Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/73238194B3788530A0C48F99FEA32F80DE0F9BE9.cer
File:                     73238194B3788530A0C48F99FEA32F80DE0F9BE9.cer (raw, json)
Hash identifier:          VmarRhngytBpLPrM8TxlR2NeS3IN4qBQSURZJaGK8GY=
Subject key identifier:   73:23:81:94:B3:78:85:30:A0:C4:8F:99:FE:A3:2F:80:DE:0F:9B:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0BDDB02163D641667ECE81BDD35D422AE879A34A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/0/73238194B3788530A0C48F99FEA32F80DE0F9BE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 14:35:11 +0000
Certificate not after:    Tue 14 May 2024 14:40:11 +0000
Subordinate resources:    AS: 268008
                          IP: 45.167.208.0/22
                          IP: 2804:568c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:dd:b0:21:63:d6:41:66:7e:ce:81:bd:d3:5d:42:2a:e8:79:a3:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 16 14:35:11 2023 GMT
            Not After : May 14 14:40:11 2024 GMT
        Subject: CN=73238194B3788530A0C48F99FEA32F80DE0F9BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:e8:04:ef:cc:d3:24:89:b3:6e:c9:53:84:
                    73:96:05:eb:cc:eb:03:06:97:18:00:71:32:22:c0:
                    9f:65:c5:13:c0:1d:94:e0:1d:4d:fa:1b:0c:2c:93:
                    92:c0:e4:8e:b0:16:b0:11:ee:7b:3b:13:86:f0:ad:
                    b5:b8:62:cf:75:89:a3:ee:72:88:54:42:92:62:79:
                    bb:b8:c2:eb:ed:90:a7:58:b2:9f:a2:83:eb:53:cf:
                    c2:15:32:d7:08:2e:80:54:b8:6e:1e:ef:9b:11:ac:
                    5f:c7:1a:94:55:93:dd:b8:dc:df:c7:d8:7e:5a:2c:
                    b7:0e:56:6a:69:29:11:25:fa:60:8b:89:24:b8:4d:
                    6f:6c:bb:bd:45:15:a3:fc:16:92:a5:d1:05:1a:e3:
                    cd:56:5d:2c:72:bb:ec:24:43:91:ec:6d:25:91:c2:
                    95:1d:88:c9:91:b6:f5:45:14:f4:32:20:10:90:77:
                    72:01:32:39:1a:21:78:43:12:6d:ab:25:92:81:7c:
                    bd:e0:e9:87:79:53:f6:cb:74:47:5c:ba:21:4a:a9:
                    f2:f5:e6:51:47:24:ad:6e:1f:e0:88:ed:e8:f2:24:
                    79:b3:43:ed:29:1b:f0:2d:0f:98:47:2c:61:f3:79:
                    00:e5:1d:2f:d2:6b:86:49:9c:c3:ab:e5:6a:2c:7a:
                    d1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:23:81:94:B3:78:85:30:A0:C4:8F:99:FE:A3:2F:80:DE:0F:9B:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/0/73238194B3788530A0C48F99FEA32F80DE0F9BE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.208.0/22
                IPv6:
                  2804:568c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268008

    Signature Algorithm: sha256WithRSAEncryption
         95:f0:91:d5:b4:b2:5f:e7:d7:1f:7c:55:0e:4a:73:e4:24:73:
         ba:69:e4:16:02:3e:f9:80:fd:c0:68:d5:23:24:75:79:c1:ea:
         ec:04:c3:e7:de:ef:b8:6d:7d:c8:de:d7:db:57:fc:94:29:b2:
         94:fc:48:05:42:23:6f:39:b4:77:27:f7:5b:fe:cb:ee:7b:da:
         b0:88:7a:36:be:2b:66:99:89:19:46:1d:64:cf:34:93:f9:9b:
         64:f6:fa:4f:b8:f1:c2:1f:43:97:0a:71:61:de:db:60:7f:cb:
         ab:6b:2a:88:f2:59:1c:28:a7:0c:28:f7:1f:3a:91:9b:f1:3f:
         e3:95:da:d8:56:c0:b9:5a:71:a6:75:7b:2d:15:84:b1:2a:c8:
         98:ab:c1:64:92:36:33:df:53:c9:bf:7c:94:70:28:0e:72:16:
         64:cc:fd:8d:40:f5:25:7a:92:56:8d:a8:04:85:1b:59:81:9a:
         1f:c8:f0:ab:be:d7:26:3a:8d:59:82:5b:18:b1:f0:12:36:54:
         eb:33:bc:61:4c:44:9e:31:c7:e9:db:e9:f1:02:4b:40:11:f8:
         94:5c:e9:0f:98:e5:10:66:10:fc:7d:50:56:83:10:4f:ee:db:
         8e:b7:94:ae:b8:19:ff:17:94:54:e1:bb:f0:0c:53:bd:63:a4:
         dc:f9:cf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org