Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/320E46742A246F2F4D4D4E1DDF535FB80D30747F.cer
File:                     320E46742A246F2F4D4D4E1DDF535FB80D30747F.cer (raw, json)
Hash identifier:          OMNAnIjvHL/Dkt2qlu2sbEr3lFG2U2FjkKemA74mrsg=
Subject key identifier:   32:0E:46:74:2A:24:6F:2F:4D:4D:4E:1D:DF:53:5F:B8:0D:30:74:7F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1AFC890514AF6BC1598DDE91466865B89F80EB8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/320E46742A246F2F4D4D4E1DDF535FB80D30747F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Jun 2023 19:05:51 +0000
Certificate not after:    Mon 17 Jun 2024 19:10:51 +0000
Subordinate resources:    AS: 266446
                          IP: 170.82.192.0/22
                          IP: 2804:37f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fc:89:05:14:af:6b:c1:59:8d:de:91:46:68:65:b8:9f:80:eb:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 19 19:05:51 2023 GMT
            Not After : Jun 17 19:10:51 2024 GMT
        Subject: CN=320E46742A246F2F4D4D4E1DDF535FB80D30747F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:82:29:7b:47:2c:cb:1a:f8:93:0b:28:4e:
                    9d:57:7f:53:9c:e6:62:80:bf:5b:03:20:5f:8b:ac:
                    ce:e2:a5:db:bc:42:6d:2e:ec:44:d2:1b:dc:d1:d0:
                    a9:99:d0:52:fb:a4:48:00:1b:3f:87:3f:f7:ea:61:
                    c8:99:36:45:06:95:f2:9a:54:75:90:6f:09:75:e7:
                    39:fa:79:df:6a:2a:e6:fb:c7:a5:30:cf:34:06:70:
                    b5:1d:ae:97:58:2c:07:28:e8:f5:4e:04:c1:a2:82:
                    33:98:b0:ce:f3:85:ba:40:ee:03:8a:56:c0:e4:75:
                    8b:68:62:87:80:f2:b6:0c:5a:4a:2f:d8:06:bc:c1:
                    1d:15:a4:19:29:b3:7e:1d:ef:b7:10:c4:cb:6d:b9:
                    15:08:89:b6:fd:54:84:b0:0f:47:82:ba:44:4b:79:
                    da:e4:64:ae:02:fa:05:c4:31:d5:09:0d:7b:a5:fd:
                    70:b4:ca:9b:cb:cc:c8:c1:40:ef:64:d9:4f:ca:de:
                    dc:ff:61:05:ac:75:75:72:f8:eb:10:c6:36:84:3d:
                    17:18:72:32:ca:17:a5:a6:ea:e4:c4:95:12:4e:b3:
                    5a:f3:e4:ba:a5:ab:65:28:93:ee:b6:0e:45:08:3b:
                    99:a7:10:54:f3:2f:f1:74:20:fe:4a:ab:c5:6a:10:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:0E:46:74:2A:24:6F:2F:4D:4D:4E:1D:DF:53:5F:B8:0D:30:74:7F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/320E46742A246F2F4D4D4E1DDF535FB80D30747F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.192.0/22
                IPv6:
                  2804:37f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266446

    Signature Algorithm: sha256WithRSAEncryption
         a7:a6:80:b8:04:bb:fc:6f:1f:94:56:c6:25:4c:91:58:19:29:
         7b:64:6f:0b:b4:22:79:9f:b9:cb:8e:fe:19:06:5c:f4:c4:28:
         64:2b:33:0c:04:d4:02:22:7b:4d:96:57:c8:ef:fc:af:1b:db:
         ef:e6:cb:79:39:f8:a2:75:6d:af:fc:f3:45:a2:33:37:bc:da:
         0d:7a:8b:8c:a8:ae:fc:08:a2:41:f2:08:5c:9d:e7:4f:4e:10:
         ea:be:01:af:58:94:93:90:fd:ff:8d:3f:65:ff:60:fc:08:65:
         99:02:5d:f8:00:69:92:dc:36:d8:41:d5:ef:b8:34:a4:8a:6b:
         7d:e9:09:c1:2c:6d:db:79:47:0e:37:ce:ea:0c:b8:8e:5b:40:
         37:41:ff:65:61:29:7f:5f:a5:88:a5:c5:c0:97:99:51:d2:f5:
         97:5d:d5:68:ec:b4:69:4f:bd:6e:af:2f:25:57:42:75:88:be:
         61:ae:1b:9c:93:30:81:41:82:f1:bd:c8:5c:a2:27:10:32:da:
         c2:08:94:c7:5f:62:32:4a:11:f3:5e:ea:e7:19:a2:ee:98:c8:
         bd:2b:cf:25:a7:f1:62:fe:a7:17:be:a0:3f:1e:31:62:49:92:
         f4:df:6e:6b:18:9a:ed:3c:91:46:94:26:f4:a3:e0:d6:54:7a:
         5d:3b:47:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org