Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.cer
File:                     10909E3FE3537956A00F98A682D8E578DEF82CEF.cer (raw, json)
Hash identifier:          OZe0o6/QEA7hcBtWoornfl6XjBwznOZ/aXssJNNEDhA=
Subject key identifier:   10:90:9E:3F:E3:53:79:56:A0:0F:98:A6:82:D8:E5:78:DE:F8:2C:EF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       299346A1BBA278332BE029FCDF4F8E938DBCC025
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Dec 2022 22:38:49 +0000
Certificate not after:    Sun 17 Dec 2023 22:43:49 +0000
Subordinate resources:    AS: 28605
                          IP: 179.127.112.0/22
                          IP: 201.20.144.0/20
                          IP: 2804:3c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:93:46:a1:bb:a2:78:33:2b:e0:29:fc:df:4f:8e:93:8d:bc:c0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 22:38:49 2022 GMT
            Not After : Dec 17 22:43:49 2023 GMT
        Subject: CN=10909E3FE3537956A00F98A682D8E578DEF82CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:33:00:05:3f:7f:90:79:85:bb:29:e6:a5:
                    94:26:c4:61:f2:1e:8f:d9:73:49:0c:16:58:a7:cb:
                    f1:11:e4:1e:15:3e:3e:88:38:ef:0e:f9:0f:d6:58:
                    b4:d8:7f:b4:cc:b0:11:43:c3:7b:7d:af:ee:66:40:
                    5c:78:54:fb:0a:c7:4f:4d:0d:f6:a2:45:92:96:6e:
                    78:bf:80:76:f4:d7:cb:a9:1a:cb:43:9c:3a:6f:dc:
                    6c:c8:32:8c:03:33:b8:52:0e:94:31:1c:8d:d0:27:
                    5d:7a:fb:16:cc:c9:c8:26:30:a7:e1:c6:97:ef:93:
                    13:1a:44:17:b5:0f:33:4a:3f:ec:d0:a9:1d:49:16:
                    c7:c3:ac:01:5c:5d:db:15:c0:37:b8:dc:fb:42:2c:
                    23:d4:e5:07:a7:33:c3:59:51:2b:01:6a:91:5e:61:
                    03:d1:e2:3e:92:4a:5a:d4:c5:14:88:7f:06:e0:e8:
                    44:a7:b6:68:d0:6d:c8:0e:df:cd:c7:34:76:02:13:
                    df:ce:97:fb:64:e9:70:35:a3:72:8a:d1:11:54:02:
                    6d:27:e4:14:f9:84:9e:bb:b4:1b:ff:bf:d3:9b:e7:
                    4b:ae:e1:d2:62:96:99:06:95:43:78:6b:d9:48:c8:
                    9b:4e:5d:93:d8:be:a5:aa:5f:57:84:52:3d:93:e7:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:90:9E:3F:E3:53:79:56:A0:0F:98:A6:82:D8:E5:78:DE:F8:2C:EF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.112.0/22
                  201.20.144.0/20
                IPv6:
                  2804:3c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28605

    Signature Algorithm: sha256WithRSAEncryption
         74:be:60:1e:f4:82:b6:c2:e0:8a:6e:8b:53:2a:88:41:a8:bc:
         4d:eb:6e:27:bf:03:2a:fe:47:28:b0:79:72:f3:fa:34:c8:2a:
         e4:cc:05:95:46:30:f8:e6:3e:3b:72:59:c7:bb:89:41:1c:80:
         47:fe:24:9b:97:f9:00:ba:9b:5a:71:27:45:0a:73:a9:8c:ca:
         b4:de:44:99:4a:4b:e4:d8:46:a4:b3:3f:79:17:bf:f8:51:ca:
         1e:d0:23:18:ce:00:84:8b:15:48:9b:f2:0f:57:de:27:74:96:
         76:24:e5:ab:ef:13:dc:b0:75:44:f7:90:c9:fe:22:29:10:a6:
         94:70:23:eb:b1:04:74:15:b6:9c:d9:ab:d0:16:28:34:47:c9:
         74:7c:07:d0:61:7f:86:5c:76:24:35:58:b0:7b:b6:40:6c:5d:
         2b:d3:18:a8:b5:37:85:33:65:9b:e7:11:c3:7b:73:5f:48:ba:
         ca:1a:1b:f5:4d:91:1e:a2:fe:66:26:fc:18:b0:cf:61:a6:21:
         d7:27:66:fd:b1:b4:4e:48:5d:ec:ed:bf:27:28:53:cb:65:48:
         8e:de:d3:84:3d:d9:05:d2:a3:f1:b5:df:c0:2b:5e:85:9b:0e:
         26:fe:fe:eb:19:1c:0c:8b:21:fe:2c:b7:0d:44:03:f9:2e:b6:
         4f:7e:ff:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org