Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BC103095416DE8BCDAE1E02799713CB619DEB786.cer
File:                     BC103095416DE8BCDAE1E02799713CB619DEB786.cer (raw, json)
Hash identifier:          gPJ7hjyhusau5yZHceliZp1zx/jor1O0G3tltA4n1GQ=
Subject key identifier:   BC:10:30:95:41:6D:E8:BC:DA:E1:E0:27:99:71:3C:B6:19:DE:B7:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       74A54EF2B1673C5E212EED07EC31753EA9185B1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/BC103095416DE8BCDAE1E02799713CB619DEB786.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 17:41:50 +0000
Certificate not after:    Tue 05 Nov 2024 17:46:50 +0000
Subordinate resources:    AS: 270338
                          IP: 190.112.132.0/22
                          IP: 2804:6a78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a5:4e:f2:b1:67:3c:5e:21:2e:ed:07:ec:31:75:3e:a9:18:5b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 17:41:50 2023 GMT
            Not After : Nov  5 17:46:50 2024 GMT
        Subject: CN=BC103095416DE8BCDAE1E02799713CB619DEB786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:21:52:d2:25:fc:5b:36:0f:34:e3:28:e2:
                    ce:e3:6f:05:c2:5f:b3:0d:0c:53:98:61:39:b4:2c:
                    4a:f8:49:14:8c:5a:8b:14:63:ef:46:a6:26:eb:7d:
                    b5:8b:70:b0:0d:1c:1a:4f:3e:d1:75:e0:c7:2e:1b:
                    c4:3c:aa:93:7c:09:58:4b:f1:c5:85:36:49:5a:01:
                    ec:f4:42:9e:23:72:92:f8:ef:61:9e:d1:f2:95:f5:
                    1d:35:10:0e:51:dd:73:ae:34:e3:1e:46:a2:c9:91:
                    4f:9f:e6:10:58:99:2a:8a:5f:6a:97:f3:e8:6b:5a:
                    06:20:9a:5c:05:0e:f1:f7:78:78:ee:90:0b:54:c0:
                    4a:1d:23:66:4e:b4:75:e0:6b:04:0d:7d:f8:62:2e:
                    a3:ad:8d:8f:9e:9e:50:bb:a1:4e:38:12:a4:ee:d6:
                    a3:d6:13:2d:f3:5e:ba:88:4a:1b:56:96:53:9d:09:
                    e5:36:a1:95:2e:a7:8c:ba:3f:74:b2:f4:3c:cc:10:
                    cd:65:5d:5f:c6:50:0a:dc:04:a9:12:d1:82:04:76:
                    52:8b:4a:19:0c:c4:62:9a:c7:e2:8f:f1:68:a8:3e:
                    ee:9b:2d:1a:87:f9:03:78:85:fc:20:9b:3e:12:46:
                    21:bb:53:68:45:73:4d:fb:a7:10:9c:94:a1:94:14:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:10:30:95:41:6D:E8:BC:DA:E1:E0:27:99:71:3C:B6:19:DE:B7:86
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/BC103095416DE8BCDAE1E02799713CB619DEB786.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.132.0/22
                IPv6:
                  2804:6a78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270338

    Signature Algorithm: sha256WithRSAEncryption
         71:c6:67:9c:ff:c1:9d:7c:2e:2f:bf:60:25:a7:8e:cd:3f:72:
         a8:d2:ea:f8:04:00:3a:0c:1e:45:a8:fc:6a:ce:d2:44:74:48:
         b1:2c:1d:11:7d:59:1a:d3:ce:3f:17:da:15:37:00:ec:b5:34:
         e6:20:6e:72:86:16:18:df:43:d3:a5:f4:13:a5:fe:e5:73:38:
         9a:40:74:74:38:95:20:0c:07:15:78:eb:28:4e:9b:3f:0b:07:
         df:49:b0:47:8d:02:13:e5:db:c8:33:50:b7:0a:7a:6f:bd:42:
         55:94:05:b6:4d:a4:67:4a:64:9b:be:1a:02:63:ad:9c:58:01:
         c9:9f:06:7b:bc:c3:29:9f:19:13:8b:ed:de:f3:13:43:b5:fe:
         f1:4e:96:5f:7f:ab:f5:55:40:e8:df:ed:eb:82:89:78:59:1d:
         b4:e0:ac:1f:1a:85:cc:91:af:95:db:56:7c:9a:81:83:ba:ce:
         a0:82:a9:68:7e:54:70:0a:fd:8b:fc:f5:0d:79:68:7b:09:38:
         46:08:e4:d3:fc:05:31:27:e0:c3:3e:3d:91:4a:e4:4d:7a:f3:
         34:0f:53:e4:c5:f3:58:21:93:a6:47:90:10:f5:3d:98:00:76:
         c9:b8:79:06:28:22:57:15:9e:b2:cd:1d:15:2f:1f:33:d8:ad:
         b1:02:c7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org