Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0F520C725D4182442A66DC02BB023011DD57621B.cer
File:                     0F520C725D4182442A66DC02BB023011DD57621B.cer (raw, json)
Hash identifier:          xwaO0PpbMwAK5QYWiPP/KlNVRCavPf4cXmN/rhbsFbY=
Subject key identifier:   0F:52:0C:72:5D:41:82:44:2A:66:DC:02:BB:02:30:11:DD:57:62:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7AC228F0515E681A52C6502DDFDA5A0781F328E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/0F520C725D4182442A66DC02BB023011DD57621B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 17:22:59 +0000
Certificate not after:    Mon 08 Apr 2024 17:27:59 +0000
Subordinate resources:    AS: 262676
                          IP: 187.73.224.0/20
                          IP: 2804:e80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c2:28:f0:51:5e:68:1a:52:c6:50:2d:df:da:5a:07:81:f3:28:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 10 17:22:59 2023 GMT
            Not After : Apr  8 17:27:59 2024 GMT
        Subject: CN=0F520C725D4182442A66DC02BB023011DD57621B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:1b:a7:18:9a:56:fe:dd:11:5f:3a:c8:52:
                    ee:18:35:2c:01:5d:a3:46:47:a2:11:ee:28:96:9b:
                    c2:0c:44:cb:bf:00:2c:25:eb:23:4b:bd:53:a7:b1:
                    4b:d9:6a:12:39:20:eb:c5:09:d4:9f:6a:26:e6:c0:
                    e4:d5:7e:94:d6:90:f3:94:e3:5e:52:07:13:fa:5a:
                    33:43:d3:06:dd:0e:68:93:b2:1c:5b:69:22:ea:f7:
                    7d:c1:5e:c2:db:ce:91:2a:d1:d5:3b:9b:6c:ac:09:
                    92:c6:eb:ce:da:92:1c:6a:17:8c:a8:d5:b1:2e:66:
                    b3:45:1b:c8:0f:62:0d:1b:d3:05:aa:49:71:31:b6:
                    32:e1:b4:30:e2:07:5d:03:d8:ee:2b:d4:8e:06:0c:
                    59:6d:e2:a3:b8:d2:f9:42:6c:64:21:03:56:19:78:
                    2c:e9:6a:1f:0c:7e:cd:f7:72:41:9f:0b:1e:7a:58:
                    85:cd:f5:c9:6b:12:4c:7e:27:9b:73:da:1e:27:36:
                    00:95:7f:36:0e:25:d9:91:8c:1c:55:7e:db:10:59:
                    bc:23:27:73:93:73:c1:42:13:6b:77:2c:f8:66:63:
                    03:ae:9d:8d:e2:b2:be:c9:2e:cd:16:9f:13:e4:be:
                    1c:c7:cd:06:5e:0c:10:31:32:2e:23:67:30:28:e4:
                    da:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:52:0C:72:5D:41:82:44:2A:66:DC:02:BB:02:30:11:DD:57:62:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/0F520C725D4182442A66DC02BB023011DD57621B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.224.0/20
                IPv6:
                  2804:e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262676

    Signature Algorithm: sha256WithRSAEncryption
         06:e1:17:c5:a3:6a:4f:4f:4f:fe:2e:2f:39:e8:94:e2:05:19:
         fc:7e:8a:87:22:00:3f:43:a9:ed:2b:8a:2f:bd:d4:f6:5a:86:
         b5:c1:36:dd:79:c7:c6:82:78:45:25:1e:5a:1d:90:56:a9:e2:
         77:17:0a:48:45:61:ac:fe:a7:0b:39:52:47:db:80:77:59:70:
         fd:c0:31:90:ff:a7:18:83:66:e9:d3:95:1a:50:c3:06:13:80:
         22:f1:e8:42:c1:15:1e:33:66:67:3c:7a:1a:27:98:81:02:77:
         31:11:79:63:d3:e9:97:87:00:6e:91:ec:6e:6f:c5:b8:4d:84:
         fe:ce:4d:a7:b8:08:f3:09:13:15:b3:af:90:37:ec:2f:f9:34:
         70:20:9c:01:73:e9:ca:b5:18:33:8a:18:af:10:d4:1c:76:a2:
         39:2d:ef:ab:1a:bc:cb:8a:61:fe:c1:38:55:ac:40:64:0b:b3:
         a0:37:4c:d0:f7:ca:f7:e8:43:15:90:b8:7d:ec:52:89:e2:89:
         1f:63:0a:02:31:3c:10:b7:92:82:5d:51:b6:aa:e2:f8:2c:88:
         0c:96:11:fc:a1:af:b9:07:43:6e:cf:22:9a:ab:d6:00:ce:7a:
         fd:78:f8:0f:e1:9b:14:5a:cb:10:6a:b9:f7:71:c6:07:c6:3f:
         98:8e:fb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org