Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1011C312A65F3318325F50C1B9D907345DF4E5A2.cer
File:                     1011C312A65F3318325F50C1B9D907345DF4E5A2.cer (raw, json)
Hash identifier:          c10HIrQp1UAfnXk94j5iFPs0cSOHd7O3vca3MZFKGjA=
Subject key identifier:   10:11:C3:12:A6:5F:33:18:32:5F:50:C1:B9:D9:07:34:5D:F4:E5:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4FF02AE1575CEFAA862DD97356D7165E8F8BFF44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E2jmTK2NZU8GivFVWJvtrmyLokiMSJAsH3fEvM4mB5MM/0/1011C312A65F3318325F50C1B9D907345DF4E5A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E2jmTK2NZU8GivFVWJvtrmyLokiMSJAsH3fEvM4mB5MM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Mar 2023 02:31:25 +0000
Certificate not after:    Wed 27 Mar 2024 02:36:25 +0000
Subordinate resources:    AS: 271291
                          IP: 200.80.124.0/22
                          IP: 2804:7934::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f0:2a:e1:57:5c:ef:aa:86:2d:d9:73:56:d7:16:5e:8f:8b:ff:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 29 02:31:25 2023 GMT
            Not After : Mar 27 02:36:25 2024 GMT
        Subject: CN=1011C312A65F3318325F50C1B9D907345DF4E5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:67:98:9b:03:00:5a:65:e3:3f:41:f1:74:13:
                    1b:18:27:dc:e6:d9:f8:7b:64:87:36:e4:c5:7f:bf:
                    35:29:61:3b:31:30:08:36:48:7d:2c:a1:e4:cc:89:
                    b9:5c:d0:cf:fd:99:17:ec:32:11:7f:c8:b0:92:49:
                    02:1a:4d:7e:a7:02:f0:91:d2:29:cc:8b:87:cf:5d:
                    20:80:52:93:2b:57:45:a5:2e:1d:c7:c7:62:cb:6f:
                    b9:3f:af:1f:68:75:80:c8:87:e1:df:b7:b0:43:a3:
                    6c:2f:be:a2:f2:41:4f:a9:c6:07:4b:cb:d6:a8:9b:
                    35:e9:01:14:de:15:0d:63:59:27:da:4e:ac:1f:63:
                    0a:eb:66:29:01:72:00:51:f5:d1:88:39:cf:26:5c:
                    4c:07:e1:b0:56:5f:6e:88:64:c2:30:9d:59:2a:82:
                    41:9b:b9:30:54:10:1f:fa:d0:62:3f:ae:62:4a:3e:
                    a7:26:46:fe:7b:b9:ee:fe:9d:d3:19:2e:d8:d6:93:
                    69:c6:b5:d8:99:8a:3d:5f:18:cf:60:55:2b:dd:86:
                    fc:e1:e1:05:74:f5:bf:55:f6:62:42:ee:b4:ae:e5:
                    af:0e:c4:2d:18:c5:ed:20:95:7a:3b:47:6d:3f:ee:
                    81:16:cb:ee:d1:75:96:c4:05:58:c4:a9:2a:a3:ac:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:11:C3:12:A6:5F:33:18:32:5F:50:C1:B9:D9:07:34:5D:F4:E5:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E2jmTK2NZU8GivFVWJvtrmyLokiMSJAsH3fEvM4mB5MM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E2jmTK2NZU8GivFVWJvtrmyLokiMSJAsH3fEvM4mB5MM/0/1011C312A65F3318325F50C1B9D907345DF4E5A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.124.0/22
                IPv6:
                  2804:7934::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271291

    Signature Algorithm: sha256WithRSAEncryption
         89:a8:ec:29:a2:c0:c5:7c:49:09:ac:3e:98:43:66:4c:36:ff:
         36:b2:37:5a:b0:eb:df:a6:3e:d0:06:6c:95:4e:f0:ba:70:59:
         1f:d8:a0:4e:d9:7c:2b:d4:f3:34:e4:2e:bf:6b:e4:5b:8e:de:
         53:c4:48:cc:00:f8:ef:56:5e:85:b1:af:10:76:59:5f:03:df:
         8c:33:a9:53:8d:ad:79:18:2e:2d:b5:a8:26:c4:6e:60:f0:4e:
         ad:9d:26:14:93:82:80:72:43:de:9b:75:a7:07:25:df:12:42:
         a8:cd:fc:f1:be:d5:ae:51:8c:13:cc:df:d1:c1:cd:1c:c0:08:
         11:ed:a0:2f:16:69:c1:07:82:fa:0c:d7:f6:d4:9f:28:36:c8:
         b5:dd:e1:79:c6:06:38:31:a5:31:90:08:28:08:bc:e3:dd:92:
         e3:89:ae:7e:92:fc:97:31:58:a5:23:94:f5:98:b3:eb:61:23:
         7b:98:4e:e9:71:84:d7:ae:7f:99:d2:af:86:64:a8:cd:a3:dd:
         75:8c:45:50:c8:1f:59:64:2d:88:be:45:d1:2d:0b:10:9e:3a:
         ca:18:5d:83:37:0c:e9:ac:50:19:8a:16:b9:58:70:a5:d2:b0:
         15:b0:ab:6c:0e:eb:09:55:58:5c:b3:bd:06:46:e9:53:72:29:
         39:e4:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org