Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/72F9EE077798B975CBED66FE7AE71FA3A2465390.cer
File:                     72F9EE077798B975CBED66FE7AE71FA3A2465390.cer (raw, json)
Hash identifier:          hFX4QtMtpu8Lzw9VCGJ1iHQV1cO17wjGca02q0M510w=
Subject key identifier:   72:F9:EE:07:77:98:B9:75:CB:ED:66:FE:7A:E7:1F:A3:A2:46:53:90
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DB16FAF476EB19AA4155F749773D60A29E7F378
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/72F9EE077798B975CBED66FE7AE71FA3A2465390.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 14:08:07 +0000
Certificate not after:    Wed 18 Dec 2024 14:13:07 +0000
Subordinate resources:    AS: 265038
                          IP: 170.150.200.0/22
                          IP: 2804:31cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b1:6f:af:47:6e:b1:9a:a4:15:5f:74:97:73:d6:0a:29:e7:f3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 14:08:07 2023 GMT
            Not After : Dec 18 14:13:07 2024 GMT
        Subject: CN=72F9EE077798B975CBED66FE7AE71FA3A2465390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1f:19:22:b8:bb:a1:06:40:3f:a3:eb:7e:d9:
                    69:49:65:ed:6d:c2:ef:78:3f:d6:35:db:35:c1:88:
                    69:00:36:b6:e1:11:19:c6:d6:d4:c1:96:29:bf:4b:
                    a3:a1:b5:73:c5:1d:c3:9b:fd:53:e8:2b:e0:0e:14:
                    e2:4a:9e:46:c0:37:12:ef:ec:02:2d:e4:e3:84:fb:
                    b4:be:d2:14:f3:c6:c4:a7:fb:4f:7d:d4:dd:78:97:
                    15:3d:47:95:f4:00:99:9c:f7:33:5e:5e:95:23:21:
                    27:ac:c8:0e:2d:3f:45:75:ab:ae:32:ac:20:7a:e9:
                    b9:7c:2c:83:71:2b:ff:14:fa:3e:59:ab:3e:b4:b1:
                    59:f3:86:a4:29:a9:ec:f3:be:a2:dd:17:6d:f7:e7:
                    29:d2:e8:fd:8c:05:de:2a:a4:e3:8f:ab:5b:48:a6:
                    6a:f6:fe:47:6d:f5:19:59:89:76:5c:65:1e:17:1c:
                    ba:e5:a2:a9:94:9c:d3:51:74:e5:d6:af:e9:96:ec:
                    cc:8b:d1:b8:37:18:62:61:f5:42:95:94:cf:37:97:
                    9d:c0:43:89:59:71:ad:14:31:9b:ce:2d:f1:fb:c0:
                    3a:d6:7a:5e:22:99:18:25:1e:62:ac:6b:b6:f5:63:
                    0c:2c:68:7b:14:fa:1f:ec:56:e6:48:d1:15:66:c9:
                    70:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:F9:EE:07:77:98:B9:75:CB:ED:66:FE:7A:E7:1F:A3:A2:46:53:90
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/72F9EE077798B975CBED66FE7AE71FA3A2465390.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.200.0/22
                IPv6:
                  2804:31cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265038

    Signature Algorithm: sha256WithRSAEncryption
         86:57:f1:52:47:8e:e4:3c:e4:c4:f3:13:92:28:86:c0:6c:7d:
         9c:95:c8:ba:79:c0:be:1e:ed:05:b0:8c:01:41:3e:88:f1:c1:
         0f:c8:7a:b8:ef:c2:8f:7a:9a:a8:61:36:bc:eb:63:1a:ae:eb:
         ec:89:8d:97:6f:e8:26:c2:ab:4d:bc:7e:24:6f:fb:b8:68:0e:
         2b:2f:fe:80:e9:83:a3:41:37:c1:08:16:3d:82:e5:1e:8e:4e:
         cd:04:1a:70:53:c8:aa:cf:67:d4:a8:83:77:77:38:57:6b:1f:
         d4:c3:ed:a9:fb:01:12:9b:de:b6:ff:db:2a:f7:b0:7d:51:0b:
         16:8c:a4:ea:05:01:5b:eb:d6:9f:94:fb:a1:74:0f:94:e1:77:
         79:9f:93:f0:11:e8:51:60:a4:98:19:b0:2f:1f:5e:86:f2:de:
         d3:88:f7:ad:c2:5c:f0:30:21:76:94:a8:cf:bd:65:ba:90:ac:
         cb:66:b5:25:6c:bb:a4:86:f0:bf:21:fc:20:14:1b:bb:56:25:
         c9:dd:2c:0d:e4:81:a2:07:3b:5a:3d:04:a6:e8:7e:53:f3:2d:
         8c:41:58:b2:7d:56:da:38:c5:24:10:e3:ca:98:bf:fa:67:43:
         4d:88:eb:89:40:23:19:38:9c:27:41:84:5e:41:d2:e5:3f:04:
         66:4b:98:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org