Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/20462542E7D750389A93D0ECB9BA39FEB7970339.cer
File:                     20462542E7D750389A93D0ECB9BA39FEB7970339.cer (raw, json)
Hash identifier:          5UA1fQZ7y20eMPcMzhwUfhwP17tb9LIbRI8x7Kpu95U=
Subject key identifier:   20:46:25:42:E7:D7:50:38:9A:93:D0:EC:B9:BA:39:FE:B7:97:03:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       426D4424599FF2BD0A4B35B8A8E924D7CDE2F7F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/20462542E7D750389A93D0ECB9BA39FEB7970339.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Sep 2023 18:37:50 +0000
Certificate not after:    Fri 06 Sep 2024 18:42:50 +0000
Subordinate resources:    AS: 266197
                          IP: 160.20.160.0/22
                          IP: 2804:3c38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6d:44:24:59:9f:f2:bd:0a:4b:35:b8:a8:e9:24:d7:cd:e2:f7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  8 18:37:50 2023 GMT
            Not After : Sep  6 18:42:50 2024 GMT
        Subject: CN=20462542E7D750389A93D0ECB9BA39FEB7970339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9e:34:5d:0f:e9:eb:80:17:6f:3e:95:0a:bd:
                    23:04:7d:83:be:85:e8:c4:14:aa:e8:a2:8f:ea:07:
                    a3:2d:3c:1f:7e:92:7f:c2:df:e1:e7:55:59:ba:14:
                    88:5f:f8:3a:f3:89:3a:9c:42:64:5a:da:2c:7b:13:
                    97:1d:1b:4b:b1:77:2c:2f:9e:d2:4f:85:6b:be:83:
                    a0:be:17:ac:4e:89:b9:30:f4:c8:63:64:83:d3:c7:
                    7f:e6:b5:45:b7:18:ee:69:b0:27:10:40:d0:74:04:
                    11:19:0e:64:67:06:5b:f0:12:6c:b1:fb:c9:b9:64:
                    56:09:77:2f:61:d8:f3:d4:d6:17:7b:2d:9c:49:6c:
                    42:6d:f8:8e:7a:15:00:d1:7a:3d:c3:2e:8a:6d:3e:
                    59:ad:31:89:43:0c:31:2d:33:fa:d3:7f:ea:fa:46:
                    89:ca:f3:19:05:1f:9e:93:a8:63:9b:50:60:c0:1b:
                    a2:72:9f:75:de:62:02:5c:29:c4:c1:69:db:21:cd:
                    9f:de:05:04:b8:25:5b:1c:75:49:38:e6:4c:6e:c3:
                    c8:39:f0:72:a3:d8:e1:4d:61:11:04:cf:6f:8a:fe:
                    00:5d:3f:ef:18:91:a3:55:44:cc:1f:74:cc:e1:b7:
                    2a:14:25:b5:38:9d:81:5e:6f:31:f6:69:b0:20:06:
                    50:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:46:25:42:E7:D7:50:38:9A:93:D0:EC:B9:BA:39:FE:B7:97:03:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/20462542E7D750389A93D0ECB9BA39FEB7970339.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.160.0/22
                IPv6:
                  2804:3c38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266197

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:00:7b:58:77:52:0e:c9:77:cf:fe:30:85:57:68:93:18:
         04:ce:82:f9:cb:65:0e:b5:fe:52:01:48:14:75:85:0b:75:20:
         33:33:74:7a:03:49:0a:82:43:3f:2b:ab:6e:46:ee:37:cf:0d:
         a5:8d:13:7c:2d:58:6b:6f:c2:b2:cd:2e:3b:0e:9e:9f:49:dd:
         b2:c1:fd:e1:77:b5:a6:df:b0:0a:85:76:b7:73:39:d5:76:12:
         38:36:13:94:53:c2:cb:77:b1:67:a6:46:64:20:6a:76:40:80:
         a6:3e:41:38:28:5f:25:23:d8:33:5c:45:e4:36:71:88:3b:c3:
         8f:96:09:ca:60:60:d2:55:a6:29:78:29:3b:ae:4d:8d:92:c9:
         40:23:c6:32:d6:c7:1b:90:26:8e:05:e9:41:6b:d0:3b:7f:87:
         05:83:75:95:cf:67:30:6e:f7:70:1e:b9:09:eb:ca:6e:f1:b8:
         05:4e:8a:c3:0f:ea:71:95:50:bf:ea:66:c7:30:df:f5:29:10:
         3d:63:4e:8e:9e:4c:e3:f1:36:08:24:34:5e:fb:35:63:27:e5:
         4b:bc:19:6e:2d:87:fb:2f:90:1b:c6:f8:26:a8:6e:86:1a:3b:
         f7:e6:c7:c5:c2:9a:ce:ab:a7:92:6c:27:d7:b6:60:1b:16:b1:
         92:a0:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org