Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B72A8A90D6AB4B9DE27857518572E078B4ADF5F5.cer
File:                     B72A8A90D6AB4B9DE27857518572E078B4ADF5F5.cer (raw, json)
Hash identifier:          olXS80oNq05fDfIJKCuUJ9ODpFu9r+OdzjvX42hnNEA=
Subject key identifier:   B7:2A:8A:90:D6:AB:4B:9D:E2:78:57:51:85:72:E0:78:B4:AD:F5:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12BA073B86A71E8AAB32F310FC405D40FE9337CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/B72A8A90D6AB4B9DE27857518572E078B4ADF5F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 18:49:57 +0000
Certificate not after:    Tue 23 Jul 2024 18:54:57 +0000
Subordinate resources:    AS: 263038
                          IP: 177.23.40.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ba:07:3b:86:a7:1e:8a:ab:32:f3:10:fc:40:5d:40:fe:93:37:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 18:49:57 2023 GMT
            Not After : Jul 23 18:54:57 2024 GMT
        Subject: CN=B72A8A90D6AB4B9DE27857518572E078B4ADF5F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:b9:03:86:53:92:a4:2b:a2:a9:af:6d:70:
                    9a:28:4f:ad:67:8e:c7:bd:60:44:c4:21:6f:0d:d6:
                    76:1c:2f:0a:d2:0f:93:f0:7e:d5:3d:6e:27:ff:2a:
                    1d:e6:10:21:9c:c4:bf:19:b1:d8:3b:41:c0:3f:f6:
                    0f:9e:9c:fb:d1:56:ab:99:d8:e1:db:77:68:b4:19:
                    4a:29:c7:77:2c:b8:c8:40:6d:b8:1f:a6:b9:d0:a1:
                    55:84:dd:51:f8:26:4a:9b:81:52:fe:8d:1e:a4:95:
                    b6:15:25:56:ae:2a:bf:a8:09:3f:0f:0b:cb:00:31:
                    03:3d:66:5c:29:94:24:21:43:94:16:ec:3f:3b:e5:
                    5b:25:3f:dd:c4:85:a9:4f:71:c1:55:07:8c:31:41:
                    2c:a1:fa:51:31:f0:40:1a:db:8a:d3:f6:39:50:9a:
                    71:0d:cd:d6:05:7c:0d:05:cb:38:e9:29:56:1a:30:
                    e7:b8:41:62:2f:33:d8:6d:c4:03:ee:c9:02:3c:2d:
                    30:08:73:56:a3:86:c3:c5:1f:0f:aa:07:87:99:30:
                    94:73:76:bb:bb:20:d2:47:9a:fb:65:4c:b5:05:56:
                    48:e1:4c:1e:17:5e:75:26:a3:a4:e5:00:6c:39:9d:
                    e6:b1:d7:28:84:09:c0:ce:06:ce:bc:d9:8b:75:d4:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:2A:8A:90:D6:AB:4B:9D:E2:78:57:51:85:72:E0:78:B4:AD:F5:F5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/B72A8A90D6AB4B9DE27857518572E078B4ADF5F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.40.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263038

    Signature Algorithm: sha256WithRSAEncryption
         b5:e7:86:fd:45:fc:a4:75:c1:e4:ae:02:f8:66:d6:3d:11:1f:
         58:87:df:e4:09:4f:35:56:3b:cf:10:8b:cc:92:54:5e:e4:a6:
         0e:4c:12:51:0b:3a:9b:70:f4:8e:5e:24:19:dc:96:47:c1:1a:
         bc:f5:a9:28:17:f3:22:49:48:3b:35:8f:d1:08:c6:50:d8:04:
         76:80:1a:fd:7f:3e:57:d7:90:3a:c6:d0:b8:75:22:57:7b:ac:
         8a:1a:81:78:32:52:0d:47:3c:b0:d8:cc:0a:04:f7:b4:51:4d:
         bd:03:99:e6:3b:b7:80:7d:fa:16:27:cf:b2:df:cd:85:60:10:
         70:06:e3:0d:2e:3c:85:c8:92:b7:66:63:40:12:49:d8:ef:b9:
         ed:3f:c0:e7:07:a8:18:0a:44:93:b7:b8:e6:09:a6:2a:b9:2e:
         5d:ef:f0:38:48:a5:db:3d:77:9c:0a:34:96:56:b7:d7:d3:a1:
         41:6a:98:56:49:c0:3d:2c:bd:3c:a0:8a:0d:ed:73:dc:79:5d:
         77:0a:30:ab:68:b1:78:b1:9d:6c:f9:97:57:4c:71:5c:ff:8f:
         bc:89:65:e9:d3:10:25:44:dc:4a:59:b4:cc:f1:ad:ce:bf:5e:
         86:6a:b9:11:9a:e9:1c:41:c8:0a:de:95:ad:2b:b1:1b:85:0f:
         d9:7c:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org