Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B73C86AC68862297C55657DCE3A91CF91078F218.cer
File:                     B73C86AC68862297C55657DCE3A91CF91078F218.cer (raw, json)
Hash identifier:          Z82wo6Cr31nZSpiqMWJpeVvpADAe2nlNkYLAe+1lcrI=
Subject key identifier:   B7:3C:86:AC:68:86:22:97:C5:56:57:DC:E3:A9:1C:F9:10:78:F2:18
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4488040A5CEC10C21308F0B972765A1E68328906
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/B73C86AC68862297C55657DCE3A91CF91078F218.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Sep 2023 14:42:01 +0000
Certificate not after:    Fri 13 Sep 2024 14:47:01 +0000
Subordinate resources:    AS: 268594
                          IP: 45.163.32.0/22
                          IP: 2804:5398::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:88:04:0a:5c:ec:10:c2:13:08:f0:b9:72:76:5a:1e:68:32:89:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 15 14:42:01 2023 GMT
            Not After : Sep 13 14:47:01 2024 GMT
        Subject: CN=B73C86AC68862297C55657DCE3A91CF91078F218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:64:92:40:01:ba:40:34:4c:a2:c3:ed:66:f6:
                    b7:ca:34:90:8c:f4:74:b1:b8:38:85:54:e1:9d:d3:
                    58:92:aa:a8:12:ad:10:52:7f:f3:11:f2:7e:93:51:
                    3c:81:67:2d:6f:a3:c8:55:b8:98:f5:c8:e2:ff:89:
                    32:00:c2:01:69:c8:21:18:56:a8:fc:0e:44:cf:1f:
                    cd:03:fc:98:1f:65:e2:88:eb:a3:b5:f6:3f:e1:8c:
                    11:52:9a:a4:63:24:05:c8:c3:10:99:73:09:7c:7c:
                    3d:ad:80:1a:3f:1c:91:50:9a:15:c5:db:8d:b7:04:
                    28:b5:c5:08:56:22:d9:49:ae:92:ca:1f:b4:48:22:
                    f5:5c:50:57:44:40:73:cd:aa:25:2a:50:39:77:ee:
                    37:8a:bd:5d:53:23:c6:88:1e:9f:f6:55:09:16:13:
                    ac:1a:96:4b:4c:89:b8:5c:4c:5a:46:ec:7f:87:00:
                    b2:e4:f0:4d:15:7e:fc:54:37:80:df:db:dc:fb:78:
                    a9:cc:49:58:9c:91:97:be:04:14:68:76:ce:b6:bf:
                    61:d2:99:bd:c3:f7:6b:54:82:87:9e:6d:a2:ce:22:
                    95:c0:17:27:bc:67:f9:1c:5f:e8:d6:fc:e6:77:6e:
                    a5:ef:f4:02:6d:33:ad:5c:07:42:79:eb:54:1c:13:
                    54:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:3C:86:AC:68:86:22:97:C5:56:57:DC:E3:A9:1C:F9:10:78:F2:18
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/B73C86AC68862297C55657DCE3A91CF91078F218.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.32.0/22
                IPv6:
                  2804:5398::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268594

    Signature Algorithm: sha256WithRSAEncryption
         29:9f:5a:22:36:92:55:4d:83:f5:19:40:19:af:57:97:b8:8d:
         36:fb:8c:14:c0:89:36:e5:e5:6d:cf:59:f3:9a:03:93:ba:8e:
         f3:a5:fb:38:83:77:3f:84:6d:e9:db:35:02:d1:13:ea:d6:7a:
         5b:ba:99:9e:06:7d:5a:2c:7a:05:07:78:ae:14:53:19:df:da:
         47:76:4d:44:66:03:80:74:01:14:a6:ce:4e:29:e6:23:c0:51:
         82:c1:64:62:9c:ad:a3:93:27:d5:1f:a5:ba:69:f3:95:d2:4d:
         c1:9d:b9:b5:32:37:ca:43:2d:5b:e6:75:69:eb:b2:b2:ee:7f:
         d1:ae:35:1a:4a:2c:f4:3e:95:c7:da:d2:d3:e8:27:3c:cf:79:
         5d:4a:e2:b2:dc:cc:f8:c9:e0:b1:4f:f5:f8:6d:ae:dc:6e:c5:
         10:2a:40:92:33:89:87:71:56:fb:f4:8f:7b:78:40:01:8d:9a:
         25:bf:b0:f6:63:e0:92:8c:14:5b:e1:eb:66:31:22:7a:2b:10:
         2c:0d:bf:00:e3:59:17:02:7f:b5:7b:06:84:9f:bb:0c:96:45:
         d3:93:2d:d1:da:d7:42:7a:67:b6:4f:9e:1d:5c:7d:3b:61:1d:
         63:bf:7f:81:24:af:d4:80:1a:ca:5f:72:4b:b6:29:fd:2d:9b:
         10:22:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org