Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9.cer
File:                     073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9.cer (raw, json)
Hash identifier:          VDMavkL1SVojBCaEGTa2Tt9KfAZHwWbS0Dw4iPXf3CQ=
Subject key identifier:   07:3F:FD:DB:68:F4:07:3F:D1:0C:2D:FF:F4:ED:FC:7F:F9:0F:1B:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4398D23B83C89BC67E5119FD15DBFBEA364B7380
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Jun 2023 14:05:49 +0000
Certificate not after:    Thu 13 Jun 2024 14:10:49 +0000
Subordinate resources:    AS: 265062
                          IP: 170.231.156.0/22
                          IP: 2804:3234::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:98:d2:3b:83:c8:9b:c6:7e:51:19:fd:15:db:fb:ea:36:4b:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 15 14:05:49 2023 GMT
            Not After : Jun 13 14:10:49 2024 GMT
        Subject: CN=073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:0d:13:e6:a9:fa:85:0a:63:6b:fd:ae:7a:75:
                    8c:6f:b7:77:96:16:2d:a7:0c:47:1a:04:93:2c:e2:
                    c6:55:d2:d8:d5:d6:f8:4e:37:71:28:bf:4a:b6:22:
                    0b:1e:03:77:b4:ba:c4:17:ed:9c:5b:42:57:eb:f6:
                    2d:fb:30:c8:3f:54:95:33:71:d2:61:a7:89:0f:11:
                    df:61:c4:f4:a9:79:8b:c9:7e:ff:70:d6:59:34:53:
                    89:6a:14:7d:9f:f7:24:c8:14:b6:bb:28:11:ba:0d:
                    17:03:be:91:7c:84:dd:1c:b1:ad:cf:62:07:14:68:
                    a2:b9:21:29:44:3c:d3:5e:d9:6b:8b:05:5c:cf:67:
                    a7:e7:56:1d:f1:aa:62:2c:ce:9b:69:7b:03:1d:38:
                    09:c5:2d:3e:fc:83:27:2c:05:0d:84:1f:11:be:fe:
                    4a:59:64:ff:9c:e1:cb:b2:e0:11:2c:c2:4b:df:39:
                    54:dd:1d:b3:31:76:ea:36:ee:20:79:dd:9c:e7:fe:
                    45:43:6a:90:85:bb:2a:e2:77:c0:84:18:4b:27:2e:
                    5e:bb:11:a3:14:6d:ae:aa:4c:8e:5f:10:ff:3a:74:
                    0a:56:6e:94:8d:49:6e:78:15:53:84:5c:92:45:68:
                    f7:51:77:db:f4:5f:ba:20:84:f1:b2:92:7e:50:ba:
                    a4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:3F:FD:DB:68:F4:07:3F:D1:0C:2D:FF:F4:ED:FC:7F:F9:0F:1B:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.156.0/22
                IPv6:
                  2804:3234::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265062

    Signature Algorithm: sha256WithRSAEncryption
         61:3a:0c:53:ea:c1:58:f0:b8:0e:99:01:5c:21:6f:a6:d0:12:
         79:87:dd:10:d1:36:9b:47:10:61:93:ee:f0:be:77:91:53:74:
         cd:55:36:07:c0:72:b7:cb:dc:01:be:8b:ea:d8:7b:b9:5e:b3:
         c5:7e:62:ba:ec:27:29:44:d3:c6:57:62:7f:4f:e2:2e:ab:15:
         0f:ff:2e:50:1d:75:59:49:22:48:7a:f4:64:c6:da:34:80:af:
         51:05:3a:49:70:a3:6c:09:b2:4b:be:c4:fd:ad:af:88:71:51:
         a5:0b:e1:3e:f9:2d:9b:4d:ec:3a:ce:0e:28:72:d0:8e:7c:98:
         c0:78:e8:a7:e2:aa:19:eb:37:4c:fa:a3:3d:1a:c2:44:0a:3e:
         58:64:f8:c3:4d:f7:85:6d:37:57:9d:6c:8f:b0:fc:7f:67:9b:
         99:c2:df:e8:10:3d:23:be:4c:26:42:c5:43:1a:4b:27:80:29:
         38:9e:11:84:4a:48:9b:94:dd:12:a0:fb:5b:fd:e9:9a:58:ce:
         00:a0:d0:b6:33:aa:dc:55:1b:e8:09:52:20:04:ba:09:c7:dc:
         80:49:39:da:06:e3:bd:94:f9:f3:e4:d6:6f:0f:7e:6a:bd:e5:
         5c:8d:3d:9e:16:4c:37:91:0f:d8:4f:69:89:e7:2d:6e:ad:07:
         46:1a:4b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org