Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F572F2BC4ADACE49E1C174A68C8729148CF06B03.cer
File:                     F572F2BC4ADACE49E1C174A68C8729148CF06B03.cer (raw, json)
Hash identifier:          QnMq1UOKRdSNHv9E+4CbPTdoHkcjr+dSca0eIVt46fI=
Subject key identifier:   F5:72:F2:BC:4A:DA:CE:49:E1:C1:74:A6:8C:87:29:14:8C:F0:6B:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4244A5D0952E263355B06660D9606E9C9AB458F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/F572F2BC4ADACE49E1C174A68C8729148CF06B03.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Jan 2024 15:16:57 +0000
Certificate not after:    Thu 02 Jan 2025 15:21:57 +0000
Subordinate resources:    AS: 270870
                          IP: 138.59.152.0/22
                          IP: 2804:72b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:44:a5:d0:95:2e:26:33:55:b0:66:60:d9:60:6e:9c:9a:b4:58:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  4 15:16:57 2024 GMT
            Not After : Jan  2 15:21:57 2025 GMT
        Subject: CN=F572F2BC4ADACE49E1C174A68C8729148CF06B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:43:54:16:6b:4a:aa:82:20:c6:f8:e2:c9:
                    04:d5:18:b8:ed:7f:aa:c1:95:2e:f4:88:9b:ff:62:
                    97:76:38:f6:2f:ce:6c:06:9e:cf:a0:33:7a:cf:98:
                    11:99:66:a6:39:d6:66:46:f9:e8:b8:fe:8b:de:04:
                    31:c5:f3:ae:8a:01:24:9f:3b:67:86:3e:e2:01:3a:
                    c5:02:b6:cb:aa:30:ff:1d:d9:30:fb:91:9b:e3:e4:
                    d4:ce:e4:40:ce:ca:ff:91:33:2f:e5:88:00:de:f9:
                    da:9f:f5:be:da:06:79:79:20:30:cb:e3:20:8a:ed:
                    b6:af:d6:01:8a:17:35:84:7c:a2:8c:f6:94:66:57:
                    40:bf:d5:51:46:cc:1e:7c:41:8a:94:cb:59:30:32:
                    01:da:b0:28:f4:32:8d:92:6e:19:6a:7f:82:b9:b1:
                    8a:04:d2:5a:24:e8:e8:22:63:1c:bb:7b:c5:ee:75:
                    53:e8:ef:49:30:94:b5:7e:a0:c8:1d:f2:32:07:1f:
                    07:c4:5a:44:9f:e8:e2:17:bc:99:d6:0a:a6:ca:e9:
                    57:ad:b5:ba:4e:56:b8:1f:72:66:95:1d:f8:80:8b:
                    85:46:c9:a4:97:d1:5f:ea:59:52:22:3a:96:24:e3:
                    f7:f2:51:3c:14:2e:a8:72:cf:1e:60:df:6f:3a:de:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:72:F2:BC:4A:DA:CE:49:E1:C1:74:A6:8C:87:29:14:8C:F0:6B:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/F572F2BC4ADACE49E1C174A68C8729148CF06B03.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.152.0/22
                IPv6:
                  2804:72b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270870

    Signature Algorithm: sha256WithRSAEncryption
         12:13:c5:4e:59:88:4d:10:53:6b:08:3a:4a:9e:79:ae:b2:b1:
         30:30:58:79:ac:8e:50:02:44:d2:e3:93:dd:96:10:e7:96:35:
         9f:fb:ba:32:11:76:41:1d:a0:41:dd:b4:a9:96:17:be:b6:77:
         d8:81:90:53:87:54:f4:52:db:5c:bb:05:90:ec:58:07:4d:07:
         33:db:99:1e:a5:e4:c7:5f:4f:b0:cf:52:6a:89:89:17:87:28:
         b3:3e:d7:84:ce:16:61:eb:e6:ea:c0:61:e4:de:d1:d8:e3:f4:
         75:2b:e4:a0:f4:fe:69:d4:12:17:55:6f:c5:30:a4:da:65:dc:
         f0:55:63:50:5e:33:de:d8:e6:e9:8d:5d:49:42:c9:ad:7a:fd:
         33:4c:89:50:02:55:8a:13:68:ad:91:1e:4f:90:4a:ea:c8:dc:
         97:cb:e6:9f:2b:63:c5:7d:9e:c8:9d:2c:8d:05:0e:89:dd:13:
         93:0a:22:88:31:71:12:e4:33:5c:08:12:f7:bf:c1:f7:23:47:
         95:da:53:11:ba:08:62:87:c8:ed:f3:19:77:06:d2:cc:11:d4:
         04:15:66:ac:1b:c0:bd:e0:bf:76:53:e9:8c:a5:74:05:72:ea:
         37:87:2a:3b:cb:f9:ef:90:b1:32:e2:ba:20:10:c4:1f:79:a4:
         19:03:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org