Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/72EDE57983FDA35FB55077EB3CD59C7FD7BF9855.cer
File:                     72EDE57983FDA35FB55077EB3CD59C7FD7BF9855.cer (raw, json)
Hash identifier:          O1ws8ffeXdbDdYH9Du3TCtnTYiDgDeD0dfYw+3ti1/M=
Subject key identifier:   72:ED:E5:79:83:FD:A3:5F:B5:50:77:EB:3C:D5:9C:7F:D7:BF:98:55
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34E7602CFF786CC273D846C8A39B18D424E0AD7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/72EDE57983FDA35FB55077EB3CD59C7FD7BF9855.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 21:00:24 +0000
Certificate not after:    Tue 11 Mar 2025 21:05:24 +0000
Subordinate resources:    AS: 271541
                          IP: 181.232.250.0/23
                          IP: 2801:80:3e70::/47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e7:60:2c:ff:78:6c:c2:73:d8:46:c8:a3:9b:18:d4:24:e0:ad:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 21:00:24 2024 GMT
            Not After : Mar 11 21:05:24 2025 GMT
        Subject: CN=72EDE57983FDA35FB55077EB3CD59C7FD7BF9855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c9:e8:b8:54:55:a6:64:33:66:bf:fb:73:22:
                    4e:39:35:79:d7:b6:cf:e4:58:9d:a2:bf:4b:77:bf:
                    cc:ab:71:9d:4d:d6:36:39:6f:3d:f3:2e:8e:34:17:
                    e0:bc:da:f8:1d:90:6d:3c:ac:85:4f:fc:2f:40:5a:
                    cd:06:d9:58:b1:74:10:b3:54:87:bf:b4:9c:b4:cb:
                    1d:44:db:32:40:36:f7:ee:9c:44:c5:cc:ba:95:02:
                    fa:5a:9d:fa:c7:09:f2:09:78:2d:71:9d:25:47:90:
                    4d:da:1c:32:7c:57:79:80:ad:9d:40:71:38:c2:f5:
                    9d:9c:65:00:55:c5:1d:34:bd:6d:ac:aa:14:40:7c:
                    e1:87:0f:9f:67:81:3d:f7:0d:de:8e:4c:08:6c:5a:
                    72:0b:aa:7d:66:34:4e:78:87:eb:3b:c7:d4:3f:de:
                    f1:17:b9:c6:e7:93:2b:33:b2:b2:6a:92:85:24:d2:
                    ac:97:06:31:a9:09:44:45:93:c8:98:5a:9c:da:2a:
                    1d:b8:23:50:d6:2e:b8:92:fb:d7:c5:ec:47:bb:29:
                    09:bd:ae:0e:b3:d0:38:d1:76:1b:2a:79:d6:38:3b:
                    19:16:87:fc:89:4a:80:b4:ff:29:9c:ac:e9:4b:97:
                    cf:a7:00:dc:d0:52:ad:be:04:4d:f2:8f:b5:9d:db:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:ED:E5:79:83:FD:A3:5F:B5:50:77:EB:3C:D5:9C:7F:D7:BF:98:55
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/72EDE57983FDA35FB55077EB3CD59C7FD7BF9855.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.250.0/23
                IPv6:
                  2801:80:3e70::/47

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271541

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:1d:8f:6d:08:4f:5f:26:63:09:1d:8c:51:55:d0:97:eb:
         d5:1a:f2:31:59:1d:94:e7:9c:b7:8a:bd:4e:77:04:10:8c:39:
         47:c5:15:d3:e3:91:e5:90:7b:29:a3:e8:31:b0:e4:b1:ed:08:
         5c:c3:ef:cf:88:99:26:9d:22:22:dd:a0:7c:d3:27:e0:e9:d2:
         92:dc:c2:c2:3e:ca:42:4a:87:12:bc:81:15:78:a9:36:07:52:
         a0:b9:d1:a4:df:ac:8f:03:08:43:64:be:e5:9a:e9:69:aa:05:
         16:5f:7f:f8:8c:67:b9:67:e8:d1:70:5e:06:c7:a1:11:5b:76:
         a6:d6:09:fb:3e:7a:c1:39:26:20:95:10:62:a3:82:7e:6b:70:
         e8:f5:af:10:3f:7b:72:64:a1:e1:b9:cc:8e:dc:fa:55:ec:ee:
         68:ee:20:5a:10:32:f0:8b:06:40:f5:cc:be:93:de:69:53:74:
         8d:68:ac:c4:f8:48:66:fa:1c:e7:39:06:51:55:99:93:42:cf:
         50:e2:80:81:3d:ef:b6:41:f9:eb:77:b7:25:c1:f2:a7:91:8d:
         73:31:0a:bb:f6:ee:d4:30:a4:89:5c:3d:7a:c5:bc:7e:8c:8e:
         15:8f:fe:0c:bf:44:fc:d9:3f:f1:ce:40:ca:92:b7:c2:20:9c:
         96:8e:de:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org