Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.cer
File:                     725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.cer (raw, json)
Hash identifier:          ExjQVlMUnRx4pZHojhgtwsYKpcOtEa2VoZXrMjgTn6U=
Subject key identifier:   72:56:25:A6:56:CC:D2:BE:3F:3F:0F:87:D9:A4:BF:2E:19:2B:E4:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1324E866CD10C3F033F293AA334258E10CDE6184
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.mft
caRepository:             rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 13:34:03 +0000
Certificate not after:    Thu 13 Feb 2025 13:39:03 +0000
Subordinate resources:    AS: 61689
                          IP: 131.108.124.0/22
                          IP: 177.84.236.0/22
                          IP: 200.34.216.0/22
                          IP: 2804:1d04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:24:e8:66:cd:10:c3:f0:33:f2:93:aa:33:42:58:e1:0c:de:61:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 13:34:03 2024 GMT
            Not After : Feb 13 13:39:03 2025 GMT
        Subject: CN=725625A656CCD2BE3F3F0F87D9A4BF2E192BE414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:5b:6d:7e:13:42:1a:d2:1b:da:51:a2:dc:
                    76:cd:a8:66:3b:3a:0d:4b:61:05:42:de:ed:64:38:
                    eb:81:28:1c:ec:ea:4a:e5:f2:10:37:e5:4b:b9:a5:
                    53:9b:01:e3:e9:9a:4d:18:72:41:57:ca:24:e8:f8:
                    58:40:5d:51:4c:19:30:00:6d:9a:7e:8b:9f:46:eb:
                    d0:d8:71:6d:8c:7e:d3:cb:cd:25:26:ed:f6:ab:8c:
                    69:c2:cc:d0:14:83:8b:2c:35:0e:0b:a5:61:4c:6b:
                    6b:e7:f8:d5:1c:d3:18:99:ab:d2:7b:14:63:3b:5e:
                    e0:e3:bf:cd:51:5c:b1:7c:3a:75:85:14:43:0b:6c:
                    de:fe:a4:f3:7f:cb:f4:f4:e7:2d:5f:81:fa:fd:74:
                    f8:5e:66:ba:93:b6:2b:7a:48:65:d8:a7:8f:a9:71:
                    36:af:19:ec:35:a9:ff:39:80:da:bb:f8:f9:42:54:
                    17:46:2d:df:27:37:54:91:f8:c6:4c:7e:d8:f9:2d:
                    ba:d2:93:2b:fd:82:c8:de:9e:5c:af:84:d0:c4:c7:
                    7f:56:f5:06:3c:a0:46:f8:e0:9a:a3:1d:1b:f6:0c:
                    4d:02:17:24:88:21:50:80:c2:5c:c2:35:f9:5a:e5:
                    d8:e1:15:59:3e:28:02:98:d9:b5:da:a9:98:b8:fa:
                    fe:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:56:25:A6:56:CC:D2:BE:3F:3F:0F:87:D9:A4:BF:2E:19:2B:E4:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.124.0/22
                  177.84.236.0/22
                  200.34.216.0/22
                IPv6:
                  2804:1d04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61689

    Signature Algorithm: sha256WithRSAEncryption
         4f:2c:37:e2:26:1b:ad:51:19:45:f5:c9:04:a1:6c:b2:80:be:
         a0:18:16:f9:1c:05:f2:92:07:6d:58:45:b5:da:47:83:10:2f:
         6f:8e:1e:d3:54:fb:53:d6:22:da:d9:ab:69:66:d3:5b:4d:d3:
         6e:e5:14:50:ce:7d:ea:35:8e:ee:ec:e4:2e:9d:a4:17:5b:ff:
         d0:94:58:ca:86:c5:59:b7:09:e4:1c:48:eb:21:7e:f9:c0:10:
         48:d2:9f:cb:71:1e:cb:62:0c:e5:30:0e:6b:d9:05:11:1f:76:
         e0:13:e4:f8:ef:0b:06:e9:53:f4:e0:4f:fe:7b:a2:93:5c:46:
         d8:5b:18:da:86:31:8b:2d:eb:b4:fc:84:4e:ca:c8:ce:af:e3:
         7b:47:6f:63:74:9e:ca:e6:3d:fa:93:08:2b:06:c3:aa:30:9e:
         64:97:24:c9:d2:2f:f8:ea:ee:ba:c8:81:c7:09:4d:65:01:4e:
         d1:56:3f:5a:e0:d8:00:9d:2d:de:62:28:08:51:0f:8a:4f:2a:
         d7:32:8c:99:cf:a8:39:34:7a:61:5c:61:07:ae:9b:a1:0f:89:
         e6:f3:e1:16:16:57:a0:16:46:d9:13:22:35:75:a4:d3:3b:a4:
         53:35:cb:2f:4e:53:32:21:b2:41:e4:f7:77:59:2c:e1:a6:da:
         0b:a3:51:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org