Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
File:                     10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer (raw, json)
Hash identifier:          +ZKySymYHxpFgyzyXrNZWHLSpnT59NKj1zjkLju4afI=
Subject key identifier:   10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0CF9AF608C0B45DA84285DF4A770909D57A28A56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 21:25:15 +0000
Certificate not after:    Tue 16 Apr 2024 21:30:15 +0000
Subordinate resources:    AS: 262327
                          IP: 177.124.168.0/22
                          IP: 177.129.60.0/22
                          IP: 179.191.56.0/21
                          IP: 2804:1510::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f9:af:60:8c:0b:45:da:84:28:5d:f4:a7:70:90:9d:57:a2:8a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 18 21:25:15 2023 GMT
            Not After : Apr 16 21:30:15 2024 GMT
        Subject: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:6d:a1:3b:69:dc:81:22:12:b7:b6:fd:98:
                    83:2e:91:43:74:53:46:df:56:79:02:18:e8:aa:39:
                    e2:6f:a3:17:40:e0:b1:31:df:d0:61:ec:26:d4:11:
                    92:0f:51:48:0a:b2:65:1d:ca:7b:8e:d9:51:7e:06:
                    ca:cd:3e:44:cf:30:e6:89:d2:f1:c3:9e:3a:be:d2:
                    91:4e:4c:f5:9c:85:b0:38:f0:71:92:7d:d9:43:a3:
                    de:16:e4:4c:02:39:76:47:41:f4:59:2c:b8:c2:52:
                    a5:5d:f4:10:50:a9:82:58:60:6d:6a:64:fd:20:6f:
                    2c:90:57:7d:7a:6b:a7:93:5e:ea:66:0c:07:2f:0b:
                    fc:5f:f9:93:22:7e:05:a6:a0:ba:e7:c3:24:65:0c:
                    e1:a9:ef:3b:10:b0:71:01:89:b8:d0:8c:66:be:a1:
                    dc:91:fb:94:3b:c0:27:df:b0:fe:52:3c:dd:8a:cb:
                    04:e4:b6:1a:32:d3:63:ef:56:af:b1:66:bd:95:3a:
                    72:46:ca:d1:5c:55:2f:20:14:c9:f1:d4:72:1f:da:
                    0a:a1:4b:3b:0d:ed:df:ca:10:ee:ec:95:e4:1f:97:
                    bc:c2:3a:3d:5f:63:2d:0f:f4:c5:de:b6:ff:5f:c1:
                    58:25:ee:a0:f2:86:05:a3:a4:d8:f6:99:6e:f3:ef:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.168.0/22
                  177.129.60.0/22
                  179.191.56.0/21
                IPv6:
                  2804:1510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262327

    Signature Algorithm: sha256WithRSAEncryption
         86:43:86:81:b4:4e:fa:c9:fd:c1:cb:b7:9b:2d:1e:78:32:3f:
         a7:f0:0a:43:05:34:5c:ce:b3:2b:44:00:99:4a:28:ee:14:70:
         e7:b2:0a:86:06:8d:3e:52:9a:45:48:2c:73:0e:70:fb:f0:fa:
         b6:f0:80:5e:2c:cc:85:d6:94:6f:9e:77:b2:86:70:08:c8:7a:
         10:dd:f8:93:5d:c5:c1:ec:ad:27:c8:cc:60:04:06:fb:d8:60:
         ae:bf:dd:66:02:97:99:71:07:06:31:55:12:5c:ef:c9:c7:90:
         aa:73:c1:08:28:4e:46:d7:b3:55:e0:43:3e:d1:52:be:74:8b:
         e0:b0:cb:ec:63:f8:c6:fe:d2:e0:3a:65:31:11:10:92:7f:48:
         14:3a:22:eb:8f:0c:5d:dd:7f:cb:24:14:9c:b7:ee:ff:5e:5e:
         8e:f6:a4:4a:a6:32:bc:d3:9e:4c:29:d7:b7:2e:e0:88:cc:b9:
         72:bb:30:04:93:b2:47:0e:17:7c:1b:61:8c:6a:00:83:a9:0f:
         a1:bc:b4:11:3c:65:d6:89:7b:5c:f0:39:c0:7c:fa:fd:c8:da:
         8e:1f:8e:79:1d:22:f9:43:c8:21:81:d4:f2:52:31:5f:2a:e3:
         d8:8a:b8:2a:08:e5:f4:33:22:58:45:c5:32:47:ab:39:dd:e6:
         86:2f:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org