Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/73B65E2744E23053641259D5A2B1355E982FB0F2.cer
File:                     73B65E2744E23053641259D5A2B1355E982FB0F2.cer (raw, json)
Hash identifier:          zkHeyMPGYsjTFrnZWzpe+oQ8BqV0muKvgyb8mw46938=
Subject key identifier:   73:B6:5E:27:44:E2:30:53:64:12:59:D5:A2:B1:35:5E:98:2F:B0:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67FBFA0A276B358A30B8DCFA01A04E8F16F9A049
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/73B65E2744E23053641259D5A2B1355E982FB0F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Oct 2022 12:46:20 +0000
Certificate not after:    Mon 16 Oct 2023 12:51:20 +0000
Subordinate resources:    AS: 28238
                          IP: 186.216.224.0/20
                          IP: 187.0.128.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fb:fa:0a:27:6b:35:8a:30:b8:dc:fa:01:a0:4e:8f:16:f9:a0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 17 12:46:20 2022 GMT
            Not After : Oct 16 12:51:20 2023 GMT
        Subject: CN=73B65E2744E23053641259D5A2B1355E982FB0F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:8f:97:27:dd:88:95:20:55:c4:b2:e0:0c:
                    c1:bf:c4:f8:30:42:4c:10:72:3e:87:86:3d:d5:28:
                    1d:4c:56:55:8d:dc:1d:80:a0:4f:3b:54:47:6c:30:
                    00:37:bd:cf:f2:87:38:91:45:ba:1e:ad:a4:9b:28:
                    11:49:0e:8d:e6:0d:ba:89:77:9f:28:23:2a:a7:b1:
                    7e:27:80:fe:74:5a:56:52:35:f9:43:35:8f:e0:fa:
                    0d:bb:db:c8:f0:63:4c:ba:b0:26:cd:ca:4d:10:08:
                    0e:f1:e1:4b:e5:a1:27:66:4f:9f:bb:fe:ec:05:69:
                    83:c7:ab:d8:50:5c:31:f2:a1:36:49:6c:c8:cd:88:
                    66:92:be:24:6d:8e:8f:71:25:16:b0:0b:da:8d:7f:
                    11:11:49:c0:84:39:2f:9d:fb:2c:b2:16:c7:94:80:
                    9a:e0:d1:48:e6:e7:6a:41:c5:de:1e:27:16:de:f6:
                    36:b8:e6:67:5d:ec:fa:a7:9f:93:01:e9:a0:99:61:
                    95:bf:f6:0e:6a:da:52:c3:02:8d:d2:c5:8a:4f:8a:
                    b9:da:a9:fb:d9:6f:45:3f:59:ea:7e:6c:cc:3e:cd:
                    ce:8e:a6:83:e9:ed:fd:74:10:e2:18:0d:47:32:d4:
                    61:8c:c1:3f:a8:d0:c1:0a:3a:f9:2a:8d:bf:bf:48:
                    4f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:B6:5E:27:44:E2:30:53:64:12:59:D5:A2:B1:35:5E:98:2F:B0:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/73B65E2744E23053641259D5A2B1355E982FB0F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.224.0/20
                  187.0.128.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28238

    Signature Algorithm: sha256WithRSAEncryption
         a5:66:d6:dc:70:36:97:f7:fb:86:2c:08:0b:87:c8:66:b4:e7:
         97:2a:f5:ab:f9:f7:04:42:25:c8:fb:be:76:97:f7:25:84:36:
         95:53:28:c1:60:3f:af:e1:d4:c4:46:e4:bb:0b:b1:0f:b1:55:
         91:8e:d9:80:5d:c3:82:62:fe:a4:49:ca:72:c7:91:1d:90:39:
         38:24:10:d6:11:46:43:8e:88:8d:62:a2:39:dd:e4:b3:a9:00:
         47:96:6f:2c:fe:3c:1b:29:12:de:28:42:c9:91:9e:42:a8:b1:
         4f:75:21:53:1f:d8:e1:5f:2a:20:b1:ef:10:b4:89:7b:9a:97:
         56:d5:06:bf:87:6a:ec:b0:09:42:06:92:b2:8d:ba:29:3d:09:
         56:69:46:dc:ec:6b:d3:7e:16:3d:b4:65:94:6a:d6:f7:39:1b:
         dd:71:0b:fb:83:df:f5:63:af:02:f4:51:08:9c:8c:67:3e:b1:
         06:a9:25:b7:f8:a9:ed:a4:e1:ad:1b:6e:a3:b0:32:96:ae:44:
         8b:9a:03:d0:ce:d2:b1:2e:48:b2:bc:16:b2:71:15:b9:5a:18:
         08:00:e8:64:eb:ee:55:38:13:83:d0:32:ea:ca:ba:1e:7b:ca:
         17:44:61:63:fd:4e:54:61:93:65:56:d2:b2:85:50:4b:02:93:
         a1:58:28:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org