Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.cer
File:                     13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.cer (raw, json)
Hash identifier:          yuanwYgK6hG3GgOJLNuNdzegTOI4LEZYKJ9DU792xsM=
Subject key identifier:   13:52:0D:AF:F4:07:05:2F:1C:2B:FB:EF:FD:2E:D8:57:1B:8C:20:73
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5900BE31AD03A8680F5D9F14B4802E9C4964C993
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 20:19:52 +0000
Certificate not after:    Thu 13 Feb 2025 20:24:52 +0000
Subordinate resources:    AS: 267987
                          IP: 45.166.188.0/22
                          IP: 2804:5644::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:00:be:31:ad:03:a8:68:0f:5d:9f:14:b4:80:2e:9c:49:64:c9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 20:19:52 2024 GMT
            Not After : Feb 13 20:24:52 2025 GMT
        Subject: CN=13520DAFF407052F1C2BFBEFFD2ED8571B8C2073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:25:0f:28:90:88:67:c8:2e:67:09:78:2a:ee:
                    e3:78:24:08:b5:1e:10:18:27:69:ef:5d:bc:b5:82:
                    13:81:53:b4:c8:58:aa:48:1c:93:2f:7c:ea:63:a9:
                    ce:58:05:2d:b9:b6:e5:eb:ae:53:5f:4d:c4:d0:05:
                    b3:fb:67:4d:43:93:aa:8f:8a:92:1b:c6:bb:5d:71:
                    38:ee:b3:4f:b4:1b:99:b7:c8:55:e8:5f:21:ea:2d:
                    a1:11:f0:06:86:c2:c9:53:69:02:0d:09:ea:ef:dd:
                    8c:84:56:1d:27:a3:8a:17:60:d0:55:31:ba:80:ba:
                    cd:94:1a:e9:13:6f:33:ea:1e:7b:43:86:ba:e8:b1:
                    14:4f:53:c4:21:57:7f:76:0a:98:46:46:bf:02:f2:
                    9e:53:e1:4f:c2:a2:97:03:95:ee:30:99:3a:c5:3a:
                    dd:3b:65:a0:da:77:b6:51:80:f5:9a:13:17:5e:3c:
                    ee:7a:9f:d6:63:df:bb:9f:87:a6:6a:3d:06:20:ae:
                    34:ba:d1:bf:c6:ff:6c:b1:43:cb:4a:5d:47:13:ff:
                    d4:71:af:31:eb:e2:23:cd:20:46:af:19:ee:fc:2b:
                    7b:d4:43:d6:77:40:42:9f:f2:c9:b2:f1:76:6a:6e:
                    77:d3:25:57:3b:f8:15:db:5d:73:69:03:4c:c2:f3:
                    69:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:52:0D:AF:F4:07:05:2F:1C:2B:FB:EF:FD:2E:D8:57:1B:8C:20:73
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.188.0/22
                IPv6:
                  2804:5644::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267987

    Signature Algorithm: sha256WithRSAEncryption
         4a:2f:52:77:19:74:1c:55:8d:e5:56:d0:b1:39:b6:c0:c2:10:
         57:95:f2:52:7a:62:e4:1f:6d:0c:1e:ef:52:e3:95:9e:4b:37:
         09:6e:99:b2:a6:0a:02:60:52:58:47:48:ad:36:3d:c9:be:9d:
         58:8e:3e:05:16:54:df:d7:b4:26:6a:b4:5a:5a:4b:07:ee:af:
         89:ad:61:9f:37:71:eb:24:e6:65:ab:42:a6:8b:c9:7e:f1:32:
         29:60:e4:5f:d1:3e:28:7d:5e:5a:00:cf:69:36:eb:8f:0d:a8:
         e7:f4:c3:a8:03:a2:58:88:2f:94:b0:f3:0b:14:12:ca:bd:49:
         d7:5c:e2:7d:89:b1:c1:79:59:f9:0a:18:17:4a:aa:e7:8c:e7:
         12:73:56:82:9f:f1:b1:70:06:0e:a5:54:cd:3f:15:de:2e:a7:
         22:46:a5:76:7c:c4:65:b2:4d:81:52:cb:73:bc:e9:c4:3d:d5:
         64:57:a4:20:20:81:64:12:82:19:61:6b:de:a4:45:8c:1a:42:
         79:e6:4b:a0:a5:fc:6f:44:50:51:92:38:0d:24:98:dd:b2:98:
         b7:97:35:3c:d8:62:ed:f1:c8:26:ab:73:66:1b:33:a4:f0:40:
         2d:ca:3a:6b:44:bb:b9:6e:f8:53:c4:15:30:1d:fb:ec:df:6a:
         cd:a8:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org