Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/10F9F6613952FE3BE61CE03425A3088AECA2929F.cer
File:                     10F9F6613952FE3BE61CE03425A3088AECA2929F.cer (raw, json)
Hash identifier:          nEFVcCwTRHvuiN/HLz406MPp2k8RRnZagSuvYt7GgIA=
Subject key identifier:   10:F9:F6:61:39:52:FE:3B:E6:1C:E0:34:25:A3:08:8A:EC:A2:92:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2796298CA902DBB25BAFEE6BCF0ECF9F1C80D00A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BkQ2gty9aYRaGBosLWw5Dxcq7WP9GRbNAjdD9HYWkqLu/0/10F9F6613952FE3BE61CE03425A3088AECA2929F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BkQ2gty9aYRaGBosLWw5Dxcq7WP9GRbNAjdD9HYWkqLu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 12:57:01 +0000
Certificate not after:    Thu 01 Aug 2024 13:02:01 +0000
Subordinate resources:    AS: 271338
                          IP: 200.50.224.0/22
                          IP: 2804:79f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:96:29:8c:a9:02:db:b2:5b:af:ee:6b:cf:0e:cf:9f:1c:80:d0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 12:57:01 2023 GMT
            Not After : Aug  1 13:02:01 2024 GMT
        Subject: CN=10F9F6613952FE3BE61CE03425A3088AECA2929F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:35:35:38:0c:82:9a:98:7f:6a:31:a8:2a:b9:
                    b3:37:1d:38:3d:9c:b7:7c:cc:44:15:3d:9c:41:3f:
                    a7:98:df:a2:d0:d3:19:36:ba:4b:4b:1e:b0:3e:cf:
                    d3:c5:d9:2d:6b:92:b1:9f:f9:c0:26:b7:18:ba:7c:
                    9e:31:ff:cf:8e:cd:4b:01:e9:e3:11:4c:5d:73:e6:
                    2a:cc:a9:41:21:a4:85:9c:13:e4:1f:3c:97:29:cb:
                    00:3b:09:6a:e2:35:5e:71:b7:5f:8d:89:04:e4:14:
                    c9:ee:57:a5:84:46:31:0b:19:6a:d0:98:b1:12:98:
                    3b:d1:1c:b5:f6:f2:34:07:4a:ff:70:6f:e5:41:18:
                    76:af:a2:64:f5:19:f7:87:41:b7:da:b5:4a:f6:98:
                    3d:6d:1a:fa:74:ba:31:30:b3:1b:81:34:5d:1a:8b:
                    6f:4c:14:2b:69:7e:8e:7b:48:28:4d:04:c9:4d:f5:
                    b8:ca:74:ec:55:ec:7b:1d:7e:2b:6b:75:ff:50:46:
                    91:44:25:3d:30:bb:19:0f:89:37:e4:c7:b7:a7:1c:
                    c2:6f:0f:e1:cc:19:d6:bf:0e:31:a3:03:9f:69:2b:
                    5c:f2:07:a6:7e:59:ac:1a:27:4e:f6:8d:02:6b:44:
                    98:de:2a:b5:e9:35:8a:ee:51:0e:9e:42:e5:49:71:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:F9:F6:61:39:52:FE:3B:E6:1C:E0:34:25:A3:08:8A:EC:A2:92:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BkQ2gty9aYRaGBosLWw5Dxcq7WP9GRbNAjdD9HYWkqLu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BkQ2gty9aYRaGBosLWw5Dxcq7WP9GRbNAjdD9HYWkqLu/0/10F9F6613952FE3BE61CE03425A3088AECA2929F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.224.0/22
                IPv6:
                  2804:79f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271338

    Signature Algorithm: sha256WithRSAEncryption
         ac:31:b0:27:25:7a:a8:bb:b2:56:8e:b1:85:bc:b7:63:e3:a6:
         4b:14:53:37:86:be:e1:5c:c0:d4:ba:eb:66:c7:52:9b:d4:d3:
         b2:3e:58:f2:d1:8c:c5:c4:ea:63:44:23:02:3f:e1:fd:17:1a:
         87:a5:a2:0e:80:29:ca:d1:c4:42:65:9d:6a:86:8e:a1:6c:b7:
         7a:59:84:f1:8b:a3:33:bc:eb:13:c3:60:12:7b:5f:23:e0:65:
         88:fd:66:d0:74:ac:9e:9f:d7:0e:ed:a4:8b:f9:7f:93:c2:4b:
         e5:be:dd:45:2e:c5:3f:cf:7a:83:75:3c:e6:24:28:4f:c2:1e:
         ea:38:20:ee:40:b9:7f:25:5b:ef:98:01:8f:fc:dc:98:6a:a2:
         0f:d1:6d:62:2e:b7:f1:bd:90:6e:7f:ad:38:23:db:f8:85:36:
         66:16:52:61:2b:5a:41:d3:5f:67:38:31:b5:3e:84:43:49:44:
         51:ac:f1:7c:8d:ee:5d:f6:39:67:bc:cd:4a:5f:10:12:6e:20:
         1d:95:c7:4b:94:34:3b:82:d6:c4:cf:32:8c:99:77:e9:30:6d:
         7d:c0:66:9d:83:4e:5e:81:b3:b1:1d:ec:04:fa:96:40:b1:66:
         bb:a5:16:c4:bb:72:a7:3b:92:68:68:92:c8:a7:b9:ef:98:22:
         d9:e0:7d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org