Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1972C7D42483ED12769B586FE07D3C31EF264123.cer
File:                     1972C7D42483ED12769B586FE07D3C31EF264123.cer (raw, json)
Hash identifier:          TSj/1tEKrP+TaLxQ85vcduy4RUVBf1Uy+fykAcaSjWo=
Subject key identifier:   19:72:C7:D4:24:83:ED:12:76:9B:58:6F:E0:7D:3C:31:EF:26:41:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1556E7C426BDC85C44A899EDAA79DCFB8BE84B9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/1972C7D42483ED12769B586FE07D3C31EF264123.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 11:31:55 +0000
Certificate not after:    Tue 17 Dec 2024 11:36:55 +0000
Subordinate resources:    AS: 271479
                          IP: 200.4.108.0/22
                          IP: 2804:7c28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:56:e7:c4:26:bd:c8:5c:44:a8:99:ed:aa:79:dc:fb:8b:e8:4b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 11:31:55 2023 GMT
            Not After : Dec 17 11:36:55 2024 GMT
        Subject: CN=1972C7D42483ED12769B586FE07D3C31EF264123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:35:5b:b9:e0:4e:50:7b:6e:9d:a0:56:bd:
                    5a:e2:89:df:0f:86:f0:fa:f5:4f:0a:a7:ae:c4:4c:
                    3c:02:b7:55:e4:a4:5a:ed:a9:c2:c7:7b:60:90:73:
                    83:fa:0a:2f:14:ee:d5:0d:2a:d8:e9:40:20:18:4c:
                    94:f7:1f:0c:0f:2f:d3:59:b0:a8:4d:0b:bd:7c:4a:
                    db:8e:14:3c:57:ff:2e:ee:49:8c:fd:50:41:03:a4:
                    4b:f7:e8:05:11:d4:0d:dc:be:25:8b:58:f8:80:fa:
                    4a:8e:c2:05:b2:00:ea:28:bd:b0:b5:49:c2:16:ca:
                    da:d3:e8:4c:79:9f:38:61:92:c1:99:45:b6:20:51:
                    be:51:81:36:e7:b0:39:8d:31:fa:6a:17:fc:d8:ac:
                    39:c6:2f:65:fb:21:69:56:83:22:ac:78:9c:c9:8b:
                    04:d8:3a:a4:07:22:ae:cc:21:a1:7d:1c:08:e0:e8:
                    b7:5c:b0:bf:27:d7:bd:76:61:9a:66:fb:fd:bb:5a:
                    8d:a8:0a:62:ea:19:46:c6:a3:2c:9f:d4:06:22:83:
                    58:95:c3:2d:52:c2:f5:d2:1c:9a:02:66:9a:31:20:
                    1c:69:4a:3f:ff:31:f2:3d:69:1d:82:9c:ff:79:5c:
                    e8:35:b4:dc:e1:4f:b8:b8:35:c4:f6:0f:7d:07:62:
                    39:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:72:C7:D4:24:83:ED:12:76:9B:58:6F:E0:7D:3C:31:EF:26:41:23
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/1972C7D42483ED12769B586FE07D3C31EF264123.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.108.0/22
                IPv6:
                  2804:7c28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271479

    Signature Algorithm: sha256WithRSAEncryption
         1b:a7:a2:2f:a3:4d:38:0e:db:5b:9c:a1:08:37:d9:d5:1e:59:
         83:fc:11:6e:01:ff:eb:d7:49:c2:c9:ac:b5:cb:2b:16:f8:23:
         ca:22:58:32:c9:8f:c6:ed:89:68:fa:7c:bd:bd:42:42:66:32:
         84:d9:a1:d5:e5:b7:61:9e:c4:64:7a:dc:a3:28:76:b5:58:ab:
         2e:b0:b4:42:a5:b4:20:a5:05:37:cc:58:77:7a:ea:f2:9e:87:
         9a:b2:e2:9c:b3:9e:8a:07:6f:ae:aa:0b:53:ae:37:0a:b9:7c:
         32:bc:ba:2c:28:0d:53:b8:40:c8:8a:88:d1:a4:c0:e4:e7:9e:
         a2:dc:05:94:35:fa:15:22:fa:8d:d6:1f:fb:b5:ad:07:74:9a:
         3f:ad:9e:35:54:d7:d4:2f:ab:61:e2:be:b9:dd:d8:3b:6d:4e:
         19:4a:df:80:ee:9e:5b:a0:1e:49:4d:cb:36:a0:40:33:e8:cb:
         fe:f9:c9:5f:12:90:d0:b9:a5:da:38:71:04:9b:4f:49:fd:81:
         ad:12:39:92:9f:2c:f4:d0:cc:0a:d5:a7:e5:b5:d9:32:54:41:
         50:94:27:5b:de:07:13:83:9c:de:53:f1:42:78:c5:39:2a:74:
         22:61:2b:e3:e6:6c:4c:c7:b2:9c:17:8b:0c:fe:95:f5:48:e9:
         a7:14:a4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org