Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1.cer
File:                     72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1.cer (raw, json)
Hash identifier:          Bz5PTRmDYkNZRxpDWW19CkRi6YJjsVdlXCyLEzg+8LA=
Subject key identifier:   72:B5:92:FB:BD:0C:65:9F:CD:47:4B:6B:BA:5F:D3:F5:6D:4B:96:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A6069623A8AF25E44D92EAC9E98D2C9F369F2DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0/72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2024 00:57:58 +0000
Certificate not after:    Wed 05 Mar 2025 01:02:58 +0000
Subordinate resources:    AS: 271680
                          IP: 187.111.112.0/22
                          IP: 2804:7f50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:60:69:62:3a:8a:f2:5e:44:d9:2e:ac:9e:98:d2:c9:f3:69:f2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  6 00:57:58 2024 GMT
            Not After : Mar  5 01:02:58 2025 GMT
        Subject: CN=72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:b6:49:e5:6f:34:53:9d:94:36:f6:9a:4e:
                    93:11:cf:45:3d:32:3a:8a:c7:25:10:47:9b:75:9f:
                    39:b6:09:a9:68:b6:06:7d:ef:00:10:2f:86:7e:02:
                    a5:d8:ad:a6:23:5e:3c:45:f4:18:6e:5e:9c:90:27:
                    e2:6a:3f:0e:2a:58:36:ea:b3:b4:28:bd:7f:56:cf:
                    67:3e:1f:b2:52:fa:0a:3c:84:ef:53:4f:0b:94:8c:
                    a4:03:a6:95:f6:da:46:83:55:51:8d:e0:a0:e0:da:
                    10:a1:e3:04:7e:0b:77:59:9b:c1:bd:11:7c:da:26:
                    bd:04:90:6c:54:91:91:e1:16:71:e5:9c:80:f6:63:
                    d1:37:f5:05:ef:07:90:bb:b1:bd:16:69:ad:b7:36:
                    f5:1e:ea:88:4f:14:0d:4c:79:10:d9:53:79:87:aa:
                    98:d4:73:bf:eb:1c:73:0c:8d:b6:49:09:c0:f2:1c:
                    d5:73:19:72:f6:47:66:e9:45:25:77:3f:e6:eb:d4:
                    f7:5c:7f:12:aa:e9:f0:26:32:89:44:2d:00:d0:c4:
                    9b:c7:d6:f5:62:e8:14:92:d6:79:a0:32:63:6f:a9:
                    a1:9a:24:89:e0:78:cb:b6:0f:a3:35:c9:60:c9:7d:
                    35:72:2d:c2:ad:9b:bc:28:29:0c:2f:c0:5d:cd:b1:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:B5:92:FB:BD:0C:65:9F:CD:47:4B:6B:BA:5F:D3:F5:6D:4B:96:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0/72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.112.0/22
                IPv6:
                  2804:7f50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271680

    Signature Algorithm: sha256WithRSAEncryption
         3f:46:41:20:1b:c4:db:ca:cb:19:74:15:c2:83:81:44:1e:c7:
         a4:3c:62:84:fc:f3:d4:0e:72:22:19:86:c1:80:d9:4b:15:d9:
         36:3f:ca:33:e9:a1:1c:0d:dc:05:d2:b9:d5:da:2c:1d:0e:3c:
         3f:0a:04:e6:d5:be:ed:84:95:f5:eb:0b:c1:d3:7b:2c:f3:6b:
         88:36:79:14:48:32:e5:74:9f:88:70:6f:2a:57:34:63:64:25:
         56:9f:f0:24:d5:5e:f4:d9:50:99:81:f6:c3:d3:bf:da:41:6a:
         24:cd:35:a6:43:41:33:fd:a3:8b:e3:60:c1:ad:6d:34:8d:f2:
         c4:5e:37:35:99:bf:91:9b:1c:3a:22:6f:d1:29:5f:ca:cf:96:
         08:28:21:26:1d:3d:8d:e8:7d:c9:c3:a6:05:23:56:17:84:f9:
         4e:24:4b:b5:d7:1f:8e:ed:45:ea:c4:00:1f:0f:3d:a3:d6:75:
         7d:78:a6:ce:73:18:1a:85:8b:42:33:e4:92:2b:03:a0:e3:cb:
         bb:99:2a:ae:43:9e:07:10:cc:97:d1:f2:d4:5f:6b:69:51:64:
         ca:89:83:48:a2:bd:06:c9:61:08:6e:15:44:54:47:6e:a5:4f:
         e8:bc:62:c2:bd:e7:7d:ad:42:0a:88:02:43:47:dd:0d:01:d7:
         1b:39:c1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org