Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/72BC372F46669AA2811D1520F98C72B60CCC31D4.cer
File:                     72BC372F46669AA2811D1520F98C72B60CCC31D4.cer (raw, json)
Hash identifier:          +V/DyOgyjDT5pt0HLMQtrxsZbPr+4WZuI2c1ITenAVs=
Subject key identifier:   72:BC:37:2F:46:66:9A:A2:81:1D:15:20:F9:8C:72:B6:0C:CC:31:D4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7073B1F0CAB10FD45D324CBD4DC79B159E5AA10B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/72BC372F46669AA2811D1520F98C72B60CCC31D4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 12:13:42 +0000
Certificate not after:    Mon 10 Mar 2025 12:18:42 +0000
Subordinate resources:    AS: 268297
                          IP: 45.237.248.0/22
                          IP: 2804:4f00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:73:b1:f0:ca:b1:0f:d4:5d:32:4c:bd:4d:c7:9b:15:9e:5a:a1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 12:13:42 2024 GMT
            Not After : Mar 10 12:18:42 2025 GMT
        Subject: CN=72BC372F46669AA2811D1520F98C72B60CCC31D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bf:6b:ba:d4:29:b6:3d:e0:27:ee:73:77:7b:
                    87:a6:b2:f5:7a:df:e0:85:30:1e:a4:0a:79:c9:7e:
                    de:f8:a2:02:19:20:dc:6f:db:61:7d:99:63:a2:bc:
                    77:49:02:01:7d:6a:34:fb:b1:19:73:cc:31:b2:76:
                    11:e4:69:8e:44:83:17:e5:65:98:1a:a3:c7:93:8b:
                    b5:41:e5:d2:59:02:b6:58:28:62:73:7b:82:d3:ea:
                    9a:ab:9e:ff:ba:96:75:f4:ec:35:8a:31:2b:f5:19:
                    7f:be:5c:11:23:8d:ec:b1:15:45:01:8b:96:57:f5:
                    82:b0:a9:c5:84:9f:9d:e8:91:76:e9:3a:01:f5:43:
                    af:a9:72:4b:75:82:b6:6f:7c:c8:fa:3b:da:41:dd:
                    78:73:7e:a7:43:30:93:13:bd:be:a1:03:0d:f6:05:
                    12:17:a1:47:af:d7:21:b0:1c:ac:a9:0b:96:cb:f1:
                    45:aa:1e:95:cf:f0:81:89:d7:d4:33:14:94:37:8c:
                    bc:95:c1:f8:c9:7c:3c:c3:b6:62:e9:5d:5a:77:0e:
                    fe:b6:3e:13:e4:ae:2b:0b:9f:56:02:24:29:dc:bc:
                    79:e7:71:09:50:74:86:42:4e:bf:ab:c7:2a:17:f9:
                    86:90:a8:bf:77:6f:56:b1:c3:c5:8e:3b:1b:a1:af:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:BC:37:2F:46:66:9A:A2:81:1D:15:20:F9:8C:72:B6:0C:CC:31:D4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/72BC372F46669AA2811D1520F98C72B60CCC31D4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.248.0/22
                IPv6:
                  2804:4f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268297

    Signature Algorithm: sha256WithRSAEncryption
         18:47:06:7b:89:2d:98:de:0d:e5:ea:71:bb:37:5d:f9:43:88:
         df:db:97:96:35:76:ac:5e:3f:76:c5:49:3c:1f:6c:e1:60:57:
         61:e9:2f:d7:df:2a:64:7d:cb:50:67:39:f8:db:e8:46:dc:a9:
         eb:41:47:05:d4:c2:6d:de:29:e0:ee:ca:06:b1:64:4e:ce:5c:
         d4:b2:79:cf:a0:48:e9:f7:ad:46:16:58:16:f0:dc:51:4d:0c:
         68:46:24:32:8c:d5:ff:55:4d:e8:62:04:fb:f7:33:bd:96:da:
         40:6b:15:3f:09:ce:94:25:b6:96:18:8b:21:62:d3:26:34:34:
         37:83:5c:7b:d3:a6:8c:cf:b2:cf:a8:55:a5:9b:df:1a:9a:60:
         99:8e:80:e8:74:43:66:4a:8c:c1:28:08:ae:95:72:b3:68:03:
         7b:d3:ea:9c:8d:a8:c5:f0:d0:3f:eb:75:7b:d3:37:78:93:33:
         60:3e:d3:a7:4b:55:74:21:22:ed:29:63:c2:d7:33:13:9c:7f:
         6b:64:ff:3d:14:43:89:7e:68:13:50:6b:d2:fb:66:f4:7e:8e:
         0b:01:be:d6:91:8d:cf:46:51:7b:d0:95:93:4f:d9:52:64:b0:
         78:54:94:18:b3:c3:63:fa:64:f6:67:9f:58:be:9a:7c:b4:cd:
         a2:11:e1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org