Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ED2DB745285668B5ABAF36FF66E855E3A0F24339.cer
File:                     ED2DB745285668B5ABAF36FF66E855E3A0F24339.cer (raw, json)
Hash identifier:          iHOSXP/FnMUN3N0Uc386/5Nx4LuJgzE1+YPcar6Il3U=
Subject key identifier:   ED:2D:B7:45:28:56:68:B5:AB:AF:36:FF:66:E8:55:E3:A0:F2:43:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5EE9CFC923E6D1641343A7E903ADC1CFC77E4A21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/ED2DB745285668B5ABAF36FF66E855E3A0F24339.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 20:38:41 +0000
Certificate not after:    Wed 19 Jun 2024 20:43:41 +0000
Subordinate resources:    AS: 266143
                          IP: 160.20.20.0/22
                          IP: 2804:3b58::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e9:cf:c9:23:e6:d1:64:13:43:a7:e9:03:ad:c1:cf:c7:7e:4a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 21 20:38:41 2023 GMT
            Not After : Jun 19 20:43:41 2024 GMT
        Subject: CN=ED2DB745285668B5ABAF36FF66E855E3A0F24339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:09:26:f9:ae:ec:72:af:ac:a1:61:13:ba:
                    4a:1c:e1:c1:e7:02:67:ba:70:7a:6a:c0:d7:04:a1:
                    17:c4:4f:3d:ba:b8:03:cd:a4:13:5c:1c:e2:d6:2c:
                    c0:85:51:4a:4b:b0:57:a9:4e:8c:be:ff:e3:20:fe:
                    d8:5a:a6:fe:03:ab:fd:a7:ff:c7:9d:7d:f1:a0:23:
                    1c:9c:ae:75:6e:60:0e:ce:22:cb:0c:14:7b:22:62:
                    65:ec:86:6b:3f:74:2a:0a:15:a3:b8:f8:dd:42:d3:
                    36:a1:62:db:3f:d7:52:76:cd:e0:93:91:bc:db:c2:
                    19:25:00:b7:4f:e7:14:24:af:41:c9:78:66:6e:ac:
                    2f:d4:df:19:55:21:a1:fc:c5:e1:96:bd:89:0c:1c:
                    2e:21:79:de:3d:82:fe:bf:cb:6e:2c:e5:c6:be:e7:
                    c4:fe:82:72:04:73:13:f2:88:72:0a:7d:3d:92:3e:
                    d2:d0:93:68:a6:b0:d6:f5:da:f2:a5:99:5c:9b:2d:
                    3d:13:a1:b7:32:e8:fd:27:b8:98:c5:b4:69:95:90:
                    7f:3d:fb:59:0b:eb:0f:b5:6b:90:8e:30:aa:16:86:
                    3c:b2:10:ff:44:ee:88:79:a1:51:90:91:7c:1f:f6:
                    00:2d:ce:af:c0:cb:96:c2:61:6e:eb:88:7e:6f:06:
                    62:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:2D:B7:45:28:56:68:B5:AB:AF:36:FF:66:E8:55:E3:A0:F2:43:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/ED2DB745285668B5ABAF36FF66E855E3A0F24339.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.20.0/22
                IPv6:
                  2804:3b58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266143

    Signature Algorithm: sha256WithRSAEncryption
         4a:65:54:c7:5b:03:e6:83:1f:eb:f4:10:ec:38:cd:fc:02:00:
         66:52:8a:f7:54:5d:09:ec:7d:fe:05:d9:04:6f:fb:d8:7b:9a:
         7e:3a:16:2e:21:06:5e:9a:f3:4c:2b:94:57:4e:a5:fe:cd:f1:
         2e:b7:d9:45:a6:b3:02:b0:f8:74:de:18:74:b5:74:ed:9c:3b:
         c4:8e:d6:58:56:ab:64:31:fa:6f:1c:c8:25:b2:94:27:cd:a7:
         b1:f7:e6:24:49:fa:db:cb:03:89:c2:08:c7:12:06:f2:63:e0:
         ce:8f:a1:36:d4:8d:07:5b:33:56:ec:84:02:d3:e3:95:66:24:
         93:e0:c5:2d:48:b7:13:e3:2b:93:73:72:e9:3f:31:96:84:74:
         3c:0b:ff:7d:df:8a:69:3c:46:44:2a:04:98:ae:7f:73:0e:c5:
         ae:ed:71:3f:09:53:bf:ee:ef:7e:3c:ea:ac:cc:6e:57:7c:f3:
         84:63:1d:70:3e:35:6d:f7:20:b2:70:1f:fb:f8:5f:14:aa:f9:
         3e:98:e9:5d:14:ea:6d:14:b9:e6:3b:12:fb:ce:b4:60:c1:47:
         49:9f:74:95:28:4d:2a:fc:d8:3d:24:03:b3:37:5d:87:9f:ce:
         64:82:fc:5b:7e:f9:37:93:82:40:fd:a6:a5:64:d0:1d:c9:f5:
         86:9b:3a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org