Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA.cer
File:                     20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA.cer (raw, json)
Hash identifier:          pyxlQDwkWcdutAGHWYiVW0kFuEiC+RKXN96/2OFPE3s=
Subject key identifier:   20:48:39:86:DF:9B:B3:A6:EA:8D:0E:39:35:5B:79:DC:0F:C5:5E:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C18CDEB1BF92BDC23E4E0745108B63B6E758164
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Oct 2021 14:57:44 +0000
Certificate not after:    Fri 21 Oct 2022 15:02:44 +0000
Subordinate resources:    AS: 264157
                          IP: 138.99.76.0/22
                          IP: 2804:2358::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:18:cd:eb:1b:f9:2b:dc:23:e4:e0:74:51:08:b6:3b:6e:75:81:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 22 14:57:44 2021 GMT
            Not After : Oct 21 15:02:44 2022 GMT
        Subject: CN=20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:f5:ea:69:d9:33:bd:5b:f8:fc:ca:5f:fb:
                    4e:9e:97:51:0a:6c:96:89:dd:9a:82:a0:7b:87:bd:
                    01:5b:d0:a7:d0:1d:4c:2a:d4:2a:00:9a:59:ad:53:
                    2e:5a:de:d7:d8:b8:43:49:05:23:b6:4a:6d:e0:a3:
                    d4:3c:4f:38:fd:fb:6b:ef:c0:de:9a:df:eb:04:b3:
                    1f:e9:d7:fe:5c:fa:01:02:a9:ac:fe:b9:5b:a9:a0:
                    86:8a:27:ba:60:41:f8:67:7c:cd:de:f3:c8:83:0d:
                    cd:03:c4:2f:de:37:fa:76:a5:a0:15:9a:ad:90:55:
                    cc:70:13:af:8c:e5:d8:88:e2:fa:c8:e3:2b:dc:b4:
                    72:f6:ca:93:da:58:51:e6:8d:2a:c3:3d:43:a1:4f:
                    7e:f2:82:22:fd:d1:5b:bb:13:54:ad:73:ce:05:64:
                    86:33:87:e8:86:19:23:49:29:71:79:a2:af:9e:02:
                    09:67:68:a9:8b:f4:74:16:ff:3a:89:b3:40:55:5f:
                    10:4e:78:d0:5c:a8:6a:62:c8:70:7a:a2:b1:be:4c:
                    91:cd:0a:83:02:5f:83:67:6a:7d:f0:5f:d3:5b:be:
                    f0:56:ae:f3:59:49:1d:3e:22:b6:e5:df:0c:7f:28:
                    ff:9a:13:a3:fb:23:ca:82:c6:d5:33:42:11:e8:85:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:48:39:86:DF:9B:B3:A6:EA:8D:0E:39:35:5B:79:DC:0F:C5:5E:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.76.0/22
                IPv6:
                  2804:2358::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264157

    Signature Algorithm: sha256WithRSAEncryption
         3e:5d:f7:86:0b:34:04:89:63:eb:e2:0e:a7:58:09:bf:5f:95:
         53:0d:22:f4:d5:c4:93:dd:ca:71:90:a2:d9:ef:74:48:01:90:
         45:dc:16:da:34:27:b9:c9:ca:2f:1e:2d:9d:a8:f2:1b:52:98:
         72:29:c4:77:2d:bc:67:44:d2:5d:d9:49:88:f9:8a:06:ce:d0:
         03:cd:97:16:8d:08:90:0b:b1:3d:1d:14:60:3f:30:25:e5:95:
         2a:9e:3d:b1:0d:b6:46:f3:db:f2:fb:e4:21:6d:85:d4:c4:02:
         05:b2:ef:ed:45:2a:4e:b9:c3:ff:d3:f7:69:2b:ed:c6:ba:45:
         c9:ae:fa:98:be:5b:17:4c:85:fa:37:0d:4a:ba:f9:1a:9b:cf:
         eb:2a:2a:fd:e2:e1:56:95:f5:13:31:4d:33:2c:4b:f9:4d:b5:
         c1:f1:a9:8a:5f:05:c5:ab:5f:a7:e7:9c:1a:d6:9a:cf:79:88:
         b2:26:46:02:15:a4:8d:5d:1a:f4:1c:0f:e7:92:97:4e:90:fc:
         3a:92:5d:3b:e3:c0:9c:33:6e:bf:49:7e:e9:75:bf:6c:3d:60:
         21:d5:a8:5a:14:4e:fb:01:b4:9a:10:1d:a1:d6:3d:95:26:71:
         f1:8b:69:3a:3c:fd:79:c6:5d:f3:31:83:1d:a5:af:ab:48:8f:
         c8:89:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org