Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1672ECB81F741A900DF059529857EC507B6CBA68.cer
File:                     1672ECB81F741A900DF059529857EC507B6CBA68.cer (raw, json)
Hash identifier:          kQPjp5DH85a3XGmilv+wo4qsaRbO006E4N+ZfDd8CUs=
Subject key identifier:   16:72:EC:B8:1F:74:1A:90:0D:F0:59:52:98:57:EC:50:7B:6C:BA:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4DD0679B6940E2E1ED4466911C6212995A678C93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/1672ECB81F741A900DF059529857EC507B6CBA68.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 15:27:13 +0000
Certificate not after:    Mon 03 Mar 2025 15:32:13 +0000
Subordinate resources:    AS: 262644
                          IP: 167.249.12.0/22
                          IP: 177.86.248.0/22
                          IP: 187.17.208.0/20
                          IP: 2804:2a64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d0:67:9b:69:40:e2:e1:ed:44:66:91:1c:62:12:99:5a:67:8c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 15:27:13 2024 GMT
            Not After : Mar  3 15:32:13 2025 GMT
        Subject: CN=1672ECB81F741A900DF059529857EC507B6CBA68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:3b:22:a4:7a:fb:4a:f6:07:4f:6a:fa:51:
                    73:be:96:1e:84:dd:23:14:0d:34:e5:39:94:c3:cc:
                    3a:62:05:a4:09:71:0b:23:3e:22:13:8d:03:a4:b8:
                    2c:21:ff:d4:19:23:98:99:7d:f1:e5:0e:ee:65:8f:
                    2e:13:f4:09:2a:66:45:1b:2e:5b:db:a6:cf:98:9d:
                    88:bd:16:fa:83:be:56:e7:a9:e8:fe:2e:73:3a:f0:
                    bf:7b:1a:e6:76:8c:75:89:e1:ee:f7:ea:32:60:da:
                    75:b6:f4:ec:44:35:0d:83:03:24:ef:c1:bf:a4:21:
                    51:a6:80:c0:d5:32:05:74:71:38:f6:06:9f:f1:29:
                    9e:e7:52:73:04:89:a5:48:1b:ad:cc:b4:8d:cf:99:
                    f8:39:44:e9:c5:e1:fd:f5:e7:cb:4c:70:f9:86:21:
                    5b:17:32:15:eb:23:65:4d:cb:94:ef:f5:23:3f:5a:
                    15:5a:9f:b4:55:18:84:b6:08:3c:91:75:15:68:ec:
                    ee:87:7f:63:ba:c4:3f:48:a1:e7:9d:9c:dc:c9:5f:
                    c1:fa:ab:93:f3:8d:af:5b:ea:69:f9:d1:88:2b:a8:
                    fb:17:d7:eb:a2:84:18:d5:6d:6b:47:c5:03:47:85:
                    0b:a6:82:9f:60:51:63:c1:9c:62:08:7a:9e:63:37:
                    11:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:72:EC:B8:1F:74:1A:90:0D:F0:59:52:98:57:EC:50:7B:6C:BA:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/1672ECB81F741A900DF059529857EC507B6CBA68.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.12.0/22
                  177.86.248.0/22
                  187.17.208.0/20
                IPv6:
                  2804:2a64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262644

    Signature Algorithm: sha256WithRSAEncryption
         aa:7f:3a:dd:92:25:de:ed:8f:4a:53:97:c5:76:7b:08:6b:8b:
         a1:06:ab:dd:d9:d0:79:1a:71:2e:f6:59:d6:44:fd:a3:3d:12:
         71:15:b7:fd:7b:03:86:dc:80:2b:b1:bd:1d:bc:32:fc:f6:d1:
         99:c1:5d:9c:14:35:31:66:7a:c7:34:ab:13:d2:8d:dd:a4:44:
         67:b0:1b:5e:02:ad:b1:a6:2e:11:3a:6b:66:11:38:3d:03:22:
         b9:5f:94:a9:b7:49:bf:6f:66:ab:3c:7b:14:b0:b6:4e:a9:8a:
         f6:b4:19:a1:94:0b:51:3e:10:ac:fc:65:e6:22:33:68:16:7c:
         ae:4d:2a:27:4d:f4:6a:05:f1:ab:ae:b4:14:64:3d:f4:38:b8:
         3c:64:93:5c:7e:11:bd:c5:a8:7a:29:1c:1b:72:2b:0f:ea:18:
         75:fe:d4:04:1c:cd:dd:f5:76:4a:d5:f1:c7:90:28:de:2e:2f:
         81:fe:fa:63:b8:e0:49:d2:6f:c3:7c:ba:ad:9a:30:f1:c4:8b:
         03:bb:09:22:9e:29:16:c7:8d:ae:98:e5:44:c9:ac:01:61:a2:
         ec:e0:87:46:60:d5:4d:d8:9f:a2:1b:e6:ad:39:14:9c:ce:86:
         b3:02:cf:b4:fe:87:f9:f1:90:6f:2e:b4:df:e3:be:63:73:a5:
         84:20:dd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org