Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/73379C4378E08529DEB9A25D21DC7CAC689A0ADB.cer
File:                     73379C4378E08529DEB9A25D21DC7CAC689A0ADB.cer (raw, json)
Hash identifier:          jEwfoJFCXNCra3coVqvzfn2Qf+a5aFreXLBGoBgrQtg=
Subject key identifier:   73:37:9C:43:78:E0:85:29:DE:B9:A2:5D:21:DC:7C:AC:68:9A:0A:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6132375EAB1C466DC7B29C06D64146C8497848C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/73379C4378E08529DEB9A25D21DC7CAC689A0ADB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2024 12:32:51 +0000
Certificate not after:    Tue 18 Mar 2025 12:37:51 +0000
Subordinate resources:    AS: 28202
                          IP: 177.44.0.0/17
                          IP: 177.130.128.0/18
                          IP: 179.189.160.0/19
                          IP: 186.216.64.0/18
                          IP: 187.44.0.0/18
                          IP: 187.120.64.0/18
                          IP: 189.91.0.0/19
                          IP: 191.53.0.0/16
                          IP: 191.240.0.0/17
                          IP: 2804:87c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:32:37:5e:ab:1c:46:6d:c7:b2:9c:06:d6:41:46:c8:49:78:48:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 19 12:32:51 2024 GMT
            Not After : Mar 18 12:37:51 2025 GMT
        Subject: CN=73379C4378E08529DEB9A25D21DC7CAC689A0ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:e3:b2:1a:cc:d8:ce:82:75:8b:1c:ac:94:
                    e6:b1:1d:32:2e:2d:9d:cc:b4:bb:2a:83:17:b0:f6:
                    0d:aa:21:7f:0c:d5:f0:f7:6d:95:c1:2a:dd:0e:ef:
                    d3:a1:8e:45:f5:7b:46:95:26:e3:1d:f1:6e:a4:13:
                    c6:b3:eb:0e:b3:d2:e2:2f:6d:5b:f8:64:73:22:aa:
                    06:e8:2e:a7:d8:7b:af:54:08:8f:03:09:8a:45:f1:
                    21:a1:12:da:61:75:79:4b:c6:31:c7:ae:81:e4:3c:
                    66:73:39:ce:6e:40:4e:36:26:c8:ce:4f:c3:f5:ec:
                    db:43:5e:55:40:91:0a:07:df:98:cd:85:cf:24:40:
                    3a:a1:a3:2a:31:7c:18:ed:eb:02:4b:75:02:9a:f2:
                    0a:e8:2e:08:28:77:a6:c1:2a:9c:73:3e:5c:7e:cd:
                    f8:19:dd:ed:50:e9:10:e9:0b:c2:b0:80:bd:ba:9b:
                    64:ac:f1:2e:38:04:ff:d0:40:c1:7c:bf:b6:07:0a:
                    d3:a3:f9:dd:25:52:5a:df:4b:81:48:cb:4d:9b:74:
                    6c:fa:ef:9d:35:f6:b2:5e:39:f5:4d:48:c4:50:5b:
                    e3:17:be:03:ee:25:1b:84:fb:49:8c:72:c0:6c:b3:
                    7b:ef:d6:13:a2:71:b5:38:a3:40:54:7d:a5:b7:6b:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:37:9C:43:78:E0:85:29:DE:B9:A2:5D:21:DC:7C:AC:68:9A:0A:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/73379C4378E08529DEB9A25D21DC7CAC689A0ADB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.0.0/17
                  177.130.128.0/18
                  179.189.160.0/19
                  186.216.64.0/18
                  187.44.0.0/18
                  187.120.64.0/18
                  189.91.0.0/19
                  191.53.0.0/16
                  191.240.0.0/17
                IPv6:
                  2804:87c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28202

    Signature Algorithm: sha256WithRSAEncryption
         27:09:aa:1a:62:5d:fe:d3:12:90:71:70:c8:2c:56:e8:08:30:
         96:ee:91:8c:b0:d2:3d:cb:f1:fe:51:0b:e4:6d:92:01:50:c1:
         5f:13:b8:36:3d:91:12:dc:a3:c2:46:68:e0:0f:bd:b0:05:dc:
         16:0e:b0:84:c8:61:32:37:12:ed:9c:41:f0:ad:bb:4b:41:6d:
         66:31:9f:b4:c4:f1:b2:f4:66:8f:3e:65:7b:b1:d1:0f:28:f3:
         9c:5e:6e:2c:7c:a9:9c:68:08:8a:35:2d:83:d7:3d:ea:3f:f4:
         18:3d:d3:f9:cc:c2:31:5c:fd:5f:03:af:cf:d8:4a:ee:a3:1f:
         3c:2d:9c:f8:a2:51:af:c2:4a:82:3e:fe:22:93:5f:87:45:63:
         b0:fb:70:40:24:b8:fa:c1:11:b4:62:a3:9f:70:51:c0:14:8f:
         f8:49:ab:ce:79:c8:9d:f5:6d:5e:de:d6:d3:61:9f:10:b6:78:
         05:fc:8f:0e:38:62:83:f4:18:98:e3:60:3e:34:3d:aa:13:d7:
         65:4c:73:51:93:33:ae:4d:f4:bf:03:d4:86:85:1f:7e:4e:e5:
         1c:46:20:be:2a:93:92:85:6b:2e:97:72:22:18:b6:69:15:9f:
         42:9e:e1:73:e8:32:9b:bd:43:06:9a:1e:5b:43:bf:bb:22:4a:
         e4:32:b5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org