Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/20322B688EA706988352E30B4F9BE226FDB7E002.cer
File:                     20322B688EA706988352E30B4F9BE226FDB7E002.cer (raw, json)
Hash identifier:          XZtT0SBoEpKEp4mEEMUJ90KRsV0ZX1zWA7QdRYVFywk=
Subject key identifier:   20:32:2B:68:8E:A7:06:98:83:52:E3:0B:4F:9B:E2:26:FD:B7:E0:02
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       48E8B1F96EB6EBA82EC49AB7E4E047ACCA60195E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/20322B688EA706988352E30B4F9BE226FDB7E002.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Nov 2022 16:40:56 +0000
Certificate not after:    Tue 28 Nov 2023 16:45:56 +0000
Subordinate resources:    AS: 267229
                          IP: 45.231.244.0/22
                          IP: 2804:4a48::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e8:b1:f9:6e:b6:eb:a8:2e:c4:9a:b7:e4:e0:47:ac:ca:60:19:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 16:40:56 2022 GMT
            Not After : Nov 28 16:45:56 2023 GMT
        Subject: CN=20322B688EA706988352E30B4F9BE226FDB7E002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:24:4d:2f:23:50:2f:7e:f4:6a:bf:2c:65:
                    e0:35:7a:e8:39:cd:77:34:ae:a2:53:3d:4c:39:44:
                    fc:9b:46:e6:d2:dd:4c:a3:50:04:a0:91:31:ca:d8:
                    fe:dd:01:5c:5c:c8:3b:4a:47:d8:d0:14:65:91:74:
                    2f:37:96:49:e7:d6:67:50:07:1d:6b:d3:ae:8a:a1:
                    a3:a6:9c:0a:3a:c9:7f:33:46:b8:fe:3a:2c:86:5e:
                    20:f5:17:3a:70:c9:0a:32:7e:12:f3:61:9a:b5:77:
                    ec:04:4e:09:3a:1a:e1:98:38:09:aa:8f:4f:2c:a9:
                    b1:6a:0f:f8:92:06:03:cc:29:3e:b5:ed:f9:c6:ce:
                    68:e2:76:4e:09:16:10:26:e2:30:dd:d6:1e:df:1c:
                    25:32:cb:76:9c:e7:8c:94:3b:09:b5:bc:5b:f8:23:
                    7f:a2:df:46:76:2b:bc:80:41:0a:d3:0a:e2:d2:48:
                    c6:f7:39:8d:98:bb:9c:5b:45:d0:f2:b1:70:e7:9a:
                    3f:a8:4a:37:c2:42:49:f6:4c:43:cc:4b:f8:cd:77:
                    f0:1d:78:f2:a1:3d:f8:ae:d9:da:6e:36:a5:16:d0:
                    06:f6:5f:7d:c6:07:8e:7a:d7:25:ed:f2:7b:a9:1f:
                    ef:f0:8d:ac:e1:ad:88:2c:d0:a2:04:52:c0:f2:ee:
                    0b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:32:2B:68:8E:A7:06:98:83:52:E3:0B:4F:9B:E2:26:FD:B7:E0:02
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/20322B688EA706988352E30B4F9BE226FDB7E002.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.244.0/22
                IPv6:
                  2804:4a48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267229

    Signature Algorithm: sha256WithRSAEncryption
         09:fa:3f:be:b5:0a:58:74:26:3f:b4:c2:c0:ac:53:fe:33:ff:
         e6:4e:35:2d:e8:1d:f5:83:0b:04:08:e0:7d:4f:97:cb:61:cf:
         00:b0:fc:ee:ee:d7:e9:1c:06:df:a5:16:96:51:d2:59:93:cd:
         d8:d7:8b:7e:c1:ef:17:8e:0a:19:05:55:71:22:3d:93:93:d9:
         cd:a6:73:1d:4f:a8:4f:4a:3d:71:30:3e:4e:2b:61:7f:94:41:
         4b:42:e6:4f:94:4e:c3:98:ac:3b:e0:e9:16:74:90:fe:57:5c:
         8b:c8:e6:e9:61:07:7e:41:dc:b8:32:8a:36:16:96:2e:d0:ac:
         2c:f6:3f:e1:e7:46:f1:3e:69:27:34:38:91:9d:7d:bd:c6:d3:
         b1:52:ca:63:87:80:5d:7a:a6:ac:21:ac:15:9e:0c:2b:74:4c:
         fc:6a:8f:83:a6:d4:25:ba:04:f8:4d:18:a6:f7:39:a3:dd:60:
         30:7d:db:b7:cf:e4:2c:00:50:0b:a7:a5:dd:66:40:03:be:fd:
         97:c7:38:4f:e0:cd:af:32:ba:e0:08:bc:09:a8:4d:28:e1:73:
         79:0d:47:8f:d7:77:2c:f3:f7:06:d9:7b:46:cf:85:ea:7b:22:
         cd:bd:5c:d7:a5:48:31:1e:03:30:59:81:64:c9:ef:ac:57:25:
         e8:59:d8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org