Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/72D950483459BB286E83221CC667C2CA6132DB5C.cer
File:                     72D950483459BB286E83221CC667C2CA6132DB5C.cer (raw, json)
Hash identifier:          jFC2GvLoQ3xDyofWOf2S4yuNZbUv6bkdm9s9AFjkNvQ=
Subject key identifier:   72:D9:50:48:34:59:BB:28:6E:83:22:1C:C6:67:C2:CA:61:32:DB:5C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1AAB13E23305468003F1FB70FAB2C5D44E0B9435
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/72D950483459BB286E83221CC667C2CA6132DB5C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 15:13:57 +0000
Certificate not after:    Tue 17 Dec 2024 15:18:57 +0000
Subordinate resources:    AS: 269462
                          IP: 45.187.96.0/22
                          IP: 2804:6500::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ab:13:e2:33:05:46:80:03:f1:fb:70:fa:b2:c5:d4:4e:0b:94:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 15:13:57 2023 GMT
            Not After : Dec 17 15:18:57 2024 GMT
        Subject: CN=72D950483459BB286E83221CC667C2CA6132DB5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0b:47:a7:02:13:fe:7a:ce:9e:06:56:0a:45:
                    63:1e:14:c0:bc:e0:97:d0:27:10:84:d3:7b:48:a0:
                    4e:6b:15:63:7b:cc:48:f6:ed:76:68:c1:92:57:2a:
                    16:53:d5:68:6a:4b:93:3f:61:56:1b:9d:80:f4:80:
                    d7:d2:78:b0:99:4f:d7:55:bc:c0:2e:81:11:d1:37:
                    40:01:bf:f5:da:87:47:61:e2:2c:5d:92:d8:cb:1f:
                    98:2d:f0:54:f1:ec:49:1b:1a:94:39:5c:cc:3b:ac:
                    e5:8a:9f:c3:87:d5:2c:0b:a5:22:80:fb:ac:06:27:
                    3d:f7:95:f6:36:f7:6c:bc:9e:9b:05:ee:76:2b:11:
                    80:0e:42:85:bf:3e:87:32:1f:4a:f9:9e:a1:5c:71:
                    53:60:9b:5f:cf:ed:7f:17:0f:a8:5f:49:6c:ce:be:
                    3a:47:bf:40:7f:cc:38:4c:1c:b9:92:5c:16:82:d6:
                    98:5a:7b:7d:3d:03:fd:45:f5:1d:39:33:67:22:34:
                    74:f2:cf:4c:e7:ac:d3:92:89:25:4b:05:c8:c0:65:
                    4c:03:47:3c:85:cc:22:58:4e:e6:97:fd:44:6b:d5:
                    dd:40:de:af:fa:c1:f3:e1:97:d0:39:1d:9b:7e:5a:
                    c9:39:fd:99:6c:48:47:ca:81:9f:46:aa:99:eb:42:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:D9:50:48:34:59:BB:28:6E:83:22:1C:C6:67:C2:CA:61:32:DB:5C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/72D950483459BB286E83221CC667C2CA6132DB5C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.96.0/22
                IPv6:
                  2804:6500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269462

    Signature Algorithm: sha256WithRSAEncryption
         6b:25:14:66:5f:ad:ef:49:7d:da:0a:41:f7:0b:2a:0b:ea:77:
         1f:ec:14:ec:21:f0:ed:2a:4d:0e:04:6d:b1:47:c6:c7:3c:bd:
         4c:12:7e:0e:01:c9:36:67:44:cc:75:40:83:62:15:bd:67:af:
         ff:8f:4b:60:bd:7e:a3:9c:ad:ed:d6:23:59:df:e1:16:99:cf:
         cc:fb:5b:00:24:10:67:cc:d1:43:fa:0a:da:d4:13:20:67:bc:
         9a:b2:3a:6c:2c:db:2d:d2:10:82:b6:78:83:39:a9:1f:a0:dd:
         00:22:fe:42:0b:bc:67:95:d1:46:dd:73:54:23:11:0e:79:d3:
         59:a8:8c:2e:54:a7:1d:bb:b8:a1:77:1d:26:bd:0c:bc:fe:d7:
         3d:5f:60:35:68:02:ca:77:cc:23:81:27:8f:a0:d5:78:f1:5d:
         49:19:98:93:fb:e2:4e:6f:6d:85:e5:9d:f4:da:21:fc:d4:29:
         3e:d5:83:58:d6:c2:7b:ae:17:98:49:b0:09:d1:83:62:97:75:
         ab:7e:91:e0:34:dd:3f:44:bd:e2:6d:7f:46:bd:aa:f0:70:dd:
         ca:32:fc:39:e4:06:d4:71:90:bb:c2:81:a7:e9:be:64:e2:56:
         85:85:99:37:49:07:73:90:ce:f6:00:09:28:38:ad:2b:a3:48:
         fa:c2:d5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org