Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.cer
File:                     0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.cer (raw, json)
Hash identifier:          TL46JKQ63X1eUnkW0JgSTebl71WrQY8rtssGcFdoJws=
Subject key identifier:   0B:32:0C:2E:72:BB:4C:6C:41:B6:D9:A3:9F:DD:4A:A5:90:C9:9B:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0CF32619A6EC5E9D47C4E4F3225858FBD4F72936
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 18:45:57 +0000
Certificate not after:    Thu 18 Jul 2024 18:50:57 +0000
Subordinate resources:    AS: 267458
                          IP: 45.185.24.0/22
                          IP: 192.141.32.0/22
                          IP: 2804:41d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f3:26:19:a6:ec:5e:9d:47:c4:e4:f3:22:58:58:fb:d4:f7:29:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 18:45:57 2023 GMT
            Not After : Jul 18 18:50:57 2024 GMT
        Subject: CN=0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:52:ea:e1:90:64:39:47:69:ab:cb:93:c6:60:
                    e0:24:e1:6d:08:56:0b:91:c4:80:2e:ce:07:3a:3c:
                    bb:42:70:cd:32:e9:46:39:c4:9c:bb:1a:0e:02:ea:
                    b4:b4:36:f8:0e:f7:e5:be:60:2e:ce:a5:83:94:88:
                    7c:8f:09:93:95:9c:93:df:0b:88:67:3e:c5:02:62:
                    fe:2f:81:b7:df:45:7c:8d:97:69:a6:5e:85:17:3b:
                    41:c1:cd:d1:20:e5:76:67:13:29:eb:4e:ad:45:03:
                    4d:71:8a:23:ff:dd:3d:ab:8e:c1:20:46:f8:15:5b:
                    b0:c5:bf:4d:63:0c:00:b1:f9:aa:aa:85:10:6e:88:
                    b8:cf:6f:b8:5e:1b:a0:c4:75:f5:c1:c5:6e:06:a0:
                    e8:4b:fd:68:db:57:b2:e7:16:74:48:82:e4:36:30:
                    35:ac:d3:5f:24:9f:f5:6a:95:fd:d4:bc:f8:d4:8d:
                    18:bf:d8:fb:78:19:de:6e:96:42:eb:1c:8b:1c:9f:
                    e1:ac:7c:2e:9d:97:cc:ee:60:10:85:c7:b9:9a:5e:
                    83:87:07:84:c7:13:50:19:13:08:a3:58:19:a2:14:
                    16:75:7c:80:4f:2c:8c:80:46:cb:cb:9e:ec:04:d9:
                    a8:18:a8:c5:51:1c:e7:79:c8:56:93:6a:78:5d:55:
                    2c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:32:0C:2E:72:BB:4C:6C:41:B6:D9:A3:9F:DD:4A:A5:90:C9:9B:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.24.0/22
                  192.141.32.0/22
                IPv6:
                  2804:41d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267458

    Signature Algorithm: sha256WithRSAEncryption
         3c:d2:19:c0:c4:fe:15:04:33:74:c0:98:bc:f1:83:16:4d:f2:
         67:b3:58:6f:7b:86:ce:76:92:8f:58:45:ba:b4:4f:76:fa:3a:
         00:bc:a2:41:8a:8b:9f:4e:88:05:ca:20:29:0a:36:1f:39:74:
         04:e3:e0:e8:2a:6a:99:c6:70:de:6a:c8:7b:64:6d:32:5f:ad:
         6e:65:46:aa:6b:b5:1c:9b:d1:13:44:02:e3:7e:ea:b5:5f:6f:
         96:45:60:11:3a:93:b5:dc:6e:ea:60:1b:a1:05:c8:a3:d2:43:
         7e:7d:29:d2:08:c8:bd:be:ad:bc:10:d0:23:15:ec:2b:34:2e:
         d9:3f:f8:9e:3e:cd:27:2b:b6:6d:37:c1:58:72:f7:2b:6c:cb:
         ef:32:cd:d2:fd:05:09:82:66:06:17:9a:74:52:e2:42:75:5f:
         cb:01:8d:a8:ab:ee:86:12:1b:e3:7d:6a:17:1b:a8:6d:0e:40:
         3c:44:e5:40:0a:dd:bd:43:65:f4:4d:9b:ad:ae:2c:a3:55:99:
         fd:bb:f4:01:40:40:7f:83:79:39:4f:42:3f:4a:77:66:c1:4e:
         a9:16:63:50:6e:19:65:87:9a:f0:2a:9e:d1:04:6b:fd:0c:13:
         14:78:94:aa:d7:bb:5d:e6:7a:5e:3c:be:49:2b:fb:34:21:6d:
         49:95:9e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org