Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/100D641D9246825DB5F200B9152379E6B866AE90.cer
File:                     100D641D9246825DB5F200B9152379E6B866AE90.cer (raw, json)
Hash identifier:          tXGCjdpPkjzNvB6MzOBvVBuJrFaV0BfLHbKp5UhKeIU=
Subject key identifier:   10:0D:64:1D:92:46:82:5D:B5:F2:00:B9:15:23:79:E6:B8:66:AE:90
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C553166315020871BD4E1BE38DF8A6AA92B3D62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/100D641D9246825DB5F200B9152379E6B866AE90.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Sep 2023 12:17:28 +0000
Certificate not after:    Sat 28 Sep 2024 12:22:28 +0000
Subordinate resources:    AS: 264910
                          IP: 168.227.116.0/22
                          IP: 2804:2fc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:55:31:66:31:50:20:87:1b:d4:e1:be:38:df:8a:6a:a9:2b:3d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 30 12:17:28 2023 GMT
            Not After : Sep 28 12:22:28 2024 GMT
        Subject: CN=100D641D9246825DB5F200B9152379E6B866AE90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:87:5d:7e:b3:0d:2e:a1:4b:23:b2:2b:6d:
                    e7:4b:f0:a6:11:bb:eb:a0:16:b6:77:46:0c:34:04:
                    7a:bc:6a:68:ca:a2:dd:2a:c0:d5:1b:a3:5f:f7:d7:
                    f1:ec:25:25:f6:8a:92:12:ec:ea:ad:42:39:81:6e:
                    10:6a:ea:db:b1:7e:bb:5b:63:3f:28:ba:41:d4:06:
                    39:4f:86:01:fc:19:59:bf:0c:2b:12:0f:d3:84:68:
                    e4:b2:33:17:80:db:1b:be:a8:f0:56:c2:dc:2a:65:
                    f7:88:c8:6d:cc:59:07:ce:a6:b5:a8:ae:79:f9:4a:
                    18:d8:38:0c:aa:4e:77:cb:e4:70:ea:43:e2:e6:d9:
                    8e:d9:7a:3b:9c:18:14:5d:9a:30:81:f8:97:e5:e5:
                    be:e0:d4:b1:02:32:a6:c1:52:f8:aa:79:64:44:50:
                    46:63:f8:d8:ea:92:b9:c6:1e:86:16:24:40:4c:c9:
                    94:b5:c0:11:56:d3:32:e3:ab:1a:c4:b5:22:b6:42:
                    2f:41:8a:36:93:f4:af:55:0c:7f:b4:3a:37:02:85:
                    cf:11:b5:bb:d9:e8:30:4b:0f:b1:82:df:43:10:99:
                    ca:af:47:a3:1b:13:7f:c3:de:38:22:bc:2c:90:7f:
                    04:0f:44:34:45:36:ee:cf:ff:e9:8d:30:87:d2:d7:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:0D:64:1D:92:46:82:5D:B5:F2:00:B9:15:23:79:E6:B8:66:AE:90
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/100D641D9246825DB5F200B9152379E6B866AE90.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.116.0/22
                IPv6:
                  2804:2fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264910

    Signature Algorithm: sha256WithRSAEncryption
         b4:f4:e2:65:7e:32:0c:31:9c:e3:00:07:c6:8a:a1:f3:7d:22:
         d2:1f:d2:cf:24:d5:ee:b9:53:6b:37:92:c0:1b:80:7e:67:9f:
         9b:1b:27:0a:bb:f3:fe:7c:db:ec:d7:0e:c8:20:74:59:4a:fc:
         86:f3:f0:c6:9d:53:69:0d:4b:9e:0b:e9:14:53:bc:8f:e3:10:
         5b:fa:d9:9d:e1:c1:16:e8:29:05:25:a5:3f:36:7c:16:91:aa:
         97:63:e1:ee:e8:3a:46:88:e3:e3:77:a9:47:c6:23:cc:60:03:
         45:00:6f:ec:1d:c5:02:05:69:22:7f:ab:50:e9:17:44:2d:36:
         b4:65:95:6b:b3:b8:b0:1a:6a:1a:8c:ca:98:ae:d8:94:70:28:
         f1:c5:fa:a9:14:38:5f:8c:24:3a:c4:3a:c6:69:a8:16:4f:10:
         b1:24:3c:ca:85:6a:43:d1:e7:bf:db:a6:11:e9:13:8e:8c:9e:
         4f:14:6e:35:6c:4e:e4:5b:7e:3a:82:76:d7:72:99:bd:ea:d6:
         14:65:cb:53:24:9e:d0:4e:a8:56:71:a5:04:c1:79:b7:5d:85:
         4e:31:7f:02:24:c4:60:1f:0d:38:bd:e6:f5:71:64:ac:05:4c:
         9d:40:98:3a:07:62:de:c3:48:4e:4c:e0:17:86:a3:10:a0:00:
         ca:48:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org