Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer
File:                     0743743A0AB828DD321DB1C96B6AB55916A8859A.cer (raw, json)
Hash identifier:          fAupqoq3okagpYkgIGo7TKowcPk4WGrYVRQDstNY9pc=
Subject key identifier:   07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       178C6C2E92BBD828AA0423163D56A2756BF0199E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 22 Jul 2023 21:37:37 +0000
Certificate not after:    Sat 20 Jul 2024 21:42:37 +0000
Subordinate resources:    AS: 262868
                          IP: 138.255.196.0/22
                          IP: 164.163.148.0/22
                          IP: 168.197.212.0/22
                          IP: 168.227.72.0/22
                          IP: 177.20.208.0/20
                          IP: 2804:328::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8c:6c:2e:92:bb:d8:28:aa:04:23:16:3d:56:a2:75:6b:f0:19:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 22 21:37:37 2023 GMT
            Not After : Jul 20 21:42:37 2024 GMT
        Subject: CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:02:33:90:7d:5d:b3:da:65:22:2d:95:27:
                    f4:63:35:df:8f:2c:fd:12:19:3a:4e:fa:f4:86:40:
                    15:56:31:00:ac:48:ce:e5:66:77:82:9f:86:35:1b:
                    54:47:3d:a0:ef:73:a8:95:62:65:a5:78:30:87:32:
                    67:06:43:3d:b1:cb:1a:8c:c2:63:02:f5:7f:09:33:
                    b3:56:c8:f1:4e:07:aa:1d:3a:9e:10:ea:4a:20:78:
                    64:e5:03:d8:d6:60:33:d5:45:7c:49:0f:64:b1:5e:
                    4e:63:b8:c0:34:3a:b2:4f:84:14:49:aa:cb:cb:a4:
                    6c:78:65:1e:b4:77:3b:7c:f3:60:49:68:cb:64:27:
                    ab:01:eb:0f:88:ab:0d:4c:08:d3:12:e3:8e:31:73:
                    a3:a8:db:ba:11:19:18:84:31:cc:ad:fd:35:a1:36:
                    f5:9d:b2:98:4f:79:d1:d6:54:4a:d2:38:70:5d:64:
                    9f:82:c8:19:2a:0c:e7:d7:4f:bf:a5:20:82:e7:06:
                    91:ad:77:6a:17:fb:f3:66:76:11:04:71:09:97:fb:
                    20:44:e0:74:41:6f:92:72:28:7f:c2:7f:3a:57:6a:
                    a0:85:72:d5:0e:79:a7:a7:e7:09:37:6b:73:f8:b0:
                    06:d1:83:67:54:3a:4c:4c:71:7f:30:fb:0e:e8:36:
                    98:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.196.0/22
                  164.163.148.0/22
                  168.197.212.0/22
                  168.227.72.0/22
                  177.20.208.0/20
                IPv6:
                  2804:328::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262868

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:84:99:42:45:2b:38:43:1a:12:d1:08:8b:8a:cd:23:a0:
         fc:e0:ce:48:47:d9:b1:3d:22:00:80:b3:4d:28:02:17:c3:f2:
         74:9b:5e:66:6f:bf:ba:5e:c2:65:6c:dd:1e:d9:a6:96:d9:81:
         4c:03:b1:9b:9d:a0:ce:fe:88:b7:ca:3e:7f:41:4a:e0:e4:65:
         7d:ac:fd:4b:d3:45:08:ff:c7:b5:6f:b0:c7:c1:bf:e7:5e:07:
         0c:e6:6b:12:26:a9:95:d4:14:1c:89:a0:17:06:8b:66:36:6c:
         ad:4e:6c:d7:f4:e8:2b:94:1c:13:bc:97:6a:10:0f:34:fa:06:
         74:c8:13:92:94:8e:87:bb:c6:c3:8c:5a:d4:bc:e0:26:2f:17:
         9b:95:74:3f:a8:d4:57:6b:fa:62:45:a5:21:4d:dc:33:3d:a2:
         50:c1:ea:fc:93:35:d5:c8:0d:d1:7e:56:49:f5:f1:5b:e8:80:
         45:97:74:b7:08:f3:b1:51:79:7f:76:7f:ce:3f:e2:92:8e:9a:
         ea:45:0a:c7:d4:fd:50:ee:ff:39:ef:98:93:74:a1:e0:91:57:
         bf:dc:9d:27:97:11:9c:61:f6:47:fb:3b:e9:26:de:19:ce:9e:
         18:3c:72:05:3d:20:78:de:65:d1:2b:c8:17:64:7a:c7:11:cd:
         67:fa:c1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org