Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer
File:                     739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer (raw, json)
Hash identifier:          v9wfI0JIUHBM+MFaUOcEB3UfZrvvwR1Du1n9TA7fSkA=
Subject key identifier:   73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F094C2CE2B20FD3FEC6CBACA2D1A11C2962331F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Aug 2023 12:54:50 +0000
Certificate not after:    Tue 06 Aug 2024 12:59:50 +0000
Subordinate resources:    AS: 267563
                          IP: 45.70.128.0/22
                          IP: 2804:4354::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:09:4c:2c:e2:b2:0f:d3:fe:c6:cb:ac:a2:d1:a1:1c:29:62:33:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  8 12:54:50 2023 GMT
            Not After : Aug  6 12:59:50 2024 GMT
        Subject: CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:be:f8:86:40:fe:09:b4:eb:d3:fa:f4:7a:
                    28:81:fa:20:11:ee:93:df:b9:81:0b:07:b6:f8:72:
                    79:36:7b:d7:e8:74:b9:86:e6:a5:80:f0:87:98:b4:
                    a2:b1:be:7e:37:b9:47:c6:53:e1:2a:c9:19:c8:91:
                    0b:6d:6b:e3:e6:48:50:9f:dd:b3:1e:56:59:d0:d0:
                    ea:af:44:50:d4:f1:04:89:c8:79:a6:03:80:08:dd:
                    1a:1c:94:8f:c6:87:18:b5:24:4c:4b:1f:49:1f:e2:
                    8a:4e:a7:15:da:01:31:82:e3:88:79:cc:06:67:b8:
                    ef:87:85:97:c4:b7:35:ad:b6:a7:d4:1b:d8:5a:38:
                    0a:eb:3d:98:07:b4:2f:79:aa:fb:b0:36:d7:4d:14:
                    0a:34:cd:97:ce:62:14:60:f5:54:ff:ac:f3:6e:54:
                    67:30:ae:5f:21:b3:35:1b:e9:be:b7:23:f4:02:96:
                    40:d5:19:cf:b9:81:f2:11:c8:72:7d:8a:f2:a7:df:
                    d9:bc:b8:b6:dc:e0:fe:fb:0f:06:b3:07:0a:3d:e1:
                    d2:68:62:79:c1:44:c8:11:b4:dc:e4:0f:d8:d9:04:
                    bd:72:9a:d7:ce:c7:bd:62:9b:a5:94:e9:a1:f9:4f:
                    79:66:2c:14:3e:64:8e:10:f0:ed:2f:c8:79:73:fb:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.128.0/22
                IPv6:
                  2804:4354::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267563

    Signature Algorithm: sha256WithRSAEncryption
         78:15:99:96:02:fb:c1:f0:17:de:f5:43:b0:ee:ab:a2:7c:0a:
         ba:f3:2d:8b:dc:9e:f9:cb:17:85:ee:64:4e:27:42:13:4e:34:
         e9:e0:58:08:06:6e:0b:4c:b2:c6:ff:f9:55:06:9e:e9:8b:d1:
         4c:07:2e:8e:5b:69:36:db:a0:ac:28:b5:ab:c9:37:24:8a:ac:
         9a:80:af:3b:68:cf:2d:28:8a:aa:73:c0:dc:ca:e3:67:d6:40:
         62:9d:58:91:65:79:51:bd:25:da:d9:3a:17:aa:45:8e:6e:d8:
         66:af:bd:35:fd:8b:0f:62:bf:13:f4:12:84:49:9c:04:5b:95:
         34:1d:42:43:c2:6c:58:a7:51:90:fe:62:34:21:aa:a7:a2:5d:
         34:4c:aa:d1:ed:5f:75:8b:4d:13:d5:6b:69:e8:74:53:e5:54:
         c0:1a:53:5e:5f:34:41:0b:f0:49:bb:f0:3a:31:63:1a:3c:a1:
         58:e1:1b:94:51:42:7d:76:b1:87:95:a2:53:58:ec:ca:99:88:
         64:a3:9c:0d:94:1e:70:a6:07:6a:fc:87:7e:9d:14:f4:90:de:
         51:be:e8:3d:cb:42:ce:63:7e:9f:eb:4f:bc:90:7e:c6:d6:97:
         60:9b:63:80:7d:3d:c4:0c:f6:28:8e:6e:da:e8:97:f8:8f:79:
         77:e1:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org