Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer
File:                     10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer (raw, json)
Hash identifier:          HlpusEZemBK4MjUZMuBFgRVoLdTzJkHHKa5yJr5w8ZM=
Subject key identifier:   10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0EC3549311AA773B92AF5C5D324262A1805DF3EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 11:14:08 +0000
Certificate not after:    Tue 11 Mar 2025 11:19:08 +0000
Subordinate resources:    AS: 271504
                          IP: 200.53.64.0/22
                          IP: 2804:7c90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c3:54:93:11:aa:77:3b:92:af:5c:5d:32:42:62:a1:80:5d:f3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 11:14:08 2024 GMT
            Not After : Mar 11 11:19:08 2025 GMT
        Subject: CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:82:1a:b9:cf:e4:44:8d:08:e8:f2:e1:51:
                    d3:59:fa:c5:3a:9b:e4:cd:b9:ee:32:fa:50:d0:16:
                    af:b9:b3:a1:89:66:9a:10:64:62:7b:20:51:20:52:
                    01:29:11:6a:95:81:7b:86:bb:f5:75:57:43:4d:c7:
                    1d:2e:17:48:a7:be:71:9f:ba:f5:5d:12:6f:8f:55:
                    1d:70:04:07:fd:74:8e:58:df:b9:40:9f:2d:f5:b8:
                    3a:d4:cd:05:f5:e3:55:35:54:6f:a9:20:c4:3b:92:
                    22:08:02:d9:b8:4f:79:fe:a2:86:03:52:52:c0:6a:
                    11:4b:2b:96:df:18:b6:d1:f9:5e:f2:de:9f:7c:c6:
                    be:fc:8c:0f:ca:32:0b:89:79:2d:0d:57:65:a5:a8:
                    4f:1d:02:58:96:e6:42:82:c5:44:b6:78:2f:bf:98:
                    84:5c:f1:33:5b:bc:9c:8f:b4:36:bf:6d:c9:36:6f:
                    36:56:d5:49:64:6a:cd:ef:f5:fe:ad:7b:99:56:81:
                    7e:09:6d:b5:5b:84:bd:d0:1f:d4:f6:be:e8:a1:02:
                    b2:6b:00:6c:36:ef:f1:e6:52:ca:5e:06:96:2d:b2:
                    9e:95:ef:03:62:62:5d:57:00:21:fc:20:27:4a:cc:
                    d8:6b:54:97:e8:6a:01:a0:0e:1b:f1:44:cf:94:8f:
                    0c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.64.0/22
                IPv6:
                  2804:7c90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271504

    Signature Algorithm: sha256WithRSAEncryption
         0b:4a:5f:06:a7:ea:25:2c:6f:f7:21:6e:c5:e3:2a:a5:cb:33:
         c3:27:22:f5:23:7a:e3:a2:7b:d6:82:e8:41:c3:65:b3:25:50:
         6a:43:eb:c2:37:97:3f:e4:ae:88:13:59:b6:87:84:60:3c:06:
         46:1b:53:42:3d:f8:a2:6e:da:bd:e7:f9:42:f8:5f:b3:e2:2c:
         64:a0:03:24:e9:fe:50:87:c5:f4:96:a3:90:41:45:d1:61:1b:
         50:87:75:d6:be:a7:de:c5:2b:75:31:ad:73:c9:df:9e:3b:57:
         e3:63:1d:5f:11:53:88:ac:72:d6:2f:3f:fe:3a:b6:cb:37:2b:
         f1:1e:b0:e3:b8:ff:8a:50:08:28:02:72:b7:5c:00:b5:d5:fc:
         4b:cf:cd:82:f5:03:d3:20:fd:d4:4b:95:21:c1:dd:4b:64:a3:
         66:13:57:69:45:f9:0d:37:9a:9e:da:ab:9c:79:cd:b7:c8:a3:
         4e:e5:c5:13:02:58:e3:47:bf:8c:b3:dc:38:f8:3f:8b:89:32:
         c5:ef:ac:c3:e5:ec:80:d1:b3:60:d0:02:20:e2:e1:17:27:eb:
         db:31:9a:2a:cb:67:17:bf:ee:f5:95:3a:5e:32:32:1b:6b:07:
         f4:1d:d0:b6:7d:f3:e7:3c:5a:24:ff:2b:d9:53:46:8b:f9:2f:
         a5:e2:05:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org