Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E20FFC18759781BEE5144ABD5D96B368D0C4576A.cer
File:                     E20FFC18759781BEE5144ABD5D96B368D0C4576A.cer (raw, json)
Hash identifier:          zjFd3ed2S1w7QWhy0dMh+NIfowNvCBgbKHhVNlrn3qQ=
Subject key identifier:   E2:0F:FC:18:75:97:81:BE:E5:14:4A:BD:5D:96:B3:68:D0:C4:57:6A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3CEBB4059078F7A28138653F3B790130E0165A2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/0/E20FFC18759781BEE5144ABD5D96B368D0C4576A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Sep 2023 13:55:10 +0000
Certificate not after:    Fri 13 Sep 2024 14:00:10 +0000
Subordinate resources:    AS: 52996
                          IP: 138.117.104.0/22
                          IP: 186.232.247.0/24
                          IP: 2801:80:1f0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:eb:b4:05:90:78:f7:a2:81:38:65:3f:3b:79:01:30:e0:16:5a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 15 13:55:10 2023 GMT
            Not After : Sep 13 14:00:10 2024 GMT
        Subject: CN=E20FFC18759781BEE5144ABD5D96B368D0C4576A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:39:48:b4:fb:c5:45:53:ce:3a:71:96:fd:
                    50:3f:ec:13:01:28:6a:fe:1a:1d:1c:00:bf:de:10:
                    d1:0c:4b:34:2c:c1:6e:a2:2f:16:e6:7b:a6:b9:95:
                    e2:3c:82:73:6f:e5:7a:ba:c3:2c:50:bd:a0:cd:d6:
                    10:d6:8f:ec:7a:57:89:fe:e1:df:14:f9:e4:8b:f7:
                    e1:f8:bd:b2:7c:9e:e5:10:4a:36:00:20:59:c8:3f:
                    c4:5f:7e:62:91:a0:6c:33:66:f3:5d:96:28:70:c6:
                    ae:a1:7e:4c:3e:a5:4c:50:76:8c:57:1c:1e:c6:29:
                    80:4e:24:cb:6a:89:f5:aa:c1:29:85:b7:30:9d:dd:
                    42:f3:fe:c8:05:17:69:59:b0:1f:df:b0:ed:c6:a4:
                    b8:7f:36:1b:4e:d1:6d:4e:38:75:1f:07:76:17:f7:
                    5d:6f:e9:ca:02:b5:3e:4e:8c:ac:ea:c4:98:5d:ee:
                    e8:75:e8:e0:50:d4:3b:89:87:2b:77:b6:00:7c:54:
                    17:54:a6:60:76:f5:01:8d:33:25:3b:ca:4a:95:be:
                    76:aa:01:7b:eb:e9:8d:4a:a7:96:d1:5c:bf:dc:99:
                    e9:2e:58:92:3f:23:6a:89:f7:d9:f3:1e:cc:25:9c:
                    17:16:41:99:d7:94:11:cd:0e:37:97:c9:55:66:c8:
                    f4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:0F:FC:18:75:97:81:BE:E5:14:4A:BD:5D:96:B3:68:D0:C4:57:6A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/0/E20FFC18759781BEE5144ABD5D96B368D0C4576A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.104.0/22
                  186.232.247.0/24
                IPv6:
                  2801:80:1f0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52996

    Signature Algorithm: sha256WithRSAEncryption
         4f:09:b3:e5:8f:ea:42:01:68:bf:e9:6f:b9:86:ed:56:82:25:
         67:24:1f:71:b0:c6:d3:e3:dc:2b:03:f4:7a:a1:83:a1:4a:26:
         ca:53:20:d0:ea:a8:bb:a5:73:7e:29:ce:fa:2c:08:6a:fc:39:
         f5:c6:c2:64:5c:0c:d5:7f:2b:7d:87:4a:70:da:c4:eb:cb:ae:
         2e:85:de:e4:03:b1:07:cf:7f:cc:e0:a7:8c:a8:0a:d2:35:80:
         37:a4:df:b7:b4:7d:f1:23:15:69:d0:7e:42:69:f1:1c:71:8e:
         ae:6f:3b:f7:4a:c3:70:b2:85:3a:f1:2b:7b:30:26:38:8e:62:
         be:b1:d6:aa:0d:83:83:3a:45:ea:d5:5d:db:0d:69:1c:50:0c:
         54:b9:a8:ab:b7:df:f4:59:96:a7:ae:e9:ce:ae:33:2f:ef:fb:
         c2:9e:b3:d7:1b:d3:3c:11:00:12:11:11:01:de:59:89:f8:d3:
         58:47:c8:b2:50:4c:d5:1c:5f:ea:0e:cd:b3:a2:e3:f2:93:b5:
         db:ea:33:5f:8e:87:4e:f2:1b:a8:9c:e4:de:09:86:ed:fb:01:
         27:6c:41:be:6d:24:db:c5:98:9a:b6:e6:0a:4f:9b:2d:f1:7b:
         b0:75:fd:53:91:84:8c:6b:ff:db:ec:a7:ee:39:cb:c9:38:5d:
         a6:ac:5c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org