Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/20C37C967AD9517587DAEF31174C2C326A14929F.cer
File:                     20C37C967AD9517587DAEF31174C2C326A14929F.cer (raw, json)
Hash identifier:          rVUiH0UZzJN/ZZ3nPUxI35x8+ciYommBB0mqj8k3x+I=
Subject key identifier:   20:C3:7C:96:7A:D9:51:75:87:DA:EF:31:17:4C:2C:32:6A:14:92:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E53854B7F24909AB96020148EA28E74767CA5D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GJ36bow4CKhHNtpoQTvcppaiwCModEyyQCJ74gZXiamJ/0/20C37C967AD9517587DAEF31174C2C326A14929F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GJ36bow4CKhHNtpoQTvcppaiwCModEyyQCJ74gZXiamJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Sep 2023 15:51:58 +0000
Certificate not after:    Fri 13 Sep 2024 15:56:58 +0000
Subordinate resources:    AS: 269142
                          IP: 45.180.160.0/22
                          IP: 2804:600c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:53:85:4b:7f:24:90:9a:b9:60:20:14:8e:a2:8e:74:76:7c:a5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 15 15:51:58 2023 GMT
            Not After : Sep 13 15:56:58 2024 GMT
        Subject: CN=20C37C967AD9517587DAEF31174C2C326A14929F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:cc:b3:7e:84:ba:50:99:7f:d5:b8:81:cb:bb:
                    e2:63:9c:39:79:e5:87:65:29:31:40:47:11:e4:dc:
                    c9:d6:f2:65:40:76:59:17:f1:d2:67:8a:58:4a:51:
                    3f:e1:d2:5c:dc:7d:70:3b:0e:09:0f:40:29:d1:a7:
                    2b:9a:54:07:7d:d0:55:0e:b5:9b:e1:62:73:6c:39:
                    ad:48:00:0f:f5:33:ee:f7:3b:cf:9a:00:77:ff:9a:
                    89:13:35:ce:a5:c7:6a:5c:b7:63:5c:f4:69:03:99:
                    48:ac:45:ea:0a:27:c5:73:41:51:eb:62:7f:1d:02:
                    6f:d3:ae:de:5d:e9:e0:f7:b7:32:db:51:2b:f1:9a:
                    b2:31:92:e9:04:d8:ff:bb:d3:c8:3a:af:7d:14:9d:
                    85:96:b1:9e:f6:1c:23:be:59:2a:98:ae:ba:bf:40:
                    aa:61:c6:9f:16:2a:24:6d:29:d8:91:b3:73:10:af:
                    43:34:0c:33:d7:cb:8f:9d:08:dc:56:61:35:bc:29:
                    10:7c:c6:c1:88:72:15:a6:a7:b8:c1:91:60:20:d0:
                    19:d3:05:64:6e:fa:8b:8f:0e:a1:44:7d:21:7d:63:
                    ab:b5:38:da:59:9c:67:36:26:68:b5:57:a1:6e:fa:
                    30:4a:6c:52:f6:42:6a:c3:d4:42:c2:d5:88:94:da:
                    08:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:C3:7C:96:7A:D9:51:75:87:DA:EF:31:17:4C:2C:32:6A:14:92:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GJ36bow4CKhHNtpoQTvcppaiwCModEyyQCJ74gZXiamJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GJ36bow4CKhHNtpoQTvcppaiwCModEyyQCJ74gZXiamJ/0/20C37C967AD9517587DAEF31174C2C326A14929F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.160.0/22
                IPv6:
                  2804:600c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269142

    Signature Algorithm: sha256WithRSAEncryption
         84:4c:42:a2:d6:d3:2a:4d:7d:64:07:b3:89:bc:ac:0f:bc:33:
         c2:3c:be:62:66:65:88:e4:94:6d:e7:a7:35:a4:8b:b6:68:84:
         51:69:2e:ae:28:62:06:cf:35:ad:a3:f7:99:5a:ff:cf:63:a3:
         a1:13:61:b6:08:5c:7b:05:b2:91:5c:fc:cc:19:f9:3b:aa:cb:
         d5:09:65:f3:b3:fa:3a:90:59:43:60:14:d5:68:4c:6e:fb:be:
         81:b2:9d:c8:b7:a3:01:5c:c6:22:cc:d7:7d:7d:27:8d:d3:a9:
         ab:64:81:32:79:57:95:6f:81:17:84:ac:42:ce:00:24:65:37:
         7c:e3:ac:01:2d:9f:d2:2b:a8:17:2a:e6:72:05:ac:85:63:bf:
         49:6b:99:24:af:ca:9d:69:ba:04:46:79:55:3c:98:22:25:77:
         09:b4:c3:ea:15:22:51:39:56:54:30:b8:80:d6:63:d9:36:2b:
         88:a1:93:52:58:1b:0d:16:d7:b0:94:2b:4f:75:22:e3:10:12:
         64:70:3a:8f:20:88:aa:b3:b7:a0:42:41:ee:d3:f3:97:36:c6:
         fc:a2:3c:0e:d7:87:7c:bc:4a:7b:b1:74:dc:a0:ef:ef:c2:86:
         65:7e:e4:b1:24:43:68:c1:67:63:1f:7b:ef:91:ce:f7:4d:9f:
         09:45:e5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org