Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E20F939CD14A803A7EFD9EA9640E79525FAEE9C2.cer
File:                     E20F939CD14A803A7EFD9EA9640E79525FAEE9C2.cer (raw, json)
Hash identifier:          E6TUVUscKe4b8nk71IEyEL9zDiYmhZlzLe8ufVnGPAo=
Subject key identifier:   E2:0F:93:9C:D1:4A:80:3A:7E:FD:9E:A9:64:0E:79:52:5F:AE:E9:C2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B7FDDEC390B99F7386D0272EBA3F3B6BF83B69F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/E20F939CD14A803A7EFD9EA9640E79525FAEE9C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Dec 2022 20:23:41 +0000
Certificate not after:    Thu 28 Dec 2023 20:28:41 +0000
Subordinate resources:    AS: 268707
                          AS: 270966
                          IP: 45.169.160.0/23
                          IP: 2804:5984::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7f:dd:ec:39:0b:99:f7:38:6d:02:72:eb:a3:f3:b6:bf:83:b6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 29 20:23:41 2022 GMT
            Not After : Dec 28 20:28:41 2023 GMT
        Subject: CN=E20F939CD14A803A7EFD9EA9640E79525FAEE9C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:22:84:6f:7a:57:d5:52:0c:0b:9f:56:58:
                    e7:0c:c5:97:59:34:6f:d0:85:e9:96:13:b1:1b:75:
                    97:2c:73:92:93:51:ed:91:54:ed:06:ec:e2:71:a4:
                    c0:89:66:45:15:f3:c1:74:65:9b:e9:48:6b:49:ea:
                    98:d0:6e:89:69:fb:01:7a:a2:f3:07:87:09:28:07:
                    20:2c:16:28:ed:9a:10:30:0c:7c:ac:6f:c7:dc:e0:
                    97:e2:12:61:fb:d9:db:0f:ce:c7:01:21:e5:03:ae:
                    a5:1c:c9:e7:a9:ac:17:b0:4d:9c:9b:9f:86:35:56:
                    bf:85:01:54:b4:96:b4:77:70:40:38:8a:a8:27:f5:
                    15:83:33:bb:2d:c9:12:8b:7b:23:81:2e:60:c6:74:
                    c0:28:08:59:28:97:9d:69:a1:ea:78:59:50:4d:46:
                    52:96:94:3e:12:6b:f6:46:c1:ff:93:71:ea:cb:5c:
                    04:41:93:b5:24:43:a5:f0:e0:1a:ff:85:fd:d6:a0:
                    16:f0:f8:a7:51:0b:54:84:5a:d9:5e:c6:9c:f3:92:
                    1b:9f:31:78:a0:7f:83:16:12:e7:95:be:bb:d5:93:
                    98:68:85:f4:94:bf:51:49:27:48:45:1c:a7:b4:93:
                    1d:29:b4:fb:d5:51:ad:de:4a:25:0f:c5:27:de:35:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:0F:93:9C:D1:4A:80:3A:7E:FD:9E:A9:64:0E:79:52:5F:AE:E9:C2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/E20F939CD14A803A7EFD9EA9640E79525FAEE9C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.160.0/23
                IPv6:
                  2804:5984::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268707
                  270966

    Signature Algorithm: sha256WithRSAEncryption
         92:d9:aa:95:ff:05:65:ec:f2:75:83:65:ef:bd:95:11:49:7c:
         c3:a3:15:12:12:5a:ef:2c:ed:02:cd:0f:90:23:07:10:50:67:
         82:50:03:10:ed:0d:57:24:30:37:87:6f:bb:53:6c:41:ce:ae:
         6d:32:72:15:df:94:75:45:d9:66:41:70:5f:8e:77:b8:84:a4:
         93:24:b6:ee:db:f8:4b:6c:30:0c:f2:63:d2:7e:e1:e9:21:ac:
         90:13:fe:0d:37:26:7d:5a:c8:f7:70:88:3b:5b:c8:b9:9f:fb:
         72:a6:d8:76:02:a1:23:ab:d8:79:89:d6:82:ab:4f:e5:2d:e6:
         33:77:f7:12:66:bd:c6:1d:db:b4:16:81:e6:d7:99:44:75:0a:
         14:a9:44:f4:3d:f8:f8:cd:1f:f5:18:06:4c:51:7d:37:a2:ca:
         29:bf:93:52:37:ef:99:ac:66:d4:60:39:5d:2d:25:0c:b9:ec:
         00:c9:e0:e7:59:3d:5d:4f:3f:b8:15:4c:fe:d7:44:ae:ac:3d:
         34:66:3f:d8:ef:9c:e0:30:44:3a:e8:c5:d2:40:6c:0c:cc:88:
         02:9a:c9:02:cf:32:4c:4e:d6:8f:a8:03:f1:e4:65:ba:a8:be:
         b0:05:98:1d:7e:9d:b6:7a:19:e4:14:c5:47:bd:08:46:32:51:
         12:75:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org