Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6743C4A78A5B0898D12BF05B78A48F50CF8820D6.cer
File:                     6743C4A78A5B0898D12BF05B78A48F50CF8820D6.cer (raw, json)
Hash identifier:          ofXPSSEE5LDfbX5gPEDwnt+pSa7reNmEyfNCDqzv1oQ=
Subject key identifier:   67:43:C4:A7:8A:5B:08:98:D1:2B:F0:5B:78:A4:8F:50:CF:88:20:D6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23C84A9D3263047FD14792FD420672C118A75988
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/0/6743C4A78A5B0898D12BF05B78A48F50CF8820D6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 23:06:06 +0000
Certificate not after:    Thu 23 May 2024 23:11:06 +0000
Subordinate resources:    AS: 266030
                          IP: 170.245.244.0/22
                          IP: 2804:3970::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c8:4a:9d:32:63:04:7f:d1:47:92:fd:42:06:72:c1:18:a7:59:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 23:06:06 2023 GMT
            Not After : May 23 23:11:06 2024 GMT
        Subject: CN=6743C4A78A5B0898D12BF05B78A48F50CF8820D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:65:77:9d:bc:f3:b7:a6:11:12:90:e7:e3:
                    d6:65:df:4a:a3:88:ce:e5:f6:db:2a:02:ac:64:cc:
                    bf:65:d9:88:97:41:96:07:5a:49:7f:68:88:b2:85:
                    7e:92:b8:bf:8b:46:35:42:ec:50:ac:f9:f0:30:fe:
                    e3:ca:69:39:23:f7:c3:ae:29:0e:39:01:6b:26:bb:
                    68:a0:52:6f:11:f2:96:22:4e:cc:29:0d:45:8b:24:
                    cb:9b:d8:af:4e:62:57:41:f3:37:fb:7e:3e:20:10:
                    b6:81:e0:fa:b5:6c:6a:fb:62:26:5d:59:4f:a0:64:
                    71:f8:2c:85:db:02:0c:55:57:70:40:e7:01:67:cc:
                    ad:10:23:3a:f1:d1:22:de:bc:90:84:25:28:44:c2:
                    78:a5:e7:58:26:46:19:63:01:1b:04:ff:25:0b:7c:
                    f7:0c:8c:8e:26:f2:07:38:5f:34:21:79:95:ea:9c:
                    e8:3f:48:8a:1b:2d:f0:d5:6a:6e:64:24:7d:71:1c:
                    22:0a:c9:28:a0:f4:b6:a6:a3:19:a2:a6:81:fd:e4:
                    3a:7c:b3:1e:d1:04:21:a3:8b:0c:49:41:48:71:25:
                    c5:94:e2:c0:9a:a1:02:bb:6e:2e:54:32:ee:5e:73:
                    57:6a:f0:19:7a:1e:12:69:bb:a2:a3:d5:cc:fe:90:
                    ca:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:43:C4:A7:8A:5B:08:98:D1:2B:F0:5B:78:A4:8F:50:CF:88:20:D6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/0/6743C4A78A5B0898D12BF05B78A48F50CF8820D6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.244.0/22
                IPv6:
                  2804:3970::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266030

    Signature Algorithm: sha256WithRSAEncryption
         3f:93:d7:d4:53:21:14:7c:75:17:fd:c8:bf:51:4b:29:b4:72:
         cc:a1:37:aa:3a:77:5e:68:cd:d7:b5:58:f6:87:0e:f6:20:ce:
         af:33:f0:f4:5e:1b:81:d4:61:56:a7:a3:06:e8:2e:02:6f:f9:
         16:1e:0f:bb:63:5e:3d:1b:e5:52:43:5c:e7:c2:e5:3c:69:b0:
         a2:0d:03:bc:fe:71:45:12:d8:be:10:a9:69:d8:05:28:6b:12:
         b8:65:bf:f8:1c:f7:a3:e6:1b:26:83:ce:d5:f6:38:58:3c:12:
         44:5e:e9:45:19:80:da:e8:13:41:91:6f:c2:2b:b1:fa:d7:3a:
         93:8a:a6:d5:85:31:9b:83:8c:75:5f:26:78:9d:cb:a7:3f:b0:
         85:a1:fa:d5:89:ae:08:6a:c4:c9:91:68:1c:98:35:32:d1:65:
         00:fb:6d:b9:b1:eb:0b:85:7a:33:7a:84:39:8a:10:0e:04:cd:
         ef:7d:e5:46:9c:dd:27:a1:67:95:7c:7c:80:19:e9:ea:7f:ae:
         df:56:da:7f:33:e8:fe:f9:e6:fb:8b:78:fd:15:b4:67:37:08:
         8e:22:22:ee:85:6b:a0:72:9e:31:e5:34:36:43:ed:4a:e9:c3:
         07:f1:8d:09:b8:39:14:62:e8:d1:2c:9e:93:4d:42:9f:3a:3f:
         24:da:59:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org