Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer
File:                     72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer (raw, json)
Hash identifier:          DUk5um6akvkce7IEUiJ5Js3j/NVj/z/b0R4m6rkWHjo=
Subject key identifier:   72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       123C795FB2B19161DBDA6DACB44050D7855081EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 11:06:54 +0000
Certificate not after:    Thu 01 Aug 2024 11:11:54 +0000
Subordinate resources:    AS: 269160
                          IP: 45.181.28.0/22
                          IP: 2804:6054::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3c:79:5f:b2:b1:91:61:db:da:6d:ac:b4:40:50:d7:85:50:81:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 11:06:54 2023 GMT
            Not After : Aug  1 11:11:54 2024 GMT
        Subject: CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bb:53:b7:6b:f3:5a:38:6b:74:bf:ba:86:64:
                    9f:d9:84:76:d6:1d:59:a7:c7:a3:4c:dc:d8:5a:8e:
                    ea:c4:97:e0:d7:39:0d:5f:08:a4:6d:78:ca:8c:83:
                    b0:cc:79:1b:1e:bc:71:4e:70:53:0c:71:43:17:eb:
                    ed:b3:53:4b:7f:f2:ee:b3:53:31:c1:5d:42:87:8e:
                    75:d3:b2:34:e2:00:bb:27:e5:e6:5c:58:02:35:34:
                    bf:05:a0:a0:e7:1a:6f:e2:79:0b:40:b7:e1:63:49:
                    ff:f5:11:1e:46:d5:48:3d:cf:fd:e8:39:23:d4:0c:
                    1c:98:0e:5a:05:2d:2e:80:f6:79:b9:5a:1a:94:64:
                    9d:63:d2:3b:78:15:f4:25:e8:2f:5a:74:23:00:ca:
                    d6:ba:33:0b:23:75:b8:32:ac:a6:37:54:1b:c6:bc:
                    4b:1f:04:8d:d8:5c:22:c4:6d:88:dc:e2:7e:f6:b3:
                    bc:00:e8:b8:99:d9:b0:f1:1a:4e:56:06:89:1d:ae:
                    ff:c0:5d:02:a8:cd:ac:40:01:21:d2:7b:91:03:a1:
                    25:31:12:a2:ec:ad:70:ae:e7:d4:6f:53:dd:06:aa:
                    77:d1:fe:be:d2:2c:84:b6:da:5c:9a:69:ca:c5:dd:
                    47:30:f8:f7:63:dd:6d:61:e5:9a:c1:2f:12:8b:13:
                    71:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.28.0/22
                IPv6:
                  2804:6054::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269160

    Signature Algorithm: sha256WithRSAEncryption
         94:1d:96:41:bb:e1:dd:65:1e:45:33:4e:19:1e:75:17:2c:38:
         e7:e9:63:a6:b6:db:2f:c2:47:65:51:a9:a0:44:2e:9b:1a:68:
         60:46:da:bf:ca:4a:7c:54:1b:93:5a:8a:9e:3c:d1:e3:dd:8b:
         1b:75:d4:2e:f1:8a:80:8a:24:3c:24:c7:47:6d:30:53:79:68:
         63:cf:b7:ef:c4:0a:0e:fc:b6:c4:c9:30:97:18:e8:24:94:2c:
         b0:20:fc:38:fd:55:bd:eb:54:65:23:c3:d1:e6:7d:0f:5e:09:
         1b:c1:c7:f7:c9:f8:c4:d6:81:db:91:e0:e2:bb:82:77:44:86:
         aa:70:e7:bc:bc:72:49:4f:69:89:72:94:1d:6c:c6:26:88:43:
         ea:8e:56:f0:29:99:95:db:e0:5d:3b:a9:cf:10:67:9e:a4:c9:
         bd:bf:2a:91:8e:70:91:b6:4a:f8:d4:a2:f6:51:ba:aa:11:68:
         80:3a:c4:ad:23:52:05:cc:96:6c:74:a5:cf:bc:7a:64:43:38:
         89:f7:0c:c5:54:8a:59:fc:04:cd:1a:20:67:f4:48:a8:87:a1:
         aa:96:a6:c7:07:a0:be:7a:ca:9b:c9:2d:a2:8d:b3:56:fc:b8:
         64:ac:2a:f6:ee:46:6a:1c:ac:b0:2a:96:8b:71:d4:61:f1:63:
         ac:ca:58:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org