Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7020CEF28201C504780541257EB641064C1DDA94.cer
File:                     7020CEF28201C504780541257EB641064C1DDA94.cer (raw, json)
Hash identifier:          UjxLNSTNdtvAM10IEBHze0faT34OZX4ZBx1cBbw535E=
Subject key identifier:   70:20:CE:F2:82:01:C5:04:78:05:41:25:7E:B6:41:06:4C:1D:DA:94
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2717A3BA26934E2AEAE89746D91CCF5C8FB12939
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/7020CEF28201C504780541257EB641064C1DDA94.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Oct 2023 00:05:11 +0000
Certificate not after:    Tue 15 Oct 2024 00:10:11 +0000
Subordinate resources:    AS: 61917
                          IP: 45.188.152.0/22
                          IP: 167.250.56.0/22
                          IP: 179.124.132.0/22
                          IP: 2804:16cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:17:a3:ba:26:93:4e:2a:ea:e8:97:46:d9:1c:cf:5c:8f:b1:29:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 17 00:05:11 2023 GMT
            Not After : Oct 15 00:10:11 2024 GMT
        Subject: CN=7020CEF28201C504780541257EB641064C1DDA94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fb:49:e8:df:e3:72:8e:7a:bc:6f:99:ab:a6:
                    06:fb:57:ed:f3:fd:b2:a2:f2:83:81:54:a4:b2:db:
                    e6:17:e6:06:8a:12:ea:66:ca:bd:53:29:32:f2:f5:
                    55:5c:53:72:93:e1:52:46:ac:e8:58:eb:9b:0a:7c:
                    2c:74:28:ff:88:0c:ed:2c:21:74:7f:01:2a:05:41:
                    ba:e3:ea:68:ac:22:f6:ad:36:fc:97:1d:e2:e7:02:
                    64:ec:4c:43:93:45:06:c4:5a:d1:8b:1f:79:f5:21:
                    db:8e:71:f0:03:a3:ee:dd:dc:92:f1:1e:63:99:f4:
                    db:80:3f:da:c4:8d:ab:87:f1:7e:cf:a9:fc:c9:3a:
                    f5:de:7f:fb:5b:b6:7b:14:7b:22:24:14:ae:cf:67:
                    9c:8d:e6:03:0d:8b:e3:9b:65:a0:15:f6:2b:6d:82:
                    ab:8b:39:e4:8a:5d:7a:c6:63:4f:fa:b3:74:92:3e:
                    8e:a3:6b:39:ac:11:60:80:29:e1:04:6e:50:f5:c0:
                    7f:f1:2e:6c:3a:2c:da:e8:f7:41:c0:75:f8:6d:b9:
                    26:0c:54:37:a4:26:8e:b7:9c:81:a5:77:08:03:17:
                    8e:bd:39:61:0b:1a:a6:b2:5c:2c:72:da:46:69:68:
                    1a:49:3a:fe:4c:df:45:0b:04:9b:c4:66:17:8e:aa:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:20:CE:F2:82:01:C5:04:78:05:41:25:7E:B6:41:06:4C:1D:DA:94
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/7020CEF28201C504780541257EB641064C1DDA94.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.152.0/22
                  167.250.56.0/22
                  179.124.132.0/22
                IPv6:
                  2804:16cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61917

    Signature Algorithm: sha256WithRSAEncryption
         4e:c5:de:c3:62:a6:95:a3:73:9f:cd:1f:46:44:4c:d5:7e:bc:
         64:50:a7:8a:75:99:ac:c6:cb:00:29:9c:f9:5e:f0:08:ef:ef:
         62:84:ae:ec:d1:ce:7b:5a:01:bf:0b:ca:70:15:a3:d2:b8:09:
         7e:59:81:42:2f:36:6c:43:38:25:c5:03:53:e8:7f:f0:40:9d:
         6d:5c:a3:11:a1:07:63:db:99:dc:8f:e7:33:b4:2f:19:fa:65:
         a5:57:94:22:8d:90:b1:c8:d2:3b:38:55:39:e0:00:8b:d6:48:
         11:df:09:b2:65:df:9b:8e:64:e2:96:6a:03:d9:b7:0a:59:7d:
         83:72:7d:dd:23:1d:c6:7b:17:d3:cd:a5:55:6d:85:8c:80:dd:
         8d:c1:a4:f9:20:f9:e1:6d:8a:2c:56:4a:ac:4a:1e:a7:30:af:
         b1:fa:43:ef:26:aa:67:ed:c3:dd:d1:c0:0d:3f:51:15:7c:d3:
         d6:a0:7c:6a:80:00:15:19:18:10:6f:ce:47:c6:ad:ab:b1:ec:
         52:7c:42:73:e9:0c:25:02:17:b8:a2:09:a0:e0:8a:90:13:36:
         22:db:4d:70:90:aa:f9:b6:29:75:f4:2b:a9:b3:24:f4:09:ff:
         6d:af:0c:dd:ec:fa:ff:05:fa:7b:75:e3:17:79:74:65:ba:bc:
         47:2d:28:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org