Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/720C2138E36CBBCE34902B436FADF3C800B516B7.cer
File:                     720C2138E36CBBCE34902B436FADF3C800B516B7.cer (raw, json)
Hash identifier:          EzyCiPwnxejiuQ8a2Ze75HTalHijO34XXObAg/SKSfI=
Subject key identifier:   72:0C:21:38:E3:6C:BB:CE:34:90:2B:43:6F:AD:F3:C8:00:B5:16:B7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42B88E0B2F2BCD402060384CE855994AF5019337
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/720C2138E36CBBCE34902B436FADF3C800B516B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Nov 2021 14:32:07 +0000
Certificate not after:    Tue 29 Nov 2022 14:37:07 +0000
Subordinate resources:    AS: 266066
                          IP: 45.4.124.0/22
                          IP: 2804:3a08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b8:8e:0b:2f:2b:cd:40:20:60:38:4c:e8:55:99:4a:f5:01:93:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 30 14:32:07 2021 GMT
            Not After : Nov 29 14:37:07 2022 GMT
        Subject: CN=720C2138E36CBBCE34902B436FADF3C800B516B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:25:bd:f8:e6:cd:96:e4:98:aa:35:47:70:b4:
                    7e:c0:fe:60:8f:f2:c3:19:f4:4f:3e:dc:7e:7e:8a:
                    27:23:e2:6b:9f:7c:4c:3e:91:4b:10:51:3c:0f:00:
                    3c:25:58:f7:a4:d2:2a:b6:a1:fe:e4:50:27:e5:28:
                    a2:30:1f:ae:4b:3b:8a:86:48:2a:e1:bf:e9:33:fb:
                    0f:8c:1f:9a:44:f0:6e:87:30:82:ef:2d:73:33:c3:
                    17:a8:4c:a7:13:92:d9:6a:ff:21:28:fc:6c:a5:a1:
                    bd:1e:86:4f:83:6b:32:8e:23:6c:d8:1b:28:3d:f3:
                    e4:2d:29:12:77:bb:e8:90:87:c8:c6:02:b7:c0:95:
                    7a:1c:2b:81:49:47:b0:d7:84:98:66:f5:c7:88:e9:
                    cb:cc:df:83:93:4e:de:6d:4e:5b:fb:17:6a:73:b6:
                    18:bf:a2:66:0d:cb:5e:a9:1c:f4:eb:ef:50:59:c3:
                    e0:ee:23:26:5f:b2:a6:e8:60:56:a5:9d:2f:95:76:
                    e6:8e:2a:35:7f:d8:2e:bb:3c:e6:95:0d:2e:7e:03:
                    69:1f:70:c3:c3:12:29:4f:f5:39:37:11:1a:51:ab:
                    93:51:80:d7:99:7e:7e:12:60:43:95:34:8b:f3:c0:
                    c3:7e:aa:9b:df:57:63:64:47:4d:18:e6:db:ca:cf:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:0C:21:38:E3:6C:BB:CE:34:90:2B:43:6F:AD:F3:C8:00:B5:16:B7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/720C2138E36CBBCE34902B436FADF3C800B516B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.124.0/22
                IPv6:
                  2804:3a08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266066

    Signature Algorithm: sha256WithRSAEncryption
         6c:1e:ac:6f:75:99:4a:cc:92:20:be:02:bf:ce:2b:f2:a5:26:
         e7:ae:4f:d1:80:2e:64:12:c2:b4:d5:77:4f:64:bf:71:75:68:
         5a:98:5c:c0:c8:92:94:cb:d6:7b:c2:07:23:ad:6c:5f:2a:de:
         06:9c:3a:dc:ea:ec:40:7d:14:c7:bf:61:6d:92:39:a3:91:dd:
         1d:b9:cc:9d:d2:b8:01:d4:3a:18:0f:45:68:25:0d:b5:c8:f6:
         3e:4f:cc:84:0a:85:21:2f:39:5d:41:8e:dd:0e:1b:1b:29:c0:
         c0:28:4c:d1:d6:0c:e0:aa:6e:8b:4f:59:8a:01:c2:c2:ba:4a:
         73:76:fc:c0:7c:09:28:cb:1e:26:56:3a:5c:b5:e4:a2:12:73:
         53:2a:45:ec:0b:f2:e3:c7:d4:e9:b4:28:f2:49:46:6b:44:5b:
         1b:39:91:6f:eb:d5:bc:3b:d9:3d:81:6c:55:11:65:c6:f0:d7:
         9b:14:3e:23:ac:dc:55:9a:c8:23:03:70:b5:c0:29:8b:40:0e:
         22:04:00:23:0d:bd:8f:ca:13:c3:34:99:eb:8e:03:09:ee:d0:
         f5:44:2f:f0:2b:55:da:ee:f5:40:20:96:8a:d2:99:82:26:56:
         9a:ac:74:2f:9e:31:db:47:0a:e9:4d:cb:06:19:d6:41:40:38:
         d3:04:70:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org