Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.cer
File:                     10968BD5A3F23304B30A228DAF88BF92B5DC5B23.cer (raw, json)
Hash identifier:          GMiMJi1jMstgY06VAPm9HkUX2fd63voIbEE1UVu0X8w=
Subject key identifier:   10:96:8B:D5:A3:F2:33:04:B3:0A:22:8D:AF:88:BF:92:B5:DC:5B:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       024A043140FC00034943AEB0424C323E1EF700DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Oct 2021 01:13:45 +0000
Certificate not after:    Tue 11 Oct 2022 01:18:45 +0000
Subordinate resources:    AS: 266039
                          IP: 45.4.60.0/22
                          IP: 2804:399c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4a:04:31:40:fc:00:03:49:43:ae:b0:42:4c:32:3e:1e:f7:00:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 12 01:13:45 2021 GMT
            Not After : Oct 11 01:18:45 2022 GMT
        Subject: CN=10968BD5A3F23304B30A228DAF88BF92B5DC5B23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c5:96:d2:7c:95:a4:f0:f0:4f:58:13:05:ab:
                    ba:38:d2:1b:fb:96:cd:c7:47:3f:8a:f7:5f:0c:92:
                    13:fa:8b:ca:0a:36:60:e0:5c:b1:10:90:d6:a0:eb:
                    5e:0f:2a:94:ff:aa:3e:90:9d:83:b1:a7:42:99:fd:
                    83:a8:a2:71:23:71:0f:20:2f:90:db:43:ae:90:6a:
                    fd:4c:b4:42:ab:05:39:ee:67:ea:c4:bb:b4:73:2f:
                    af:62:fd:e8:8d:1e:ad:84:09:1c:10:57:4c:42:b5:
                    d2:64:0c:1b:50:6e:58:d1:ce:41:74:eb:25:69:e1:
                    02:c1:ca:bf:0f:40:48:3b:16:30:3b:a9:ba:c8:68:
                    ec:18:89:8f:57:86:21:0e:2a:8c:7e:1b:ff:83:6b:
                    b8:f4:9b:0b:5f:05:b6:ca:ac:79:52:e8:d6:4b:2e:
                    1d:c3:12:c1:04:92:de:35:2a:b4:f6:43:6c:6c:92:
                    8d:63:8c:66:73:57:cf:75:69:0d:a8:82:0a:f9:9d:
                    de:c6:c7:3f:21:55:83:32:61:65:de:96:4a:a8:a7:
                    19:28:ca:25:6d:9f:73:84:8b:62:ef:92:b3:c5:cc:
                    69:1e:e9:7d:9b:e2:72:e8:3d:0f:77:d0:6e:35:7a:
                    9d:c3:09:75:c0:24:80:10:a5:2f:85:74:09:42:b0:
                    13:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:96:8B:D5:A3:F2:33:04:B3:0A:22:8D:AF:88:BF:92:B5:DC:5B:23
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.60.0/22
                IPv6:
                  2804:399c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266039

    Signature Algorithm: sha256WithRSAEncryption
         74:77:bb:41:37:d8:dc:78:e7:89:f4:31:57:04:e9:e4:93:16:
         1d:32:1a:2c:04:21:41:e5:8b:f0:d4:45:b8:48:b1:86:70:49:
         59:27:85:56:77:2e:db:8d:50:00:08:86:24:1d:a9:ee:ec:9f:
         ad:f9:03:ce:42:2f:66:19:24:d6:e0:8c:41:3a:30:86:47:e6:
         fe:23:fd:8c:b6:11:3b:15:75:d3:41:d4:db:de:ce:0e:57:21:
         78:f2:65:b8:b7:18:a0:98:be:37:7c:26:67:6d:d1:0c:8a:c3:
         84:68:15:f5:41:4f:0c:27:fd:64:ee:cb:24:ac:73:48:52:2f:
         a5:2c:69:a3:ea:57:03:94:41:58:b7:d8:21:98:54:ca:88:ab:
         5e:8e:e9:af:0f:e0:d2:fa:11:59:2f:2a:68:36:ca:c2:4a:70:
         00:95:8d:14:f8:6f:2c:4f:2f:ae:07:58:a6:22:be:5f:33:86:
         e0:e2:2c:b2:b4:27:f0:17:a0:7b:37:60:86:7c:c2:25:b7:3e:
         cf:06:0a:ca:05:61:4d:f9:9e:c2:60:ba:fc:00:a4:3c:ea:06:
         78:83:12:d8:d6:dc:eb:50:23:0e:37:5a:b8:3a:91:5f:76:00:
         2b:ca:43:c8:03:c1:dc:57:59:f4:13:d8:f7:36:b4:cc:7f:0a:
         e1:3b:e4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org