Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/20E9D85E79A546158DBAD7A0569AEE88FB75A3EF.cer
File:                     20E9D85E79A546158DBAD7A0569AEE88FB75A3EF.cer (raw, json)
Hash identifier:          FenEo/2Wj/CvoHqKr1B/SeouQQPlsIrPSY9fKKuoasQ=
Subject key identifier:   20:E9:D8:5E:79:A5:46:15:8D:BA:D7:A0:56:9A:EE:88:FB:75:A3:EF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B82746505927766695E096A953E2E0F7093764B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/20E9D85E79A546158DBAD7A0569AEE88FB75A3EF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Dec 2023 15:26:58 +0000
Certificate not after:    Tue 10 Dec 2024 15:31:58 +0000
Subordinate resources:    AS: 271709
                          IP: 181.192.96.0/22
                          IP: 2804:7fc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:82:74:65:05:92:77:66:69:5e:09:6a:95:3e:2e:0f:70:93:76:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 12 15:26:58 2023 GMT
            Not After : Dec 10 15:31:58 2024 GMT
        Subject: CN=20E9D85E79A546158DBAD7A0569AEE88FB75A3EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:5a:36:3d:bd:10:4f:6d:fb:a8:4d:de:36:
                    fa:ec:f3:e1:73:34:74:17:2e:a6:2b:5f:c5:32:20:
                    d2:ea:11:1d:1f:25:42:58:65:66:fa:6b:36:45:3f:
                    47:d4:99:89:03:a0:31:f9:52:45:89:3b:7d:08:4b:
                    dc:8a:e7:fb:69:37:04:73:6c:d9:40:81:4e:64:45:
                    f9:74:b7:93:a7:f4:90:56:91:17:1d:52:74:c4:20:
                    8a:6a:d6:26:9b:a4:dd:ca:63:74:27:b7:e3:72:b2:
                    ed:cf:ea:45:07:00:49:93:cd:3e:38:ae:c0:9d:37:
                    47:41:e4:f8:4f:a1:b5:6a:fb:8c:bd:33:4b:ed:36:
                    c4:9e:f2:f9:89:0e:31:46:2c:56:66:36:d2:2e:e8:
                    98:2c:80:40:d3:ee:66:37:d2:8d:fd:47:fb:2f:d3:
                    cc:1e:64:a4:73:96:27:bf:60:47:15:31:b2:68:1f:
                    52:a8:fa:67:ab:1e:b7:ce:c5:9b:86:01:5c:d2:6b:
                    9d:c0:de:d5:cf:d3:5e:83:ab:4a:55:44:9a:75:bc:
                    eb:86:0b:52:d6:93:b4:67:0d:e7:38:31:c0:a5:01:
                    11:af:27:99:18:c2:f2:6a:19:fb:43:38:b7:84:85:
                    42:92:02:6a:1d:4f:4f:30:ad:bc:0f:f5:47:de:73:
                    6f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:E9:D8:5E:79:A5:46:15:8D:BA:D7:A0:56:9A:EE:88:FB:75:A3:EF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/20E9D85E79A546158DBAD7A0569AEE88FB75A3EF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.96.0/22
                IPv6:
                  2804:7fc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271709

    Signature Algorithm: sha256WithRSAEncryption
         a8:39:73:87:94:af:ee:64:17:71:0c:ea:78:1c:0f:ec:e5:29:
         13:cc:25:d0:49:77:96:2a:f1:4c:c0:2c:9b:27:8e:88:de:97:
         2c:7f:ae:f0:d4:c8:7a:19:56:a6:9b:35:46:a0:78:69:39:bc:
         9a:57:c3:6b:f5:65:79:29:6a:4d:83:ee:60:3f:1e:be:80:5f:
         6d:66:7a:d9:0b:4a:58:ee:21:24:06:8e:fc:87:e9:65:0b:be:
         22:b4:40:77:89:07:d5:96:6c:65:eb:5a:6a:a7:11:77:f3:ed:
         16:05:80:40:8a:b1:65:56:2f:ac:8e:c8:06:31:b4:14:4f:fa:
         ca:d6:96:32:50:1b:8b:89:0f:e5:4a:95:2e:5f:52:b5:fa:08:
         fb:71:ef:8d:0e:09:90:9c:5c:10:c1:55:8b:79:0d:ed:b2:68:
         13:41:3c:2b:2e:74:27:8c:7a:94:6d:cf:dc:d1:43:9c:c4:18:
         97:a7:2c:05:8f:38:8c:e2:52:52:81:61:c1:df:59:f0:6b:93:
         ee:50:c7:14:f4:9a:c3:51:ca:79:4c:25:59:3a:c7:a5:87:f2:
         f9:b3:b6:eb:ce:2d:0b:02:70:18:27:38:4c:5d:1c:51:d5:bc:
         72:f7:0b:d6:6b:31:96:97:77:63:85:aa:3d:2a:02:94:b6:d1:
         14:3a:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org