Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer
File:                     1072FB38BE0FF40EC17295B16352C4184106EFA8.cer (raw, json)
Hash identifier:          4hU5MqaSWASrpIurUY+ZzT+y22H3UK/LzGU6D0bvwxw=
Subject key identifier:   10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       424252F460B7947B8727071CD4CEBFA2C2DE3D02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/1072FB38BE0FF40EC17295B16352C4184106EFA8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Nov 2023 15:22:58 +0000
Certificate not after:    Thu 14 Nov 2024 15:27:58 +0000
Subordinate resources:    AS: 263652
                          IP: 177.74.224.0/20
                          IP: 2804:10dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:42:52:f4:60:b7:94:7b:87:27:07:1c:d4:ce:bf:a2:c2:de:3d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 16 15:22:58 2023 GMT
            Not After : Nov 14 15:27:58 2024 GMT
        Subject: CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:95:4c:2e:f3:90:d6:d5:fe:30:95:70:03:c2:
                    00:0a:91:80:bb:00:d1:7b:1f:ec:a9:6d:15:14:9e:
                    43:fe:86:26:7b:d1:17:07:37:f0:36:29:92:45:6e:
                    39:9e:1b:8b:33:91:e5:30:4b:87:02:12:26:8e:44:
                    23:aa:98:e6:ab:cf:a5:6f:01:a6:e9:d2:00:75:b4:
                    fc:08:a3:eb:53:18:a4:aa:6d:2f:a7:9c:2d:81:cd:
                    fc:67:4f:6a:bd:12:ef:ff:58:05:09:5d:a5:bd:b8:
                    4a:cc:da:af:ae:cf:1a:b8:8f:92:d4:28:3e:af:70:
                    8a:e3:ee:99:e1:4a:41:8f:66:fb:c1:5c:09:6e:85:
                    73:01:fe:43:6b:8a:7a:28:f3:a7:80:53:57:92:38:
                    9f:52:35:44:59:d7:05:d3:84:bd:e9:fa:df:c1:8e:
                    6c:91:cb:34:8e:01:db:c8:53:57:ee:1c:e0:bb:14:
                    4c:87:02:5b:da:09:b7:3f:61:3b:af:fb:68:c7:13:
                    32:2e:32:d9:c2:2e:8a:29:3d:1c:52:6d:1b:cc:6b:
                    39:ed:4b:1e:11:78:68:b2:46:23:a4:c5:18:b9:3a:
                    50:87:bf:1c:32:89:d4:46:a2:84:59:f9:58:0e:de:
                    92:f3:9e:65:84:c9:30:d1:5f:9a:80:59:4b:c4:f0:
                    e2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/1072FB38BE0FF40EC17295B16352C4184106EFA8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.224.0/20
                IPv6:
                  2804:10dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263652

    Signature Algorithm: sha256WithRSAEncryption
         11:60:b5:15:89:6c:30:5f:e3:74:58:93:c8:86:8a:de:03:b8:
         31:46:0e:65:d5:49:69:4e:a0:29:c1:18:68:58:a2:b0:1f:bb:
         d7:c5:17:f9:62:a4:29:06:1e:60:f4:26:5f:a8:4c:e7:3e:8f:
         de:62:01:d4:b6:9a:f6:37:09:69:1b:cb:80:65:d6:f8:99:d3:
         1d:0a:56:b8:0d:f5:a2:2a:eb:43:bc:d3:b9:35:59:e5:db:2a:
         26:68:ec:5f:01:d4:88:f5:c2:c6:d3:f7:12:74:fe:a0:f0:04:
         d0:3b:28:76:b6:f1:8a:97:be:25:03:7e:e8:fc:cf:f3:5f:04:
         bf:c5:7a:c5:92:35:c1:84:fa:10:62:19:2c:8e:61:73:5b:d0:
         17:f1:ca:3a:82:ea:6d:2d:a8:69:79:41:29:d8:65:b8:ab:52:
         3c:dd:c0:a9:3a:c3:03:08:14:1d:04:23:94:85:5f:53:7e:f2:
         0b:4a:3a:bf:d6:b5:fb:49:78:8e:0c:24:fd:4e:93:71:90:9e:
         36:73:7f:c2:55:c3:fe:19:82:0f:d3:b1:f9:18:54:d3:92:60:
         0b:36:3d:f7:47:74:38:5b:53:c5:03:7a:df:0c:0e:be:17:1e:
         62:51:7c:7c:b2:ff:ca:d4:ff:dc:02:0e:3f:71:b8:64:f4:25:
         2f:7d:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org