Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
File:                     73C1893E55F64514DBFC3B6B801C16D0360913FE.cer (raw, json)
Hash identifier:          2oAF1DqaTCwtRCt7B4Sy9ren5nU8ajYpytXDiNnh2CA=
Subject key identifier:   73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04DBAEE76392B5770965679EC90A6653F0B3F38B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Aug 2023 19:54:30 +0000
Certificate not after:    Mon 19 Aug 2024 19:59:30 +0000
Subordinate resources:    AS: 28198
                          IP: 128.201.176.0/22
                          IP: 131.100.84.0/22
                          IP: 131.221.48.0/22
                          IP: 138.94.148.0/22
                          IP: 138.99.240.0/22
                          IP: 143.137.240.0/22
                          IP: 168.228.116.0/22
                          IP: 170.238.176.0/22
                          IP: 170.239.156.0/22
                          IP: 177.52.48.0/21
                          IP: 177.66.48.0/20
                          IP: 177.67.8.0/21
                          IP: 177.73.192.0/21
                          IP: 177.84.152.0/22
                          IP: 177.93.96.0/21
                          IP: 177.130.64.0/20
                          IP: 177.131.0.0/20
                          IP: 177.137.152.0/21
                          IP: 177.185.16.0/20
                          IP: 177.222.240.0/21
                          IP: 179.106.160.0/21
                          IP: 179.125.96.0/21
                          IP: 186.194.240.0/20
                          IP: 187.84.240.0/20
                          IP: 187.109.0.0/20
                          IP: 189.51.16.0/20
                          IP: 189.90.192.0/20
                          IP: 191.5.32.0/20
                          IP: 192.140.108.0/22
                          IP: 2804:884::/32
                          IP: 2804:c90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:db:ae:e7:63:92:b5:77:09:65:67:9e:c9:0a:66:53:f0:b3:f3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 21 19:54:30 2023 GMT
            Not After : Aug 19 19:59:30 2024 GMT
        Subject: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:28:b4:39:ac:b2:89:95:f4:07:f0:de:7d:
                    fb:b6:6a:35:6a:9d:69:e8:ae:3f:e1:db:76:39:15:
                    ae:a3:d2:70:74:34:53:dc:cd:f5:b7:98:8a:d8:62:
                    52:8c:d1:5a:6e:06:70:20:33:99:b1:cd:4d:90:da:
                    4c:c5:c4:59:1f:25:7f:c0:dd:81:d9:00:ee:b3:36:
                    ee:57:6e:70:61:dd:a0:2c:10:b0:9b:09:f0:1a:1e:
                    ee:b9:06:47:6c:9c:4c:b0:47:39:c6:93:73:40:1d:
                    be:9b:f8:d9:dc:c3:96:b7:71:24:8e:a5:64:96:b6:
                    92:f3:20:66:8f:1f:36:84:f1:fb:0e:38:01:aa:40:
                    48:d4:46:fe:65:9a:9a:6f:ff:32:36:40:86:16:e7:
                    af:72:2d:b2:79:0a:2e:97:8f:c2:0d:62:c7:df:5a:
                    cf:41:72:26:d5:f6:b8:fb:6f:04:4e:fb:06:2b:89:
                    99:0e:2f:6a:1a:b1:91:07:5c:69:4a:0a:4c:45:f2:
                    60:61:bc:b4:06:84:c3:e5:ac:6f:77:3b:57:c0:fb:
                    56:22:a7:be:ef:c1:e8:68:9b:22:7a:68:0f:d0:27:
                    15:67:f6:c1:1e:a4:78:55:dc:e9:56:60:bb:d2:b9:
                    ea:2e:e4:33:b4:fc:6e:3f:85:1e:72:be:4e:54:60:
                    95:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.176.0/22
                  131.100.84.0/22
                  131.221.48.0/22
                  138.94.148.0/22
                  138.99.240.0/22
                  143.137.240.0/22
                  168.228.116.0/22
                  170.238.176.0/22
                  170.239.156.0/22
                  177.52.48.0/21
                  177.66.48.0/20
                  177.67.8.0/21
                  177.73.192.0/21
                  177.84.152.0/22
                  177.93.96.0/21
                  177.130.64.0/20
                  177.131.0.0/20
                  177.137.152.0/21
                  177.185.16.0/20
                  177.222.240.0/21
                  179.106.160.0/21
                  179.125.96.0/21
                  186.194.240.0/20
                  187.84.240.0/20
                  187.109.0.0/20
                  189.51.16.0/20
                  189.90.192.0/20
                  191.5.32.0/20
                  192.140.108.0/22
                IPv6:
                  2804:884::/32
                  2804:c90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28198

    Signature Algorithm: sha256WithRSAEncryption
         b2:cc:04:a7:4e:ce:80:6d:db:3d:55:0e:f6:6f:51:1f:65:60:
         42:40:04:e7:cc:e0:95:6d:d0:a3:43:46:99:13:29:7d:14:14:
         1b:69:11:00:64:28:16:35:99:d3:ab:50:ba:7f:30:21:ac:4f:
         b8:cd:f5:f3:35:7a:17:8e:06:ff:a3:81:70:98:11:20:5b:54:
         3a:9e:e7:a3:15:a5:ce:ad:ea:67:fb:a4:ab:10:f3:92:01:d5:
         16:9a:c2:b3:4e:40:37:87:90:2e:5b:72:f7:a3:af:7a:58:3d:
         a9:aa:44:6e:72:9a:d1:19:c5:59:d2:ea:e6:38:e3:94:86:38:
         a8:0c:82:f0:54:b2:5a:4b:91:fe:25:00:90:87:81:e0:01:03:
         11:98:82:8b:33:7e:e0:ed:24:a2:d6:a5:88:b1:17:37:c1:8b:
         9e:79:f9:aa:a0:db:eb:4d:f0:de:a5:4b:5c:e5:bf:cf:82:b8:
         fb:a6:48:37:68:55:b3:a9:02:03:ea:33:09:c8:3c:4d:02:29:
         78:f3:06:ef:69:4c:ae:46:a4:39:10:17:e1:f3:46:1c:dd:08:
         49:16:ce:8e:d2:d1:b8:ef:6e:a9:81:28:92:f2:6e:cc:6c:9a:
         52:ea:48:3b:60:cf:8c:fe:42:43:62:b7:ad:3c:4a:19:ed:14:
         a4:b7:a6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org