Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/10C34CF76B1B4803F3EBFF24362932010971D3E6.cer
File:                     10C34CF76B1B4803F3EBFF24362932010971D3E6.cer (raw, json)
Hash identifier:          5/JrrGwaHEuvFHpSzhDnnCFWSeIzqJi55QsubTlDFeA=
Subject key identifier:   10:C3:4C:F7:6B:1B:48:03:F3:EB:FF:24:36:29:32:01:09:71:D3:E6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6F8F9CBF1FE5F444595812BACEED4D5670437B9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/wbyGadEkhB9PU8cmd2SSih5Sy5sySfGModmW96mL33R/0/10C34CF76B1B4803F3EBFF24362932010971D3E6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/wbyGadEkhB9PU8cmd2SSih5Sy5sySfGModmW96mL33R/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 17:03:22 +0000
Certificate not after:    Mon 23 Sep 2024 17:08:22 +0000
Subordinate resources:    AS: 271499
                          IP: 181.233.52.0/22
                          IP: 2804:7c7c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8f:9c:bf:1f:e5:f4:44:59:58:12:ba:ce:ed:4d:56:70:43:7b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 17:03:22 2023 GMT
            Not After : Sep 23 17:08:22 2024 GMT
        Subject: CN=10C34CF76B1B4803F3EBFF24362932010971D3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:12:bf:96:1e:31:7c:ee:f3:9f:02:65:03:83:
                    c0:c4:e5:b9:7f:0d:bd:1c:b6:bb:17:d5:4b:be:61:
                    c5:0f:28:35:e0:4b:85:e1:4a:39:8c:49:6e:d9:81:
                    2e:66:d0:20:d3:64:f4:60:b7:fd:65:6b:ee:15:6a:
                    b9:08:15:23:e5:8c:84:b8:71:4a:23:f1:7b:ed:fb:
                    fc:71:ef:b2:4e:3a:d4:2b:b8:5b:a3:d3:b1:63:be:
                    ba:f4:5a:9f:3a:c0:5a:8a:ee:e8:31:c8:56:e1:73:
                    a2:02:8f:13:a7:91:27:21:f2:eb:0a:7c:ca:67:29:
                    5d:dd:53:c1:20:4a:b1:60:02:38:e4:de:d2:cd:70:
                    9c:b6:3d:92:89:4d:d2:0f:d4:2a:32:92:59:07:7c:
                    6b:5b:11:a8:cc:cb:54:74:12:66:ba:60:38:5c:6c:
                    3d:54:21:b2:c6:dc:17:51:dd:3d:79:9f:40:42:33:
                    f8:5b:ff:5a:4e:ce:60:68:c9:81:62:6b:81:e3:9b:
                    b3:1b:bd:6e:34:0f:cf:eb:e9:68:26:a0:48:f5:be:
                    75:04:66:34:f6:7a:e7:6d:cb:e1:13:45:24:74:cc:
                    28:d9:73:c5:d1:45:17:ac:f9:f1:26:2b:85:c4:29:
                    f8:10:a8:9b:88:e0:bb:86:89:b9:68:c7:09:9f:cf:
                    62:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:C3:4C:F7:6B:1B:48:03:F3:EB:FF:24:36:29:32:01:09:71:D3:E6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/wbyGadEkhB9PU8cmd2SSih5Sy5sySfGModmW96mL33R/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/wbyGadEkhB9PU8cmd2SSih5Sy5sySfGModmW96mL33R/0/10C34CF76B1B4803F3EBFF24362932010971D3E6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.52.0/22
                IPv6:
                  2804:7c7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271499

    Signature Algorithm: sha256WithRSAEncryption
         11:0c:4d:c9:12:58:9b:30:00:23:8c:f1:2e:57:f1:08:95:96:
         4d:b5:2d:43:94:0d:d8:65:47:a8:29:4f:6b:8f:e1:ed:91:1c:
         45:53:ca:05:9c:e9:92:ae:19:ba:f4:3b:47:97:fd:97:7b:55:
         7f:f1:89:21:f3:e4:2e:70:af:11:71:0a:20:ae:b3:7d:a1:d8:
         ab:00:85:d7:69:ee:7d:52:85:75:40:f8:a7:50:eb:43:61:69:
         61:a7:cb:88:87:bf:1e:dc:0a:36:6d:be:1a:6d:a4:b3:0e:9c:
         b7:dd:c8:28:4e:e0:8d:e6:01:62:52:03:f6:90:1c:1e:5f:ae:
         fe:f5:97:83:75:de:d1:8b:5d:6a:36:f9:cd:3b:4b:13:c1:c7:
         3b:43:8e:36:d3:c5:ae:83:49:6a:64:b6:0e:e6:cd:4c:4d:25:
         a6:00:ef:c5:3a:c1:dc:f1:fe:4c:60:cc:81:36:1e:d6:3e:96:
         ec:65:fb:ef:11:7f:9f:9c:13:1b:fb:fd:7e:bf:e5:04:5d:1b:
         36:42:f0:a2:3a:12:87:be:4f:f9:2a:e4:55:65:33:82:11:8f:
         ca:59:0d:2a:73:a0:3b:77:31:4c:33:fe:f7:0d:70:44:37:65:
         e1:e9:a9:6f:3c:d4:eb:a5:b3:4a:4f:0c:8b:95:29:11:19:ca:
         46:d8:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:51:25 2025 by rpki-client