Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3020C6E7F7523D2D4B703357CE58C7E064570671.cer
File:                     3020C6E7F7523D2D4B703357CE58C7E064570671.cer (raw, json)
Hash identifier:          E+vHsFDhQM8IZJAT75v5hBNontncib7vDIOwOaHty9M=
Subject key identifier:   30:20:C6:E7:F7:52:3D:2D:4B:70:33:57:CE:58:C7:E0:64:57:06:71
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1D9E37F00CC04F837FE1BC7E6632B373222BAF00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/3020C6E7F7523D2D4B703357CE58C7E064570671.mft
caRepository:             rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 14:55:34 +0000
Certificate not after:    Wed 04 Dec 2024 15:00:34 +0000
Subordinate resources:    AS: 262731
                          IP: 177.190.192.0/20
                          IP: 186.193.224.0/20
                          IP: 2804:234::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9e:37:f0:0c:c0:4f:83:7f:e1:bc:7e:66:32:b3:73:22:2b:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 14:55:34 2023 GMT
            Not After : Dec  4 15:00:34 2024 GMT
        Subject: CN=3020C6E7F7523D2D4B703357CE58C7E064570671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:24:0b:82:a1:0d:2b:41:0f:00:c7:c2:09:9a:
                    26:62:45:64:57:57:24:e0:eb:49:17:94:ef:48:08:
                    6c:0e:75:a5:8c:6b:6c:15:6c:28:ca:ef:1d:3f:30:
                    2a:1a:ee:87:cb:b3:48:7a:af:7f:9d:d1:c7:30:7c:
                    c1:b4:7b:86:23:79:59:71:ea:dd:f4:05:27:c5:5a:
                    39:c6:27:b4:f1:91:56:18:fb:88:65:85:6d:c0:50:
                    6f:fe:6d:8a:96:72:7e:ce:a2:8e:65:66:1d:21:ea:
                    47:b3:80:e9:fc:3c:f7:5d:e2:00:9c:ce:9a:b5:13:
                    09:bf:41:f2:0b:9a:95:a7:4a:6d:c7:dc:4f:fc:82:
                    92:a6:ba:b2:ff:d3:2e:b9:60:7e:35:07:66:89:ef:
                    59:c7:11:47:fd:92:52:93:e8:9b:71:bb:87:a6:04:
                    8a:fb:29:fd:8f:47:43:0a:8b:98:37:5f:4d:f0:1b:
                    92:5e:6f:7a:9f:9f:18:5c:bf:e0:a4:e4:6a:d9:71:
                    00:9e:db:59:e7:50:ed:d1:02:50:c4:de:c7:64:24:
                    e9:c9:5e:48:78:48:db:4c:c8:8b:07:07:cf:67:66:
                    2d:d6:dc:91:57:9c:2d:14:cb:a9:05:d3:77:9c:8c:
                    4e:d4:13:27:b7:4c:01:9f:5d:23:12:88:ec:88:44:
                    c1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:20:C6:E7:F7:52:3D:2D:4B:70:33:57:CE:58:C7:E0:64:57:06:71
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/3020C6E7F7523D2D4B703357CE58C7E064570671.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.192.0/20
                  186.193.224.0/20
                IPv6:
                  2804:234::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262731

    Signature Algorithm: sha256WithRSAEncryption
         28:5d:df:3a:eb:6d:51:7e:98:52:4b:ba:d9:7e:ce:a4:37:26:
         e0:50:9c:13:94:5b:0a:f3:c6:e2:96:ad:f1:ff:6b:2f:38:3e:
         6b:48:c8:f4:f7:2c:7f:eb:9c:42:a8:d3:9d:d8:db:70:ed:8c:
         20:5b:7b:2f:3c:97:c0:bc:9e:dd:7b:5f:e5:ae:db:fb:bb:b8:
         b3:2f:d1:3f:56:78:71:4c:76:3c:f1:bf:5a:25:b8:ad:ea:a6:
         54:e8:80:d8:76:58:ed:4c:ea:a9:c0:e6:80:6a:e8:17:bd:4b:
         18:56:90:2f:ba:a6:11:1e:76:38:a0:9e:b3:b4:50:46:cd:d4:
         6d:78:57:7d:d9:12:bd:66:f7:05:e1:43:c5:78:88:18:f0:c9:
         bf:5c:31:2d:77:c9:1c:83:18:1b:fe:8f:be:7e:92:61:5b:8c:
         d4:16:66:33:e9:1c:39:ed:f7:e5:3f:87:0b:87:91:69:82:11:
         07:89:07:d2:24:af:0d:35:86:97:05:d3:69:1f:74:2d:8b:f7:
         10:28:52:7a:cb:f0:82:06:1b:ba:05:48:ee:71:96:a4:5b:70:
         f9:ed:20:00:ff:c9:b1:eb:ed:8c:31:15:10:e9:70:92:33:49:
         78:c1:b6:06:27:04:eb:8c:84:f9:4b:f0:3b:81:e1:00:f9:6d:
         63:d6:d1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org