Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.cer
File:                     173D80B7F844B5ACF5FE6739453CBE860C0FE753.cer (raw, json)
Hash identifier:          IEI3DCOBVCHj3TLNWpzrfHEcxlNkNQa2cI/f2dDazDo=
Subject key identifier:   17:3D:80:B7:F8:44:B5:AC:F5:FE:67:39:45:3C:BE:86:0C:0F:E7:53
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       45E0FEA94654515B105C5E9C29722F7F0B5EA4A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 17:31:30 +0000
Certificate not after:    Wed 23 Oct 2024 17:36:30 +0000
Subordinate resources:    AS: 263049
                          IP: 170.84.112.0/22
                          IP: 177.129.224.0/22
                          IP: 177.136.104.0/21
                          IP: 2804:fe0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e0:fe:a9:46:54:51:5b:10:5c:5e:9c:29:72:2f:7f:0b:5e:a4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 17:31:30 2023 GMT
            Not After : Oct 23 17:36:30 2024 GMT
        Subject: CN=173D80B7F844B5ACF5FE6739453CBE860C0FE753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:2c:fc:f2:2c:94:71:78:6b:49:27:e5:67:
                    69:36:13:77:44:4e:54:79:d1:66:28:e4:f8:be:55:
                    a9:06:3f:48:61:f2:98:7e:e9:40:6f:94:ca:69:e3:
                    4d:13:3e:90:36:57:5d:e2:ce:a6:07:db:13:c5:b8:
                    40:d8:09:10:a7:29:f6:25:69:01:24:58:b4:00:6b:
                    3a:17:57:54:08:72:95:4a:05:57:06:05:5c:ea:f6:
                    eb:65:68:c1:85:32:e0:4b:1f:46:ab:c0:d6:72:8f:
                    1a:1e:5c:e5:14:ce:9a:6c:c0:48:45:9a:08:9e:65:
                    9b:68:38:67:b4:d6:d4:3a:d2:94:bd:af:8e:df:6b:
                    3d:49:32:e6:77:c7:05:dd:17:d9:bd:35:d6:c0:56:
                    48:5f:f9:bb:ea:a1:dc:35:7d:43:b5:f0:a1:6a:f8:
                    d4:fc:e5:6b:33:3c:b2:86:97:cd:1d:f6:1d:48:ce:
                    d2:ec:73:fd:5a:65:b5:48:f2:a6:49:81:0b:d0:53:
                    61:be:35:c8:d4:ae:96:f9:8c:1a:a6:24:e5:30:4b:
                    48:8a:32:7f:72:c8:ff:fe:03:ac:8e:51:7c:f0:e5:
                    e3:7f:b9:8d:5b:72:1a:4d:5a:7e:96:55:59:3a:3a:
                    2b:e7:f8:c7:1f:62:60:ad:aa:66:2d:c6:e8:e9:5b:
                    1a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:3D:80:B7:F8:44:B5:AC:F5:FE:67:39:45:3C:BE:86:0C:0F:E7:53
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.112.0/22
                  177.129.224.0/22
                  177.136.104.0/21
                IPv6:
                  2804:fe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263049

    Signature Algorithm: sha256WithRSAEncryption
         55:9f:a1:10:03:99:ab:d1:97:af:c4:b6:52:c6:dc:94:a9:2a:
         3c:8d:15:07:75:6a:79:99:95:91:33:74:72:8d:d6:58:22:71:
         7e:f4:3a:4e:3a:e1:01:77:a5:ee:39:fc:de:62:d1:99:b6:d3:
         e4:0c:a1:14:07:7c:7c:d7:fb:1b:00:04:95:91:e8:fd:6a:b6:
         94:d4:50:19:10:68:fb:a1:90:8a:d1:0e:38:a0:db:58:60:90:
         d2:3e:bb:61:06:fe:d6:b8:6a:45:51:64:aa:a4:65:18:8a:3e:
         ad:9a:cb:db:0a:d2:fc:bc:6e:e3:54:af:2b:9f:6d:09:bb:de:
         35:54:23:f4:c2:13:7a:f4:93:8e:ad:38:e9:e2:89:62:24:f4:
         ab:16:fe:0d:55:9f:ba:ba:af:e2:d3:b2:5a:65:a8:c7:1f:de:
         46:7d:8e:2c:90:83:f3:aa:34:46:3f:80:53:da:97:3e:8d:c0:
         c4:e7:69:d6:5c:62:4a:f8:7f:08:1c:df:26:99:8d:a2:70:9b:
         09:8f:05:e2:66:5e:77:1c:80:92:70:0d:e7:a5:90:f3:44:43:
         b5:4f:d1:a4:97:07:f1:72:af:35:89:7e:7f:60:6d:c6:ab:dc:
         b5:6c:7a:10:04:dc:a1:8e:0a:c9:ad:d1:92:94:38:14:bd:23:
         37:95:e9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org