Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.cer
File:                     20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.cer (raw, json)
Hash identifier:          7gh6AaHkrjnKGoM1GHkMo0vnHd3fu7xj99h5UzxgP5o=
Subject key identifier:   20:DF:3D:EB:D0:43:DD:C5:D6:B8:1A:6E:8E:5F:E0:46:0A:F8:DD:5C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F2016E8B478B0E65073835D874F405F93EBA60F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Oct 2022 19:33:24 +0000
Certificate not after:    Thu 05 Oct 2023 19:38:24 +0000
Subordinate resources:    AS: 53120
                          IP: 141.193.151.0/24
                          IP: 187.111.16.0/20
                          IP: 2804:1de8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:20:16:e8:b4:78:b0:e6:50:73:83:5d:87:4f:40:5f:93:eb:a6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  6 19:33:24 2022 GMT
            Not After : Oct  5 19:38:24 2023 GMT
        Subject: CN=20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:ba:00:44:7f:3c:06:c0:96:ff:ad:0a:8a:
                    50:59:94:2e:6b:76:b9:50:ac:e5:d3:16:0c:04:62:
                    ad:f1:ae:19:9b:bd:b3:8d:34:cd:12:34:9c:d6:2a:
                    33:bb:40:f7:00:bd:1f:4e:0d:7c:26:05:d6:3b:37:
                    d5:e6:2d:df:b4:7f:98:49:62:cd:a1:cf:b2:fc:bc:
                    73:61:12:31:46:56:b6:30:21:87:06:86:8e:4d:33:
                    99:f7:5c:63:49:0f:b5:b0:d8:33:47:0a:30:34:8d:
                    64:a0:6c:52:44:35:b4:77:5d:f7:f4:ea:15:1c:ac:
                    81:a4:62:62:6f:6a:7c:5f:8d:63:76:58:e2:70:31:
                    9e:45:65:1e:f3:f9:20:45:0d:f9:a3:db:cc:a3:7b:
                    dd:72:e7:22:3b:0d:72:41:ed:0b:f3:0c:b5:75:b2:
                    03:c8:7f:2b:74:9b:fe:7d:2b:40:40:d8:37:16:7e:
                    19:ff:63:bf:e6:2e:71:df:ad:9a:d6:f4:93:ef:f5:
                    67:90:e4:66:ae:c1:8a:8b:2b:68:14:2c:00:e4:45:
                    6d:83:57:84:24:5b:80:d3:5b:2a:98:b7:b1:97:8d:
                    a9:54:c6:ec:cb:d1:12:03:19:e1:f6:dc:4a:03:f0:
                    69:a4:b1:59:b0:44:5f:a0:c8:7a:f6:fd:8a:f7:97:
                    da:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:DF:3D:EB:D0:43:DD:C5:D6:B8:1A:6E:8E:5F:E0:46:0A:F8:DD:5C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.151.0/24
                  187.111.16.0/20
                IPv6:
                  2804:1de8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53120

    Signature Algorithm: sha256WithRSAEncryption
         7c:95:c1:ea:71:01:d2:32:e4:6f:36:1c:b6:86:b0:df:05:d6:
         4a:06:58:da:c9:0e:25:f9:9c:0b:6f:67:99:a2:cb:0a:2f:fc:
         ef:6c:99:da:a0:50:c5:9e:01:b9:0d:0c:f3:e7:e4:70:80:2a:
         de:23:7f:2d:a2:37:72:06:cc:1e:34:49:3c:26:9a:82:20:94:
         4e:0f:3f:91:bc:31:d5:2c:4d:31:78:3c:0d:4e:67:a0:de:2f:
         73:50:5d:4d:44:51:c7:92:2a:f5:4f:3c:f4:5b:a5:69:01:a4:
         76:ba:e3:42:3c:36:32:30:23:1b:d7:8c:11:c7:8d:d3:d8:3b:
         3d:10:e3:b8:ad:5a:cf:46:dd:e8:0f:82:01:86:f4:05:ba:90:
         10:ac:96:3f:63:84:92:84:98:d7:d3:b4:58:fb:82:99:d1:e6:
         a0:9c:c7:fe:fe:92:2f:a8:65:f7:60:07:0f:82:6a:3d:92:84:
         b6:8e:b5:f1:70:c6:87:13:70:2e:b9:ef:00:ac:1c:a9:9c:cb:
         1c:79:87:99:18:19:a0:e0:40:ce:43:aa:a7:e9:e1:f0:bd:a4:
         5d:b3:27:58:91:bc:53:26:3e:b5:7e:31:9b:da:49:f8:af:13:
         2f:6f:b9:64:b8:20:39:05:80:56:58:9a:86:15:ac:f1:cc:4e:
         78:ed:4b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org