Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/320EB8465036C44E507A88E7F8BABA7B33CA3BD4.cer
File:                     320EB8465036C44E507A88E7F8BABA7B33CA3BD4.cer (raw, json)
Hash identifier:          LiaeQYwaPY/pRSxVPhU7ucdTJdsqFr2UDl5d0j15QbA=
Subject key identifier:   32:0E:B8:46:50:36:C4:4E:50:7A:88:E7:F8:BA:BA:7B:33:CA:3B:D4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18E406DC7709B71AFD5DA7EBFA69335AEDED5944
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/1/320EB8465036C44E507A88E7F8BABA7B33CA3BD4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Apr 2024 12:04:44 +0000
Certificate not after:    Wed 09 Apr 2025 12:09:44 +0000
Subordinate resources:    AS: 269340
                          IP: 45.184.140.0/22
                          IP: 2804:6320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e4:06:dc:77:09:b7:1a:fd:5d:a7:eb:fa:69:33:5a:ed:ed:59:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 10 12:04:44 2024 GMT
            Not After : Apr  9 12:09:44 2025 GMT
        Subject: CN=320EB8465036C44E507A88E7F8BABA7B33CA3BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:82:58:e3:5f:c7:83:ed:ed:41:dc:68:e4:
                    32:14:6e:ee:26:ba:6f:37:00:4e:be:30:aa:4a:00:
                    9c:0a:e1:d0:e6:6a:72:61:fa:c6:a5:df:b7:e9:ff:
                    4b:75:73:a7:55:87:1f:31:dc:dd:e8:51:19:de:fd:
                    29:19:3b:fe:e1:14:86:c9:37:03:a4:90:c1:1d:67:
                    29:01:0d:6c:e6:58:2a:61:67:91:8a:07:20:0d:9f:
                    66:52:b5:17:9f:89:ef:1c:47:82:15:6e:f3:76:0e:
                    fb:d9:86:08:28:9a:40:7a:41:02:f8:dc:21:5a:e4:
                    7d:af:2a:c6:56:7d:67:92:49:43:c5:02:b5:34:27:
                    55:bf:1e:57:ff:b6:95:d5:95:b8:95:77:fb:c1:dd:
                    6b:d9:87:1c:12:2f:5e:52:55:36:5f:18:6e:06:86:
                    d5:32:19:c3:a4:f4:f2:76:66:50:38:61:73:3c:49:
                    91:0a:f0:84:6f:d3:40:b1:3b:96:50:f9:a1:78:5c:
                    d8:8d:f4:a7:0a:ac:4c:ee:8a:90:df:4a:c5:af:79:
                    e4:56:57:3a:23:1a:35:e2:43:c7:94:4f:26:58:f5:
                    98:cd:5e:74:df:d9:83:bd:6b:ee:25:b0:e8:d8:47:
                    1d:d8:0d:92:b6:a5:4e:52:67:76:4f:99:fd:cc:9a:
                    1a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:0E:B8:46:50:36:C4:4E:50:7A:88:E7:F8:BA:BA:7B:33:CA:3B:D4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/1/320EB8465036C44E507A88E7F8BABA7B33CA3BD4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.140.0/22
                IPv6:
                  2804:6320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269340

    Signature Algorithm: sha256WithRSAEncryption
         52:1a:b8:ca:13:d0:f6:d2:52:83:d1:03:23:53:5a:6c:2f:59:
         02:f2:0a:6c:0c:c8:4f:84:a9:90:4e:58:1f:fd:16:45:06:a8:
         cf:0d:62:b7:e7:8b:65:ad:19:eb:12:9f:bf:b6:1f:5c:1a:18:
         4c:1f:97:15:09:31:46:2f:13:9a:05:9f:45:28:cc:16:f4:83:
         a7:98:08:ac:e6:61:e6:f4:2d:89:f3:17:e8:27:3d:27:83:e1:
         07:16:4c:f1:d4:63:1c:c5:1b:0b:56:99:d5:3d:30:a8:fe:1e:
         e5:4e:2e:4a:03:99:af:d9:42:a4:0d:80:02:82:5e:5b:1c:8b:
         a2:f4:8a:22:9d:d7:28:3b:63:66:26:15:48:e8:a0:4e:cf:af:
         16:59:90:65:6c:6e:9e:ac:29:f6:ec:38:ca:b7:13:22:da:b5:
         c7:a5:93:9f:6b:61:74:af:6e:d5:40:77:1f:ab:e7:25:dc:18:
         01:6a:f7:06:58:a2:bf:5e:6f:8b:ae:11:97:d4:bb:e5:cb:5b:
         fe:66:42:34:66:da:1e:28:f2:a6:a9:8f:cf:ff:74:d9:af:ae:
         1f:05:97:37:67:e4:c4:6f:2f:7a:3c:60:da:72:7b:77:b8:cd:
         d1:c1:91:d5:25:63:89:73:69:b8:be:9c:b7:07:31:14:0d:fc:
         07:e2:f6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org