Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/812A72E8A31772F79D13ABBE8D369A69FF8CF55E.cer
File:                     812A72E8A31772F79D13ABBE8D369A69FF8CF55E.cer (raw, json)
Hash identifier:          YLjwmY7wH+ynlSIZWfCJQtUtxO27mr/XoO4ZZIaTmI8=
Subject key identifier:   81:2A:72:E8:A3:17:72:F7:9D:13:AB:BE:8D:36:9A:69:FF:8C:F5:5E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       729D15341D4AE484CFFF850DFE00B9B306B94F6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/1/812A72E8A31772F79D13ABBE8D369A69FF8CF55E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 14:33:22 +0000
Certificate not after:    Wed 29 May 2024 14:38:22 +0000
Subordinate resources:    AS: 269007
                          IP: 45.176.152.0/22
                          IP: 2804:5e08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9d:15:34:1d:4a:e4:84:cf:ff:85:0d:fe:00:b9:b3:06:b9:4f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 14:33:22 2023 GMT
            Not After : May 29 14:38:22 2024 GMT
        Subject: CN=812A72E8A31772F79D13ABBE8D369A69FF8CF55E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:2d:24:19:fe:57:0d:da:91:cb:89:08:81:
                    cf:1d:d4:30:1a:4d:39:01:ad:e0:65:e5:c7:92:63:
                    c9:ac:b4:99:95:4b:11:17:07:92:d6:8c:59:72:cf:
                    25:7c:eb:b8:38:51:2d:d1:cb:a8:e2:55:6b:47:1a:
                    5f:1a:7c:a6:6c:e9:47:1a:72:f0:85:e0:3b:41:b5:
                    5d:a7:ba:41:68:af:b3:44:52:a5:da:41:7c:f8:27:
                    27:cf:b4:dc:d4:2a:bc:32:ce:1c:72:f7:05:1a:3c:
                    72:50:9b:3e:04:6b:e9:d6:fc:b5:ce:43:a4:03:11:
                    b1:99:c9:fe:da:8a:bf:ad:0f:d9:5f:16:3c:98:63:
                    20:aa:69:64:14:93:c2:17:4f:68:b4:a2:5a:ba:01:
                    0e:da:d7:dd:e1:54:f5:97:7f:0d:b4:e7:ed:2c:cc:
                    9c:f6:cd:79:59:16:c0:17:94:a7:ad:71:5b:d4:8e:
                    55:aa:e8:9e:29:3d:6d:39:13:20:72:6f:dc:46:ad:
                    54:f4:00:99:db:d7:56:71:05:c5:6a:47:8f:c6:95:
                    e5:48:32:0d:26:9e:96:e7:8f:49:f4:bf:95:1d:f1:
                    10:7f:dd:9a:4a:ac:75:f8:b7:13:3c:9d:87:49:8b:
                    09:0c:34:32:89:cb:a8:46:54:30:7b:b3:1c:e7:45:
                    d2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:2A:72:E8:A3:17:72:F7:9D:13:AB:BE:8D:36:9A:69:FF:8C:F5:5E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/1/812A72E8A31772F79D13ABBE8D369A69FF8CF55E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.152.0/22
                IPv6:
                  2804:5e08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269007

    Signature Algorithm: sha256WithRSAEncryption
         93:a0:c8:54:49:30:52:c0:25:89:e9:a6:4a:1a:97:62:85:e1:
         b8:a2:5f:77:f1:01:c0:a7:2d:b5:7a:21:90:ca:a5:e1:ff:ae:
         35:2c:43:f6:b2:c1:4a:fa:8c:ff:6b:9c:89:64:a4:fc:f3:b0:
         47:25:d8:aa:ad:d5:eb:9f:0d:3d:7f:cd:e9:d1:36:fe:b9:2b:
         8b:92:78:31:b0:3d:cc:8a:c1:e7:aa:f4:b9:1a:b8:d1:78:bb:
         d7:a4:33:8d:f5:9c:13:5f:67:55:bb:b1:57:d3:97:5d:e6:d2:
         d7:01:6d:ab:88:5c:33:84:92:78:a3:48:e9:19:2c:de:0e:10:
         80:cf:4d:e7:81:ba:9c:1f:ea:d8:41:48:37:61:3c:60:4f:68:
         ec:35:0b:35:f9:8f:22:0f:02:d1:bd:0f:96:73:2d:6d:76:95:
         54:56:4e:cb:c5:f0:f6:3b:37:df:a2:70:25:97:46:27:73:7a:
         51:6c:d5:b0:bc:d6:21:7c:5a:50:2a:85:f9:5e:53:fa:dc:e4:
         10:4e:db:01:9f:2a:7f:53:ce:8d:50:90:25:7e:49:de:5a:0c:
         f6:93:bd:45:ca:1c:a8:2e:b2:e3:58:33:7b:a9:e9:45:57:82:
         2e:ba:6f:55:58:0b:9a:db:bc:a2:b2:88:fe:eb:98:c7:fc:dd:
         be:47:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org