Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/20304921F50C683260D5E68B59BD2DD6CC3AAED7.cer
File:                     20304921F50C683260D5E68B59BD2DD6CC3AAED7.cer (raw, json)
Hash identifier:          wSWLhNHvDOXJzRjv4UzRbZsqkJvE/rmd5Az4Eyca0oU=
Subject key identifier:   20:30:49:21:F5:0C:68:32:60:D5:E6:8B:59:BD:2D:D6:CC:3A:AE:D7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DB14E5950719DE3052B298E71AA86815E75AEC7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/20304921F50C683260D5E68B59BD2DD6CC3AAED7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 25 Jun 2022 18:06:49 +0000
Certificate not after:    Sat 24 Jun 2023 18:11:49 +0000
Subordinate resources:    AS: 271691
                          IP: 2804:7f7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b1:4e:59:50:71:9d:e3:05:2b:29:8e:71:aa:86:81:5e:75:ae:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 25 18:06:49 2022 GMT
            Not After : Jun 24 18:11:49 2023 GMT
        Subject: CN=20304921F50C683260D5E68B59BD2DD6CC3AAED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:d1:1c:b9:eb:cd:cd:eb:75:c8:36:c4:cf:
                    60:cb:8e:f3:a6:00:3f:b8:a3:57:3c:30:70:8f:24:
                    b9:ca:fe:67:a1:11:81:f9:d3:13:76:8b:ee:6a:3e:
                    a0:6a:bd:0f:c6:79:b1:cb:f1:ff:6c:d9:54:99:e6:
                    7f:d9:13:b0:aa:e9:37:3d:c0:2e:58:1c:4f:a4:7f:
                    35:4f:26:b0:25:20:45:f9:4d:70:82:c4:4b:ae:70:
                    98:7a:12:94:bc:cb:c8:06:2c:5b:59:42:b6:84:f1:
                    31:5e:cf:c1:75:2d:7d:85:5f:81:9d:6b:e1:6d:27:
                    14:b3:90:13:dc:9c:2a:36:c7:93:0c:e0:a6:89:af:
                    00:ba:cd:36:e1:d8:c0:aa:04:a3:7b:67:ce:90:89:
                    28:e1:c6:e8:4a:e5:7b:1f:66:e3:21:70:c4:d1:88:
                    ee:0e:1b:05:90:6f:92:66:5b:15:1c:b6:64:5a:f3:
                    cd:36:43:d6:d1:53:73:c3:b7:f1:d2:1f:78:2f:2b:
                    c5:87:80:bf:fe:90:db:cd:f8:c8:08:d8:b7:79:a8:
                    ef:e1:4a:15:47:2b:fc:78:18:b1:b8:28:47:d0:12:
                    a1:5d:66:1f:3a:38:25:14:d8:1e:11:fd:94:89:b2:
                    4c:48:ea:5c:be:b8:4d:4b:5d:d4:fb:b4:cb:52:dd:
                    99:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:30:49:21:F5:0C:68:32:60:D5:E6:8B:59:BD:2D:D6:CC:3A:AE:D7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/20304921F50C683260D5E68B59BD2DD6CC3AAED7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271691

    Signature Algorithm: sha256WithRSAEncryption
         54:d0:5b:d9:fa:0b:97:cb:54:34:49:65:42:18:f6:41:d9:16:
         b3:ef:50:00:6d:61:7f:c6:42:c4:94:b4:eb:36:c2:ff:19:35:
         c7:6e:3e:84:9a:7c:59:52:77:1c:68:8d:9d:34:8e:67:95:b7:
         5e:ed:65:01:c6:f7:60:45:7c:a8:9f:19:af:be:40:0a:e9:d5:
         d1:9c:66:05:7e:95:f3:04:8f:ba:d7:d9:12:84:53:8a:7b:b2:
         18:49:e1:bd:07:79:68:ca:5a:f0:44:5c:2b:43:7b:29:62:df:
         7a:c0:85:4f:be:ec:27:b6:20:19:20:fc:ba:5f:3d:8a:f2:31:
         5a:d6:29:f6:fe:3e:3a:7a:29:c3:61:b7:dd:3a:1b:f5:ca:de:
         96:8c:e2:a1:82:15:87:45:b6:f8:10:aa:b2:92:95:80:81:16:
         fb:a7:5a:ae:7f:52:3c:37:30:6b:b2:6e:c5:31:18:5c:1b:39:
         04:53:72:5b:63:0d:e4:59:45:ba:b5:27:7d:16:56:4f:58:77:
         d3:fb:58:66:e4:87:ac:4d:8f:20:7f:eb:50:8b:68:e5:eb:24:
         75:6e:99:e5:15:c5:30:21:6f:47:d3:ce:59:1d:85:51:93:36:
         40:61:98:c2:a2:0c:bf:f2:99:15:27:73:06:91:aa:fd:cf:f2:
         01:f2:1d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org