Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9C10661843B8940941B0942E92BE662CB14B2D68.cer
File:                     9C10661843B8940941B0942E92BE662CB14B2D68.cer (raw, json)
Hash identifier:          IOBUsUyZb+dNlhyRqp3Rrq/4bO03BKldADjDgytaEPI=
Subject key identifier:   9C:10:66:18:43:B8:94:09:41:B0:94:2E:92:BE:66:2C:B1:4B:2D:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       528100294E842CB8A9487E553E6664001F802C41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/0/9C10661843B8940941B0942E92BE662CB14B2D68.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 24 Dec 2023 02:20:28 +0000
Certificate not after:    Sun 22 Dec 2024 02:25:28 +0000
Subordinate resources:    AS: 271038
                          IP: 177.129.228.0/22
                          IP: 2804:7550::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:81:00:29:4e:84:2c:b8:a9:48:7e:55:3e:66:64:00:1f:80:2c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 24 02:20:28 2023 GMT
            Not After : Dec 22 02:25:28 2024 GMT
        Subject: CN=9C10661843B8940941B0942E92BE662CB14B2D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:59:f3:9a:f4:4d:7a:a0:17:83:f7:c8:dc:
                    15:0e:ba:d5:d8:a7:bc:7c:0f:da:cf:ea:00:6f:07:
                    03:7f:d4:01:47:df:51:61:93:04:16:45:31:14:da:
                    fe:9a:26:4b:dd:6e:af:ff:8b:1e:e1:5f:27:7b:22:
                    a3:e3:d8:5e:9c:9b:06:14:cd:a6:ce:89:34:4d:d7:
                    6a:e5:90:50:ee:3f:0f:12:42:d2:8a:85:57:e2:9d:
                    45:ac:42:54:75:76:70:4a:6d:4e:c6:09:93:b8:10:
                    39:8e:cf:32:60:6b:d0:fb:8a:9b:88:ad:25:fe:df:
                    c9:f4:ea:ab:a7:dd:39:b7:a8:9c:66:63:ec:21:22:
                    e1:86:35:ed:b5:e7:8d:63:67:bb:cd:7d:4c:f3:56:
                    af:a8:4f:a6:8d:4f:eb:4b:fe:ac:f2:29:0d:8a:c7:
                    00:ee:6f:ae:60:bd:da:f0:ca:80:ae:21:ad:e0:59:
                    7f:80:1f:8f:a9:d6:1e:c3:e3:b7:70:00:19:eb:da:
                    13:31:7e:87:a5:eb:37:c8:6c:d5:4a:70:ff:30:8d:
                    ed:24:61:0a:b6:5d:3b:83:32:79:bc:e1:79:90:31:
                    b7:2d:5a:a0:94:5b:55:0d:99:ea:e0:c1:4e:96:f4:
                    9e:50:7e:c8:6f:44:2c:e2:ff:81:52:39:fb:29:45:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:10:66:18:43:B8:94:09:41:B0:94:2E:92:BE:66:2C:B1:4B:2D:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/0/9C10661843B8940941B0942E92BE662CB14B2D68.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.228.0/22
                IPv6:
                  2804:7550::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271038

    Signature Algorithm: sha256WithRSAEncryption
         36:61:89:bc:8d:3e:50:31:c0:ba:b0:ec:67:72:18:12:93:e9:
         7d:68:50:8c:b9:a5:25:7d:02:aa:ba:13:b0:56:8a:bf:07:fb:
         33:ce:53:db:05:71:e9:4a:25:14:07:46:39:64:5c:ed:c1:b0:
         f1:2c:48:99:3f:ff:8b:00:86:66:98:68:19:af:6d:c4:9c:bd:
         e5:65:c1:76:76:a7:c5:34:88:65:77:62:8e:f8:c7:0b:a7:c3:
         39:5b:23:4b:bc:21:87:a3:c7:6c:96:a1:d1:bc:09:0e:f9:32:
         2f:db:fc:93:c5:92:46:7a:a3:c6:06:6b:d8:99:46:d8:11:a3:
         18:3b:a3:8a:bf:86:36:1a:81:bf:1d:2d:62:cb:b6:aa:ae:1f:
         0d:b3:81:3c:a6:c5:09:34:ca:33:c4:b8:f7:39:a4:9a:6f:84:
         05:5e:ec:09:2b:4e:6b:70:37:41:66:ae:54:ec:7e:82:83:91:
         b3:da:bf:c7:c0:d4:9e:7a:06:84:22:c5:4e:c2:bd:eb:ca:60:
         a8:46:88:52:20:4b:c9:00:f6:d8:49:60:54:5d:71:a2:25:14:
         0e:47:8b:1f:d7:8d:fd:d0:47:f1:b5:f4:10:3d:aa:20:a2:ad:
         e0:86:63:93:5f:74:ff:df:66:cd:e5:db:2d:4e:60:05:9c:e2:
         a2:8b:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org