Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.cer
File:                     5820A7350809BA171F6B4004D5F8AD4654AD3A9C.cer (raw, json)
Hash identifier:          fcO8UdPYjPYD3PvqD8TN5bsfyfhthCVz4FzVG5gwlx4=
Subject key identifier:   58:20:A7:35:08:09:BA:17:1F:6B:40:04:D5:F8:AD:46:54:AD:3A:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20E9BF19EE4FA36CC68B783C9738AB2CCF25BB9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Apr 2024 11:55:09 +0000
Certificate not after:    Tue 01 Apr 2025 12:00:09 +0000
Subordinate resources:    AS: 269367
                          IP: 45.185.76.0/22
                          IP: 2804:6388::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e9:bf:19:ee:4f:a3:6c:c6:8b:78:3c:97:38:ab:2c:cf:25:bb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  2 11:55:09 2024 GMT
            Not After : Apr  1 12:00:09 2025 GMT
        Subject: CN=5820A7350809BA171F6B4004D5F8AD4654AD3A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:b7:d2:ea:6e:4c:66:f5:88:ad:38:85:b7:
                    19:ee:f2:34:01:57:4c:27:5d:dc:5c:29:04:ea:b2:
                    96:c2:c0:a7:3d:5a:fc:e8:0d:ce:d4:01:41:0e:5f:
                    84:54:ec:42:e4:f7:75:b3:ff:9b:c0:81:92:87:44:
                    89:c4:78:28:eb:1e:97:bd:8d:35:cb:02:4a:5b:41:
                    d9:ad:29:12:07:78:66:3e:df:4a:72:19:60:80:f5:
                    0f:94:87:2d:c4:4a:21:6b:e6:36:e3:97:53:e1:c0:
                    85:74:11:82:88:48:9d:8a:e0:58:ae:f9:a7:2f:92:
                    06:af:06:29:37:b6:6d:ca:ec:88:ba:43:a2:30:46:
                    c6:3e:1c:38:8f:05:8e:39:08:fe:50:65:6b:b2:56:
                    cc:bb:cd:ed:56:ba:8f:a3:4c:a8:6a:c8:3d:a4:28:
                    85:56:8e:29:20:40:66:2b:25:1c:1a:4d:e7:7c:84:
                    d2:d7:31:bb:6c:21:13:a4:99:8c:86:e7:04:dd:a0:
                    6c:9d:3a:66:94:e0:b0:5d:61:1e:9e:12:1a:a6:86:
                    a2:3d:5f:ff:2a:a6:ee:c8:b8:d7:7a:13:bd:8f:67:
                    d5:fb:b8:9a:04:89:0a:4d:2f:67:c7:f0:87:c1:de:
                    41:ec:7c:a8:fe:d4:60:d7:c9:9b:4e:3a:e8:0b:22:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:20:A7:35:08:09:BA:17:1F:6B:40:04:D5:F8:AD:46:54:AD:3A:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.76.0/22
                IPv6:
                  2804:6388::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269367

    Signature Algorithm: sha256WithRSAEncryption
         af:86:df:f2:be:00:ce:0b:49:81:b4:ce:c2:b3:85:1a:ba:e8:
         a4:43:93:8d:22:e6:c6:68:54:28:1a:7b:2f:0c:c4:5b:f7:3c:
         e1:9b:96:10:01:b3:c7:02:17:33:04:bd:ff:54:4b:93:f3:17:
         f2:9f:bb:d1:2f:f9:d2:94:88:2b:5b:0d:48:70:26:bf:62:e3:
         16:1a:cf:08:e0:9c:7b:d5:54:ed:8b:16:0a:39:2f:cb:a5:a5:
         24:1e:dc:48:78:eb:4c:ca:22:4f:d3:e7:f3:43:03:b1:5d:24:
         ec:8d:3e:4c:0e:7a:d7:bc:5f:a4:8f:95:f1:2d:9b:eb:44:09:
         b1:20:81:75:38:f2:bb:f6:04:7d:89:af:87:a9:c5:c6:b5:44:
         c2:9e:dc:f9:05:d7:bc:58:61:6b:11:00:3e:3d:f3:ca:0e:3b:
         0e:23:e4:f0:5a:b4:ba:24:59:06:4f:27:f4:40:09:aa:52:8e:
         f6:19:69:3e:ca:7b:e1:a7:4a:65:1c:8c:8e:22:9b:74:a1:5d:
         11:21:51:7f:a0:ea:19:69:7b:98:28:3e:eb:5e:ea:1d:de:8c:
         19:e1:fa:8d:96:4b:f0:e6:97:a8:e8:5e:d9:64:47:e6:77:b6:
         59:8b:a2:22:3f:1a:ad:7e:06:f5:3e:2c:76:51:7c:23:e0:ac:
         be:e3:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org