Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/220AE1280604BECE0967859CB7EF5F59A2813C95.cer
File:                     220AE1280604BECE0967859CB7EF5F59A2813C95.cer (raw, json)
Hash identifier:          XWmQDZ2yeydYQbqpsVaJPeqPk6uQAqLVGk1Sbd/boHY=
Subject key identifier:   22:0A:E1:28:06:04:BE:CE:09:67:85:9C:B7:EF:5F:59:A2:81:3C:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3EAF5D7C2B2E5F93B9AC0FD7A4D73CBD1D46371C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/220AE1280604BECE0967859CB7EF5F59A2813C95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:42 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:42 +0000
Subordinate resources:    AS: 266489
                          IP: 170.244.24.0/22
                          IP: 2804:389c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:af:5d:7c:2b:2e:5f:93:b9:ac:0f:d7:a4:d7:3c:bd:1d:46:37:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:42 2024 GMT
            Not After : Mar 31 11:03:42 2025 GMT
        Subject: CN=220AE1280604BECE0967859CB7EF5F59A2813C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:20:30:dd:d9:d0:13:53:d3:40:ed:68:8e:b1:
                    5a:09:93:b9:52:06:e7:4e:86:ba:ef:6c:82:83:fd:
                    85:d9:42:7c:5e:33:1c:12:3c:11:3a:90:78:36:eb:
                    32:e2:84:34:51:e4:8c:2f:73:c6:bf:8e:5f:fb:5a:
                    4d:33:0c:ef:82:41:af:b6:44:ec:ee:2f:22:63:87:
                    61:14:cd:6d:40:fd:72:b0:ec:9c:61:8c:9e:33:f3:
                    dd:a1:b1:42:49:c4:77:74:65:e7:c8:a2:06:a6:16:
                    d8:e3:a3:2d:86:e3:c5:b8:b8:07:6a:e9:ea:95:1a:
                    65:69:3a:32:1e:9f:da:94:08:2b:80:2e:78:c5:72:
                    e3:13:94:40:20:e3:47:b9:1e:1d:96:c0:3e:c5:c2:
                    16:05:bc:31:7b:0b:cf:dd:f3:e8:fb:3e:72:5b:e2:
                    1b:a3:32:c6:5b:2e:ba:93:12:d5:50:eb:d1:57:54:
                    17:3c:eb:b8:90:97:10:a0:da:36:8e:72:f9:80:4b:
                    5c:78:06:98:15:a3:a6:f2:bf:cb:7d:a2:fa:23:fa:
                    99:e2:a0:d5:ce:bc:7e:3f:dd:5c:e2:92:47:ad:e4:
                    81:8b:37:de:d1:b9:9f:fd:d8:e8:85:b4:3a:89:45:
                    91:37:d7:45:54:40:2f:67:ae:48:a2:a1:14:d2:c8:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:0A:E1:28:06:04:BE:CE:09:67:85:9C:B7:EF:5F:59:A2:81:3C:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/220AE1280604BECE0967859CB7EF5F59A2813C95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.24.0/22
                IPv6:
                  2804:389c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266489

    Signature Algorithm: sha256WithRSAEncryption
         49:b6:5a:69:a5:c4:06:1b:9e:14:10:fb:2d:88:ef:80:26:89:
         7c:68:3a:aa:59:d7:2d:27:bc:5d:f0:f7:16:ec:53:f5:57:c6:
         a6:dc:47:4a:f8:a1:c6:66:9d:2e:ce:af:41:65:e2:7a:2f:27:
         28:8c:63:3e:c5:dd:19:6f:b4:71:db:8f:14:46:ff:6c:99:9b:
         42:8b:b4:70:8f:57:ee:06:c8:5e:f7:4c:8b:20:e0:6d:ff:cc:
         8d:a2:19:7d:40:c7:3c:ef:f2:e7:13:52:85:84:a1:67:52:bf:
         82:93:95:43:a7:c4:85:61:fd:d7:9b:87:a2:f2:3f:52:bf:2b:
         4f:cc:d3:d5:8a:0d:3c:d6:63:30:e1:e3:85:d0:fd:5b:4e:ef:
         22:39:1b:8b:c0:ff:4d:d3:0f:60:52:d3:83:9d:6c:04:8c:7d:
         cc:ea:0b:86:d8:a6:38:77:f9:fa:18:92:c0:6f:8d:2f:e7:42:
         db:b9:aa:69:5c:61:26:01:3d:b5:67:8c:79:2e:86:cc:90:bc:
         a5:4c:79:3d:fc:94:89:5d:71:7c:95:f2:b1:05:92:f7:00:53:
         bd:a3:3d:b2:fc:be:c1:c8:41:59:3d:80:ed:eb:43:19:1b:c5:
         08:54:12:11:85:7d:2a:07:26:a3:8a:4a:44:cf:50:de:cd:4b:
         c9:ba:29:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org