22:83:af:
                    51:99:03:9c:8b:7b:f1:c9:3d:b3:df:e0:dc:cd:59:
                    04:05:05:93:87:87:f8:f9:c8:a7:3b:19:fd:16:d2:
                    4f:b6:16:3b:1d:a4:14:d0:a2:ec:0c:05:2a:21:06:
                    cb:e0:90:4b:0a:30:a8:05:d7:d8:c5:60:c9:ee:69:
                    a8:71:d8:54:9d:89:4b:9e:89:2f:61:75:29:16:4d:
                    64:6d:8a:be:12:36:68:51:85:fa:60:aa:92:4d:51:
                    1b:9c:88:3e:74:30:bf:22:06:a4:05:59:20:a5:af:
                    30:8f:32:5b:ed:f9:b2:3c:5c:fe:54:0d:5d:65:4c:
                    9c:b7:01:82:39:a9:17:19:77:50:d7:cf:87:72:c8:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:1C:6E:D6:5A:C2:7E:32:95:95:12:A2:40:4C:0C:96:7A:73:1C:D8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/0C1C6ED65AC27E32959512A2404C0C967A731CD8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.64.0/22
                  191.241.64.0/20
                  201.33.160.0/20
                IPv6:
                  2804:113c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53181

    Signature Algorithm: sha256WithRSAEncryption
         44:e9:31:1f:5c:59:5b:1b:3b:27:16:aa:38:95:9a:96:90:70:
         b5:fa:66:38:54:74:93:88:96:38:e9:eb:2c:4d:1a:6c:c2:bc:
         90:3f:b1:f3:9f:af:a0:ff:c6:d3:f9:7d:cf:75:2b:89:85:ce:
         84:db:08:08:cb:39:1b:d3:98:99:df:54:2c:b1:6a:cc:b3:fe:
         56:c7:c1:1b:b5:4b:aa:42:72:7d:56:8d:47:0d:f3:d3:f6:5a:
         ed:f3:8c:d2:9a:54:fb:74:9c:7c:60:81:cc:56:a6:37:5e:1b:
         6f:6a:5c:0d:60:3b:72:35:2c:a5:10:f6:27:f0:24:29:72:cd:
         2b:5f:95:c0:95:86:4c:8e:d3:fa:e9:24:57:2a:c2:3a:5b:cd:
         bf:01:ff:73:a5:21:fe:9f:53:00:b9:5c:48:1d:d9:e2:3d:29:
         a8:8b:3c:e2:1e:40:a4:b5:78:db:4b:8c:d4:ca:54:14:6a:62:
         e6:5f:8b:7b:6a:78:b5:ff:cc:19:da:82:5a:5a:ad:ce:0d:b0:
         be:5f:b5:0b:5c:48:d8:95:7b:89:4d:9b:d2:2f:c4:e5:70:c5:
         59:f6:43:16:ab:b5:3d:f6:c2:32:7a:b7:57:fe:40:2a:07:79:
         79:53:76:3e:82:5b:41:5f:e1:0b:8f:4e:2c:14:88:d2:6b:d7:
         55:3f:a6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org