Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/110FA610D6E683D5AE17AEB246A7E4F59E1191F7.cer
File:                     110FA610D6E683D5AE17AEB246A7E4F59E1191F7.cer (raw, json)
Hash identifier:          EuSxr/xwqiearE4aXHRudSq0X0vdmXx5SQI30/lZICs=
Subject key identifier:   11:0F:A6:10:D6:E6:83:D5:AE:17:AE:B2:46:A7:E4:F5:9E:11:91:F7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6376D34FDC1AD231FE7028AB007DE793EBC54318
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/110FA610D6E683D5AE17AEB246A7E4F59E1191F7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Mar 2023 20:42:53 +0000
Certificate not after:    Thu 14 Mar 2024 20:47:53 +0000
Subordinate resources:    AS: 266399
                          IP: 170.81.92.0/22
                          IP: 2804:3740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:76:d3:4f:dc:1a:d2:31:fe:70:28:ab:00:7d:e7:93:eb:c5:43:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 20:42:53 2023 GMT
            Not After : Mar 14 20:47:53 2024 GMT
        Subject: CN=110FA610D6E683D5AE17AEB246A7E4F59E1191F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4b:f0:84:4f:62:fd:56:eb:c3:a1:f8:41:68:
                    ff:f1:d1:86:2a:bd:e9:62:f4:c7:95:ec:58:1b:84:
                    0c:14:34:69:31:8d:f0:4b:9a:39:58:12:4e:19:0a:
                    24:95:86:20:e3:84:1e:97:a9:f9:ce:54:3c:95:73:
                    8b:e2:b2:a8:9d:f5:97:ac:07:81:2f:0a:10:b8:0a:
                    45:b5:cb:c4:a1:71:35:8f:1b:99:c5:3e:f8:af:22:
                    d1:09:2a:41:57:70:dc:c5:c6:af:1d:ac:34:d5:24:
                    b8:80:29:04:cb:a5:1a:72:b4:f6:6d:f6:59:39:ce:
                    0f:e7:d7:05:40:5f:b9:33:04:44:fd:70:74:2e:b2:
                    78:77:8d:16:80:79:5b:8c:7b:84:30:51:57:43:2c:
                    c8:0b:d8:89:b1:dc:41:e0:ae:46:15:57:0e:ad:22:
                    98:3c:cc:90:30:e2:a8:5b:a2:fe:6c:51:e4:12:41:
                    5c:09:20:1e:3e:c2:42:71:87:a1:9b:5c:81:2f:27:
                    83:00:37:f9:e9:69:23:63:11:cd:87:c1:27:06:d5:
                    53:0c:20:72:a4:ff:a7:14:4a:ad:d6:72:be:ba:39:
                    5d:02:1f:68:af:26:6e:d9:3e:6e:74:92:af:81:99:
                    c2:ac:79:86:cf:a4:24:65:b0:fe:22:1a:b9:59:b9:
                    77:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:0F:A6:10:D6:E6:83:D5:AE:17:AE:B2:46:A7:E4:F5:9E:11:91:F7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/110FA610D6E683D5AE17AEB246A7E4F59E1191F7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.92.0/22
                IPv6:
                  2804:3740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266399

    Signature Algorithm: sha256WithRSAEncryption
         8d:e5:c7:51:bd:31:5c:97:3c:1f:ad:07:34:af:70:77:6d:41:
         8b:02:ce:50:b9:6a:05:3e:2b:be:14:1d:c4:2b:9a:19:3a:81:
         a0:16:90:80:b0:b1:be:b2:b9:56:96:80:e1:bd:24:3c:6b:12:
         3d:22:4c:aa:27:b6:da:99:96:0e:ce:1e:a1:0d:a6:db:4f:3e:
         22:34:aa:e6:16:7b:f4:1c:84:6d:a4:f3:0d:61:3b:a2:c5:45:
         25:5e:40:1a:16:57:30:58:63:d3:e2:1f:39:ad:a2:52:a4:88:
         3b:9c:0d:b1:a1:ec:22:53:d3:e7:b2:8a:6c:ba:a7:a2:4a:42:
         b6:df:ea:46:12:77:8d:7d:e0:24:8f:10:42:21:8b:07:83:37:
         86:ee:73:cd:01:5a:0a:25:d3:f4:03:3a:45:2a:47:e9:26:4e:
         c6:30:50:84:f4:c0:32:23:27:5d:90:c9:0d:8b:67:7f:39:0c:
         72:98:46:d7:23:f1:c4:20:d8:d9:da:c5:72:a8:7c:26:c5:32:
         91:31:9e:31:b9:38:11:33:b2:0c:b8:dc:1f:4c:6c:7c:59:40:
         eb:54:16:bd:28:e8:31:d3:6e:fc:c3:b6:07:8a:5b:af:05:fd:
         bb:87:7c:30:d8:79:24:f2:9b:0a:48:49:3d:b1:9d:d6:df:1b:
         ff:86:3b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org