Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0C381C56BB847DA0E4874CE783921BF1D350DE14.cer
File:                     0C381C56BB847DA0E4874CE783921BF1D350DE14.cer (raw, json)
Hash identifier:          N57SM3GvcgFouRNlmxwDkoTYm4lYF4US9aE0/ARg6wY=
Subject key identifier:   0C:38:1C:56:BB:84:7D:A0:E4:87:4C:E7:83:92:1B:F1:D3:50:DE:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F1A9C3A3E10C2629935A0E8FCF407B9F20FC3C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/0C381C56BB847DA0E4874CE783921BF1D350DE14.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 12:05:59 +0000
Certificate not after:    Mon 07 Oct 2024 12:10:59 +0000
Subordinate resources:    AS: 270662
                          IP: 138.117.248.0/22
                          IP: 2804:6f78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1a:9c:3a:3e:10:c2:62:99:35:a0:e8:fc:f4:07:b9:f2:0f:c3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  9 12:05:59 2023 GMT
            Not After : Oct  7 12:10:59 2024 GMT
        Subject: CN=0C381C56BB847DA0E4874CE783921BF1D350DE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:17:64:3f:db:5b:cb:37:a0:4e:60:85:38:
                    1e:1c:12:45:ad:c3:37:95:96:d3:1e:09:32:15:1f:
                    2e:37:92:d4:66:4a:ec:f0:b4:44:9b:24:f3:72:95:
                    cf:91:7c:a1:0c:84:4b:ee:c3:29:c4:7c:e2:8e:b6:
                    6c:f3:7e:35:c7:28:79:3f:36:9a:bc:b9:23:7e:50:
                    6d:48:0f:5a:7d:f6:02:c3:a3:84:77:d9:67:4d:99:
                    52:39:58:a4:36:2a:48:55:32:f1:13:2d:d1:b1:8d:
                    25:7c:fa:2e:eb:c2:91:ed:e6:d3:6e:be:55:2c:df:
                    53:9a:f4:b3:51:97:23:d1:56:f7:4e:f0:ac:cb:e7:
                    3b:33:5c:61:f5:43:d4:52:22:18:88:f9:ca:ab:a8:
                    0f:e1:a2:01:d2:a8:27:03:9c:2d:75:0c:d8:a0:da:
                    c7:dc:26:9e:e2:09:b0:93:a7:14:77:e0:70:9b:d7:
                    6d:36:9b:ba:81:8b:96:62:94:71:e3:f8:fa:53:c7:
                    a9:7f:a7:99:0d:b8:b5:6c:9c:a7:d3:b1:09:95:34:
                    3f:54:44:ff:c7:d9:c0:c1:cb:d0:8c:8b:30:8a:c5:
                    eb:64:60:48:4b:9d:79:4a:01:98:fd:ef:da:92:a4:
                    72:29:46:72:f1:a9:3b:9a:fa:2b:3b:33:83:b1:ac:
                    b6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:38:1C:56:BB:84:7D:A0:E4:87:4C:E7:83:92:1B:F1:D3:50:DE:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/0C381C56BB847DA0E4874CE783921BF1D350DE14.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.248.0/22
                IPv6:
                  2804:6f78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270662

    Signature Algorithm: sha256WithRSAEncryption
         59:08:18:88:d4:98:66:fc:b9:b2:59:8a:50:cf:d0:3d:14:f3:
         23:28:12:88:b8:48:27:a5:db:e7:dc:d7:6e:1f:6c:16:d5:03:
         e3:aa:2a:5f:c4:a5:9f:d9:bd:5d:a8:95:0b:15:27:4d:7d:fa:
         fb:9a:8a:f4:48:41:6c:b3:50:3f:35:0c:6d:d0:c5:1f:39:d0:
         02:37:56:7f:f2:2c:69:08:31:3c:e8:88:94:38:6e:bd:c9:be:
         88:3a:a9:ce:f4:cc:b9:34:69:b3:d5:8c:90:b7:ec:9c:7d:89:
         91:b4:48:e7:2d:7b:43:4a:15:7d:6e:72:81:0b:3b:34:ca:21:
         0c:66:1c:d4:58:00:cb:f3:27:55:ae:2d:fc:d2:2c:e7:ad:31:
         7d:31:8e:10:a1:a6:6e:38:4f:31:b3:6b:29:71:09:b1:9f:6e:
         45:0d:46:e7:85:1f:ab:3e:63:f3:38:89:1f:f1:c7:29:a7:0d:
         9a:86:9e:81:11:93:09:b7:2f:e6:8d:59:c1:9b:7b:20:0a:07:
         bb:2a:ee:ce:d1:c5:91:fa:8c:15:1c:26:f5:94:b7:db:9d:99:
         73:2a:06:33:49:fc:4f:23:8e:1d:d5:63:15:5b:9c:42:47:fb:
         91:1f:49:1d:67:2e:c1:79:ea:04:9f:a3:45:d8:3b:5b:13:33:
         b0:7b:79:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org