Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.cer
File:                     20D709AF200623B78B233AF45514E6AB9E7CCBBC.cer (raw, json)
Hash identifier:          OazBiwMzlqkYVrFOAMqVBszhvEHtnuI8QajdPuT/6aI=
Subject key identifier:   20:D7:09:AF:20:06:23:B7:8B:23:3A:F4:55:14:E6:AB:9E:7C:CB:BC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F77439288A5B58B80437E67F78B19EB6D9427AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jan 2024 20:04:42 +0000
Certificate not after:    Wed 29 Jan 2025 20:09:42 +0000
Subordinate resources:    AS: 264892
                          IP: 168.205.252.0/22
                          IP: 2804:2f74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:77:43:92:88:a5:b5:8b:80:43:7e:67:f7:8b:19:eb:6d:94:27:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 20:04:42 2024 GMT
            Not After : Jan 29 20:09:42 2025 GMT
        Subject: CN=20D709AF200623B78B233AF45514E6AB9E7CCBBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:a6:c4:3a:a7:2f:e5:c5:60:d3:ef:8f:12:
                    74:a1:1f:2b:46:d7:2f:a0:73:d1:35:e7:16:78:82:
                    ca:50:ae:9d:14:a3:27:02:91:a6:58:33:52:4e:e9:
                    6e:60:86:bc:c2:0f:11:6b:1b:94:74:73:e3:f4:d8:
                    9f:1e:b6:ac:89:65:0b:1b:a5:43:57:6d:9b:e1:fb:
                    ff:13:53:fd:26:f6:61:5d:72:57:d3:19:4b:f8:7e:
                    53:79:66:14:26:f6:fe:ad:f8:eb:ef:f9:c6:45:46:
                    ab:e5:9e:5e:22:ae:ef:4b:5d:95:11:01:87:d2:81:
                    2a:b0:19:63:9e:a6:9e:d1:a2:29:a8:8d:eb:af:0f:
                    98:06:78:ff:5c:c1:49:fc:34:a9:29:16:34:69:3f:
                    a4:96:1a:6e:ae:e5:10:4a:20:68:57:06:e5:2e:00:
                    f3:41:0d:9c:d4:85:af:30:da:42:59:bd:19:dd:83:
                    bb:24:67:fd:6e:9e:73:5f:0a:64:d6:9c:f5:45:c6:
                    94:59:6b:1e:dd:32:18:a0:82:22:48:94:47:e9:24:
                    4c:86:c5:0f:1b:cd:88:18:50:92:a1:44:a1:50:91:
                    05:25:a2:5a:3f:17:bd:d7:d0:e4:d2:11:33:d9:59:
                    32:e0:d2:e5:ee:f4:d3:f9:5d:94:aa:64:b3:ef:52:
                    a2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:D7:09:AF:20:06:23:B7:8B:23:3A:F4:55:14:E6:AB:9E:7C:CB:BC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.252.0/22
                IPv6:
                  2804:2f74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264892

    Signature Algorithm: sha256WithRSAEncryption
         3c:8b:12:89:4b:3d:8f:74:4f:d7:dd:ba:ec:9b:a7:04:5e:fe:
         83:5e:26:62:ad:5d:39:40:00:10:84:02:1b:9b:17:9f:54:bb:
         6b:bb:3e:35:e6:c0:e6:19:83:90:0e:6f:26:68:65:95:99:f2:
         7a:2d:96:09:4c:6a:44:6d:b6:54:a2:5e:05:f8:3b:d9:17:d5:
         b4:bf:1b:a4:4b:a6:6e:04:7e:59:61:d7:24:fe:03:b8:1b:97:
         68:60:1d:0a:85:a0:1f:16:a2:e4:a6:5c:0f:00:c5:14:cd:16:
         fc:50:9b:ce:09:84:36:c9:ff:41:41:d8:4f:0b:f5:6b:2c:7c:
         98:14:68:60:29:00:6f:88:db:30:80:99:e3:6c:4d:44:2b:5d:
         c9:e2:f3:47:75:3f:ab:30:0c:cd:c4:79:d9:02:a0:33:88:dc:
         0a:fb:2f:b2:94:74:72:ca:64:f2:f1:a4:ee:e2:d3:e7:15:e8:
         46:c4:50:46:d9:09:cb:23:a3:fd:f5:7c:07:5d:d2:0d:52:5d:
         29:60:e0:ff:d6:e1:4e:03:d9:d1:fe:bf:7a:b8:50:6b:e4:3d:
         f0:19:b7:f4:34:1a:5e:7f:ff:2e:27:e9:4d:f5:d0:1c:66:7c:
         96:da:f0:f8:43:76:27:e1:07:dd:f7:c9:11:ec:16:d6:6e:69:
         45:5c:88:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org