Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A72493D6E3483E9C94911289FBE03F4FA3BE7A3.cer
File:                     2A72493D6E3483E9C94911289FBE03F4FA3BE7A3.cer (raw, json)
Hash identifier:          qQrf4O0A0lCEXSg6XdDLEkMaKL1KhN4ozzGJ2wsvvjM=
Subject key identifier:   2A:72:49:3D:6E:34:83:E9:C9:49:11:28:9F:BE:03:F4:FA:3B:E7:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       317B52336DBFCD7A080AB9DBA887C55EF664A48F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/2A72493D6E3483E9C94911289FBE03F4FA3BE7A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Mar 2022 17:10:34 +0000
Certificate not after:    Wed 29 Mar 2023 17:15:34 +0000
Subordinate resources:    AS: 53005
                          IP: 177.66.240.0/21
                          IP: 2804:548::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7b:52:33:6d:bf:cd:7a:08:0a:b9:db:a8:87:c5:5e:f6:64:a4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 30 17:10:34 2022 GMT
            Not After : Mar 29 17:15:34 2023 GMT
        Subject: CN=2A72493D6E3483E9C94911289FBE03F4FA3BE7A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:c0:cf:5a:28:3c:a4:01:93:2e:83:2f:53:
                    c5:e9:8d:e8:89:5a:cc:21:9d:d4:7f:1a:cc:ce:85:
                    cb:ad:6f:80:a7:60:b4:1d:88:70:55:d6:af:d5:00:
                    d6:dd:34:38:b1:25:d7:22:1e:6d:d6:22:8d:b9:1d:
                    5b:72:36:33:8b:c9:b0:28:f8:d5:49:46:95:05:6a:
                    48:c0:d6:3e:18:88:c8:35:2d:05:ae:17:ec:6f:7d:
                    93:dd:1e:34:96:e4:ad:4c:50:99:2b:51:2d:04:b9:
                    3f:bd:d7:dd:7f:9a:0a:03:81:06:2f:01:21:33:88:
                    cb:b5:9b:89:2c:89:0c:29:bf:eb:f1:f7:70:bf:b4:
                    02:3d:2d:52:27:36:34:a1:7b:44:e1:57:1a:f7:99:
                    f7:79:69:ac:51:71:54:c6:9a:af:2c:36:e0:8a:20:
                    0a:80:fe:bb:27:84:65:91:d2:83:1d:f8:86:cc:1a:
                    39:91:bf:d7:f0:3c:f2:a2:39:1e:5d:73:61:c7:ae:
                    9f:18:65:d1:2c:dc:dc:8f:18:6e:a4:e3:a6:39:7e:
                    30:4e:03:41:44:67:d1:42:5b:05:82:28:46:2c:34:
                    eb:d8:49:df:84:6b:3b:69:76:63:c4:d2:2d:a5:24:
                    cc:23:ae:14:f6:ee:cb:2f:1d:a2:96:4a:ed:2e:39:
                    32:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:72:49:3D:6E:34:83:E9:C9:49:11:28:9F:BE:03:F4:FA:3B:E7:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/2A72493D6E3483E9C94911289FBE03F4FA3BE7A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.240.0/21
                IPv6:
                  2804:548::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53005

    Signature Algorithm: sha256WithRSAEncryption
         1a:27:38:48:5a:94:d1:60:88:80:32:bd:a3:19:a7:d2:d1:0f:
         35:03:a9:bd:72:f6:b7:dc:da:4e:47:57:3c:da:8c:6c:4e:28:
         ac:a2:02:26:7e:a7:6b:48:e1:53:de:1d:4c:98:58:4b:10:f5:
         27:cd:80:75:ce:35:cd:79:41:8c:d2:d2:98:00:b6:37:f6:c6:
         86:64:8a:85:e4:84:b8:ca:5a:b8:af:c6:d2:41:ee:89:e2:f6:
         f6:60:29:67:93:3c:7d:cd:09:2b:68:48:3c:39:01:59:cd:52:
         23:91:25:aa:ec:4b:cc:ab:9c:92:5b:b6:11:36:21:18:9d:63:
         0d:e7:ac:80:eb:b3:41:a1:03:b7:dd:3f:e0:e6:af:db:d8:0e:
         d3:98:62:df:db:6d:72:b8:8e:b2:d5:0b:53:83:15:80:5e:3b:
         15:ea:52:c6:a1:e9:bb:36:16:9b:8c:f5:95:1f:f9:b3:96:60:
         69:c9:52:a3:d9:77:b5:23:a4:e5:6b:86:12:04:87:76:e8:86:
         0d:08:3b:7e:6d:13:71:69:34:b5:ad:32:ad:b8:8b:b1:06:96:
         28:a3:1e:1b:46:90:77:98:ce:11:0a:c0:55:5c:4c:7c:54:4b:
         9c:1a:3f:67:ab:1f:58:7b:57:a2:dd:7e:de:6a:e7:bf:16:b2:
         6e:86:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org