Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.cer
File:                     20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.cer (raw, json)
Hash identifier:          70OMLMrZV5KwxldP5J42v3FfqEMxRMKj4v1M+j3wNv4=
Subject key identifier:   20:AD:4C:D5:EF:5C:75:5C:8B:0F:92:F4:F9:C8:90:72:AD:B6:52:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C1C3FD8FD90A1E89B475143FEDA45C310BA86A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Dec 2023 16:02:18 +0000
Certificate not after:    Thu 19 Dec 2024 16:07:18 +0000
Subordinate resources:    AS: 273713
                          IP: 2804:8b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1c:3f:d8:fd:90:a1:e8:9b:47:51:43:fe:da:45:c3:10:ba:86:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 21 16:02:18 2023 GMT
            Not After : Dec 19 16:07:18 2024 GMT
        Subject: CN=20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:44:4f:54:3b:80:33:5f:22:5b:84:df:89:
                    49:3d:a7:59:2b:c9:1c:5d:c6:7d:e7:a6:e4:34:4c:
                    f4:53:d1:79:4b:a6:77:49:e5:5c:36:7b:f7:f0:b2:
                    f1:b9:00:05:75:54:ef:31:a4:a4:45:46:4a:46:7a:
                    b1:c8:1c:bb:4b:b9:15:f8:8e:14:ab:16:86:cd:31:
                    e3:f8:3b:f4:05:c2:20:01:1c:8f:28:b1:14:fb:5a:
                    7a:12:18:bf:30:29:d3:23:79:87:b1:c2:25:1b:70:
                    cf:1e:04:03:25:fa:7e:4f:d5:e0:2f:aa:f8:7b:c9:
                    89:f4:f5:17:31:24:f5:9e:a6:05:0b:3a:06:d1:f5:
                    e7:b5:8b:09:ee:f9:9a:30:13:a3:55:23:10:a5:b3:
                    38:7a:1f:22:a9:13:b9:3b:38:7b:df:f1:ac:c2:56:
                    38:90:ac:64:fe:f1:a9:3f:45:38:dd:cf:79:62:74:
                    6a:00:5c:71:45:9f:ff:ee:08:52:42:a8:6e:38:db:
                    cd:04:bd:4b:1f:d9:f7:72:e1:af:8c:49:9a:55:e1:
                    72:7f:04:44:04:75:e9:76:24:1f:33:3b:f4:d8:38:
                    96:47:43:ec:0a:3d:3a:c7:07:f0:ea:4e:8b:d8:62:
                    75:92:93:78:d6:f8:c2:45:bf:e2:91:8a:a1:75:ae:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:AD:4C:D5:EF:5C:75:5C:8B:0F:92:F4:F9:C8:90:72:AD:B6:52:86
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/20AD4CD5EF5C755C8B0F92F4F9C89072ADB65286.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273713

    Signature Algorithm: sha256WithRSAEncryption
         54:06:13:fa:f9:94:f0:b3:12:85:3c:42:d2:39:b5:f9:95:fd:
         71:24:ce:bb:97:88:ca:c6:7f:b9:5f:16:4b:7b:28:32:c8:cd:
         fe:b8:56:62:5e:7e:1d:9a:f6:e5:95:55:2f:4e:d2:29:66:74:
         ae:dd:3d:89:b8:82:58:d1:a0:80:c2:dd:33:f7:7c:72:3c:03:
         61:82:0b:df:25:f3:a3:4a:07:d7:d5:af:52:4f:89:bd:cb:04:
         67:bb:91:66:7c:52:46:56:b6:bd:8e:49:10:70:60:25:55:59:
         f6:3d:0f:de:c7:2e:72:f7:08:62:b6:2f:e1:8a:fc:ab:ef:5c:
         56:32:1f:ce:50:76:4a:61:8d:39:c4:fa:09:48:a8:31:03:bc:
         bc:76:45:f1:0f:2a:a1:20:0a:8b:ec:8d:90:9c:8f:dd:00:a0:
         93:a2:4e:02:89:2c:33:a8:c3:f6:ff:39:f7:1c:a4:9f:ca:98:
         f3:32:3f:69:f2:80:e6:18:dd:1a:32:7c:21:40:69:f7:e9:69:
         f8:8a:69:7b:a8:e2:7b:b4:7c:3c:15:5e:a0:1a:c5:9f:4e:50:
         b6:90:ec:c1:7d:e6:9b:93:6e:77:57:d7:4d:36:71:66:fc:87:
         aa:ca:73:ee:58:29:94:1f:a6:1d:67:79:6a:e3:00:6e:ef:d8:
         9f:ed:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org