Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/73687C33D10122C10E28443229962CD37C8A3453.cer
File:                     73687C33D10122C10E28443229962CD37C8A3453.cer (raw, json)
Hash identifier:          vbXIoWMJCXWl/FXUMSBZrxAaXL0FHaUhitzZHLMIwak=
Subject key identifier:   73:68:7C:33:D1:01:22:C1:0E:28:44:32:29:96:2C:D3:7C:8A:34:53
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6952559A531DF35DD94C84A9215D627028F3EED8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/73687C33D10122C10E28443229962CD37C8A3453.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Oct 2023 09:45:25 +0000
Certificate not after:    Tue 15 Oct 2024 09:50:25 +0000
Subordinate resources:    AS: 267543
                          IP: 45.70.16.0/22
                          IP: 2804:4304::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:52:55:9a:53:1d:f3:5d:d9:4c:84:a9:21:5d:62:70:28:f3:ee:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 17 09:45:25 2023 GMT
            Not After : Oct 15 09:50:25 2024 GMT
        Subject: CN=73687C33D10122C10E28443229962CD37C8A3453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:d5:27:c8:8c:e7:52:1e:2d:68:c6:20:6e:
                    72:59:44:90:79:ca:52:45:ad:85:c9:d8:d4:f5:c5:
                    28:54:98:19:e3:b9:7c:47:fc:8a:a8:be:4d:e1:72:
                    4b:b5:9c:62:58:34:a1:13:19:e6:5b:69:cf:da:d4:
                    17:d0:5c:86:fc:ee:d0:52:d7:9f:95:f3:28:e5:a9:
                    2b:e2:49:65:8c:f5:c7:8f:bc:c1:d7:db:30:7c:f1:
                    a6:07:6a:37:ec:1e:bc:68:50:31:c7:d8:1e:39:ef:
                    b4:8d:9c:07:7d:7d:1a:ea:c7:1f:11:15:1e:89:fc:
                    c5:7b:3d:d5:5b:32:5f:97:62:76:18:7f:08:3f:08:
                    7d:3a:d9:fc:5f:05:87:c2:aa:48:56:1c:1f:0b:2c:
                    06:2a:75:19:9b:32:13:54:59:54:55:fd:a8:ab:4e:
                    52:d3:0e:5f:66:2d:67:b8:6b:c6:18:9c:1c:ed:a7:
                    25:64:b3:a9:dc:02:0a:47:3f:06:2f:02:48:97:b9:
                    b4:f5:d1:77:33:ae:73:25:b5:22:43:94:a1:2b:76:
                    ca:07:0c:46:cd:82:25:b1:a2:98:4a:0d:40:fe:88:
                    54:85:6a:e1:5f:53:3c:16:9d:2e:bf:d7:a7:28:89:
                    75:16:c7:42:0a:bd:51:17:5e:cc:a1:56:b7:2f:b3:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:68:7C:33:D1:01:22:C1:0E:28:44:32:29:96:2C:D3:7C:8A:34:53
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/73687C33D10122C10E28443229962CD37C8A3453.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.16.0/22
                IPv6:
                  2804:4304::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267543

    Signature Algorithm: sha256WithRSAEncryption
         26:a6:63:0a:2d:d3:93:80:45:50:b0:61:7f:fc:f2:65:7e:bd:
         3e:17:0e:b4:34:79:44:7a:c0:18:2f:f4:2e:b8:ee:9a:8a:9f:
         41:4f:8d:ef:0f:d4:e4:92:54:40:85:75:90:7c:5d:5d:ce:b7:
         47:25:29:79:ff:30:21:be:45:58:70:5f:0b:50:f7:7e:55:0e:
         69:4b:81:61:a8:74:13:b0:3a:16:ea:ef:40:90:0e:ec:85:82:
         3d:31:bb:4b:1d:c6:79:3a:b3:13:76:f9:41:59:b1:30:f8:4e:
         8c:0e:c1:64:cf:62:d3:c2:ef:9c:3c:e9:45:02:52:55:21:4f:
         01:6d:d1:6c:46:d3:89:32:fb:67:61:ac:9b:6c:2d:ac:86:4d:
         39:c8:cf:1f:c6:f8:6d:be:08:0e:d4:69:43:81:5c:4a:ae:9e:
         10:9e:bd:88:74:6d:2c:58:9b:f4:69:25:0c:23:a9:a9:1f:8f:
         9d:01:99:71:ba:b8:fd:de:29:fd:9a:88:93:51:c2:3b:e0:61:
         68:a9:8d:46:01:1a:b1:e2:95:aa:34:e7:ba:63:7f:e8:7c:9b:
         f3:3f:f4:98:c5:f5:d1:6f:2a:cf:e6:74:ef:eb:87:4a:e0:9a:
         f5:26:fd:18:38:f7:f3:23:75:20:f8:84:92:6e:58:8d:1f:d3:
         6d:53:03:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org