Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/10F082DC3CFC586C64819F5F53897DD2870EA302.cer
File:                     10F082DC3CFC586C64819F5F53897DD2870EA302.cer (raw, json)
Hash identifier:          14P2IJgU2oQ/HPKSqWR4bvxRN6LSQ1LqQTqAY3zMgvg=
Subject key identifier:   10:F0:82:DC:3C:FC:58:6C:64:81:9F:5F:53:89:7D:D2:87:0E:A3:02
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23E585731D681F01B31A3321A747C51641DBF483
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/10F082DC3CFC586C64819F5F53897DD2870EA302.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 14:40:44 +0000
Certificate not after:    Wed 04 Sep 2024 14:45:44 +0000
Subordinate resources:    AS: 263164
                          IP: 191.6.164.0/22
                          IP: 2804:17ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e5:85:73:1d:68:1f:01:b3:1a:33:21:a7:47:c5:16:41:db:f4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 14:40:44 2023 GMT
            Not After : Sep  4 14:45:44 2024 GMT
        Subject: CN=10F082DC3CFC586C64819F5F53897DD2870EA302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:35:e5:72:8a:44:86:2f:31:86:d6:e7:06:
                    32:0d:5d:15:cd:b2:f2:c2:a0:2b:21:1d:34:92:39:
                    32:e3:8a:85:ca:4a:8b:2f:f8:67:9e:5d:8d:3c:51:
                    8a:ca:b6:8f:b7:47:6c:d2:fb:7f:d0:6e:c7:0a:6a:
                    59:fe:30:d8:b4:21:7c:b4:a8:28:a2:a0:33:38:d3:
                    fc:89:1c:8a:1c:fc:cb:bb:c9:e8:9f:9e:f2:30:85:
                    77:7d:57:9f:47:c7:f8:c0:8d:e8:f8:e4:92:78:9e:
                    ac:ca:7f:36:40:24:64:f9:b7:13:bc:04:6f:14:72:
                    43:6f:cc:47:47:03:d4:62:c9:54:3e:1f:1e:0c:81:
                    ad:24:3b:27:a6:13:51:51:e8:46:da:e0:04:06:4a:
                    96:7e:d9:2f:21:04:01:48:bd:0a:4e:ae:09:ff:de:
                    bb:90:72:85:a4:2c:c3:f7:24:0d:17:49:7d:61:5d:
                    e9:b7:d0:37:7e:fc:0a:57:24:59:2d:2e:e3:1c:c5:
                    a8:8f:3b:66:5e:33:23:da:fc:1a:3a:bf:e2:73:fd:
                    72:62:4a:81:f4:f9:a1:31:22:70:f5:ff:51:08:ec:
                    f9:30:2d:e6:fd:d2:3e:a6:4d:d8:6a:4c:a3:82:af:
                    5f:6d:9d:61:64:65:90:60:68:1d:9c:a0:fe:6e:9a:
                    cf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:F0:82:DC:3C:FC:58:6C:64:81:9F:5F:53:89:7D:D2:87:0E:A3:02
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/10F082DC3CFC586C64819F5F53897DD2870EA302.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.164.0/22
                IPv6:
                  2804:17ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263164

    Signature Algorithm: sha256WithRSAEncryption
         96:12:f8:46:08:b6:ed:24:c6:04:83:4b:14:7c:23:1b:d8:99:
         de:c0:a0:a7:0b:b7:f6:fb:8b:90:8c:d9:13:74:49:de:8b:fc:
         d8:8d:dc:ce:bb:cd:2d:c4:77:46:21:cf:b7:91:2b:77:5d:26:
         56:d7:b2:bc:3a:22:a7:ef:98:e8:01:72:6d:38:ce:18:76:80:
         9d:d8:ab:ad:3c:0d:a7:39:d2:31:cd:99:f6:af:36:da:15:68:
         bf:4c:1a:8c:0f:cf:ef:5a:6f:f6:48:d1:5b:4f:15:6a:8d:4f:
         d9:3f:11:e9:de:71:f3:d4:cd:d5:3d:f3:5e:62:69:a9:7b:d6:
         f9:27:f8:f5:fa:2c:9d:db:de:ae:fa:8d:b6:79:88:77:92:b9:
         41:5b:ea:b5:0b:2a:43:e4:30:70:94:81:2c:47:28:e6:72:4c:
         85:9d:7a:85:26:a3:89:5f:56:ca:31:93:71:db:03:bb:18:47:
         61:99:bc:65:1e:be:aa:90:61:cb:c9:a6:e3:c6:86:05:7f:4d:
         d9:47:d4:a0:3b:3c:10:3b:17:74:fd:b4:41:de:7f:13:f8:9d:
         07:a8:63:51:d3:e2:3a:59:d7:80:6a:39:53:33:a1:c7:c5:b5:
         29:7b:3e:58:e4:23:9a:ee:b1:46:fe:6a:61:2e:9b:5f:30:c2:
         d7:2a:c5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org