Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/72CB6CD5306F05F685EDBBEB0DD8332A268A9D34.cer
File:                     72CB6CD5306F05F685EDBBEB0DD8332A268A9D34.cer (raw, json)
Hash identifier:          gXRdKagFaq8JjlsEpfV4+SLTxeypc0hc2MhvYOzTphw=
Subject key identifier:   72:CB:6C:D5:30:6F:05:F6:85:ED:BB:EB:0D:D8:33:2A:26:8A:9D:34
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12C716EE2777BAFF7FBBCC6CAA78F5747FBB5BD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EkpfEHCQWmV4fY35MbQAgut9Y1ykwJnZNZ7DCZNg5gMD/0/72CB6CD5306F05F685EDBBEB0DD8332A268A9D34.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EkpfEHCQWmV4fY35MbQAgut9Y1ykwJnZNZ7DCZNg5gMD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 May 2022 18:03:12 +0000
Certificate not after:    Fri 19 May 2023 18:08:12 +0000
Subordinate resources:    IP: 45.238.96.0/22
                          IP: 2804:4f7c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c7:16:ee:27:77:ba:ff:7f:bb:cc:6c:aa:78:f5:74:7f:bb:5b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 20 18:03:12 2022 GMT
            Not After : May 19 18:08:12 2023 GMT
        Subject: CN=72CB6CD5306F05F685EDBBEB0DD8332A268A9D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b3:50:27:90:93:46:cc:75:29:46:ed:cb:1f:
                    37:89:4a:04:c0:83:ba:df:72:ec:4e:aa:28:22:c7:
                    22:94:58:13:89:9b:cd:eb:03:a5:8e:30:2a:67:e6:
                    16:b9:19:c3:b1:02:1c:6d:b1:07:c0:7f:b5:cb:51:
                    f8:ae:0f:b4:a4:d5:a0:f5:79:a1:e2:f2:35:f6:f6:
                    16:40:35:72:b9:13:55:07:b7:0d:97:48:f0:45:10:
                    49:a5:a6:ce:ed:56:fc:1b:1d:ab:a9:d0:56:26:c6:
                    76:b0:14:ec:77:67:09:db:56:e8:de:c3:31:90:f9:
                    7b:ab:56:0a:ec:dc:90:cf:b3:d5:49:c0:e4:4d:87:
                    8f:d5:61:8a:c8:c1:1d:c5:99:ac:fa:08:8f:51:61:
                    d6:07:7b:78:a0:ef:9e:9e:83:22:2f:48:69:ea:3f:
                    b7:e8:21:97:a9:de:f0:e4:2f:14:ed:20:8d:4a:4a:
                    8b:92:e6:98:14:a6:fc:76:03:3b:50:84:a8:20:57:
                    f1:51:49:69:a5:ad:68:6f:b1:65:70:70:be:f6:7b:
                    1f:2f:02:de:93:c3:06:ca:9f:20:d8:4b:57:b4:e1:
                    9a:84:d4:5b:92:8f:d9:71:91:ac:2a:19:b1:28:82:
                    d9:0e:7f:ab:ea:65:f8:5c:04:1d:c9:df:46:b7:83:
                    71:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:CB:6C:D5:30:6F:05:F6:85:ED:BB:EB:0D:D8:33:2A:26:8A:9D:34
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EkpfEHCQWmV4fY35MbQAgut9Y1ykwJnZNZ7DCZNg5gMD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EkpfEHCQWmV4fY35MbQAgut9Y1ykwJnZNZ7DCZNg5gMD/0/72CB6CD5306F05F685EDBBEB0DD8332A268A9D34.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.96.0/22
                IPv6:
                  2804:4f7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:77:c1:c6:4c:ec:2a:88:ca:b1:d2:49:67:ee:05:ab:be:54:
         22:58:df:94:aa:c3:ba:49:a8:33:fb:d5:c3:48:c7:35:96:64:
         1a:e6:d1:61:ee:e7:41:47:5e:78:f6:c2:2c:a6:c3:68:20:8b:
         f4:34:e4:de:9a:56:03:3c:1c:9b:6e:ef:57:a3:f4:3e:e2:7d:
         16:e1:87:e6:a9:93:da:1b:7e:1a:27:08:44:57:db:f3:37:7b:
         43:6d:a7:2d:11:98:9b:21:c1:b5:77:f2:ff:08:23:b2:6d:f1:
         e1:69:e4:3c:1e:d0:12:0d:f1:e1:84:a1:60:85:8e:ad:53:69:
         23:97:1b:0c:b3:fc:cb:aa:46:4d:fe:1c:e7:45:41:d5:16:c9:
         4f:0b:fe:9a:bd:67:f1:8b:61:35:22:47:ab:6a:8f:99:75:06:
         c1:33:50:3a:78:33:77:eb:55:78:f1:9a:26:89:4e:b1:69:6c:
         44:8a:61:41:46:ce:fd:13:3e:e8:95:d8:8c:67:f0:d2:2c:2d:
         15:6c:f3:90:f3:15:14:4f:e6:60:b3:ce:74:02:ff:06:d4:3a:
         f7:d2:4f:7a:da:f3:01:39:63:da:d5:43:2b:41:63:e3:40:a8:
         80:48:f0:d8:ef:59:36:ae:af:a7:5f:e9:b4:ff:0f:d9:60:bd:
         aa:39:e1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 01:25:26 2025 by rpki-client