Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0100E536BF20B90420E048AF7E00575CAE6DCE39.cer
File:                     0100E536BF20B90420E048AF7E00575CAE6DCE39.cer (raw, json)
Hash identifier:          mquEUjUwBil63s6mDWcXKqPzGM4Qwf34eUaWBw6PM/c=
Subject key identifier:   01:00:E5:36:BF:20:B9:04:20:E0:48:AF:7E:00:57:5C:AE:6D:CE:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4102E744CB0E7563E4597793D7DF623CEFE9682C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/0100E536BF20B90420E048AF7E00575CAE6DCE39.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 13:19:38 +0000
Certificate not after:    Thu 20 Jul 2023 13:24:38 +0000
Subordinate resources:    AS: 266146
                          IP: 160.20.68.0/22
                          IP: 2804:3b64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:02:e7:44:cb:0e:75:63:e4:59:77:93:d7:df:62:3c:ef:e9:68:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 13:19:38 2022 GMT
            Not After : Jul 20 13:24:38 2023 GMT
        Subject: CN=0100E536BF20B90420E048AF7E00575CAE6DCE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:da:2a:33:f6:fa:72:91:ee:64:17:c9:25:b0:
                    4f:5a:1a:b8:29:25:56:9f:ce:49:83:e4:bc:9c:33:
                    b5:f5:11:13:e2:9c:d9:35:80:71:4f:a9:89:d5:2f:
                    49:45:39:5d:e3:4e:ff:fc:09:59:c4:04:f3:cf:fa:
                    ad:cd:c8:a5:7b:08:77:f8:b6:44:62:24:1c:21:db:
                    c8:34:ed:3e:46:b7:c2:95:c1:db:8c:ec:b9:85:53:
                    b2:ce:9a:6e:2c:2b:28:98:44:cc:5a:56:bb:8e:2f:
                    27:bc:ab:7a:ed:e4:a6:ca:a1:53:f2:31:07:65:c0:
                    b7:2b:99:50:38:33:60:05:37:0f:5b:61:80:8a:7c:
                    b4:f0:44:15:00:79:13:72:74:81:f3:49:95:9b:49:
                    98:e3:e2:7f:00:ba:8c:82:4d:b3:11:48:bc:97:d2:
                    f4:16:28:36:79:1f:28:92:28:4a:c8:d3:96:53:bf:
                    d5:f7:df:49:50:67:f6:e7:b0:dd:09:32:e5:18:b7:
                    69:a4:15:99:1b:46:de:63:95:b9:8c:ee:8c:c8:29:
                    f9:ac:7a:19:76:ed:93:a3:40:e8:73:f5:f6:04:eb:
                    bd:65:25:7b:69:80:91:59:87:0d:f1:0f:63:51:b8:
                    4a:b3:dc:8b:48:c8:7f:65:81:c0:15:af:6f:fa:e0:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:00:E5:36:BF:20:B9:04:20:E0:48:AF:7E:00:57:5C:AE:6D:CE:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/0100E536BF20B90420E048AF7E00575CAE6DCE39.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.68.0/22
                IPv6:
                  2804:3b64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266146

    Signature Algorithm: sha256WithRSAEncryption
         2f:39:d4:c0:54:71:46:98:18:77:3a:e0:69:56:77:d6:dc:58:
         d4:50:64:0e:f0:1c:4a:22:5f:b0:3c:7a:77:a1:81:c2:b9:6a:
         05:d5:fa:ef:6f:80:23:89:fe:17:74:09:9b:cc:73:d3:cb:bc:
         8d:8c:68:4c:4d:5f:de:2b:4b:f5:44:ad:66:5e:0e:47:1c:73:
         dd:12:61:bf:11:56:52:cb:b0:47:3c:ba:b4:88:27:56:d3:63:
         df:40:7d:bd:e1:ad:ee:45:35:73:81:4d:85:21:94:f4:b1:0b:
         d3:80:90:2d:9c:99:d0:39:cb:16:c7:92:96:21:a0:89:48:f3:
         6e:06:fa:e7:fa:40:d7:09:b6:0e:42:4a:7d:4b:6f:a8:d2:14:
         1d:d0:33:15:6a:9f:cc:cb:de:52:3e:cb:dd:ba:13:7d:b7:e3:
         c3:e7:8f:d0:58:1f:4b:a3:b9:8e:f7:75:b0:fb:8e:b1:4b:64:
         35:e4:3c:b8:97:4b:0c:9b:13:ef:85:6f:87:0a:86:0b:39:8c:
         84:c8:d7:d0:a6:4b:25:a8:b1:ca:1b:ca:45:35:ee:01:96:71:
         36:d1:37:dc:aa:0a:1b:f5:51:54:44:0c:57:5b:c2:ce:75:7a:
         4e:e1:c8:6b:ba:c9:48:18:03:a8:bd:e3:f4:a5:09:45:a4:8f:
         8a:d8:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org