Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/73DED5B7AE1A8ED606D6DB864587EEDE6F16E2F4.cer
File:                     73DED5B7AE1A8ED606D6DB864587EEDE6F16E2F4.cer (raw, json)
Hash identifier:          CRx+Z1ertAFGZnq0gAV3jZlXGoVXf5yWo+oo6b8yl1U=
Subject key identifier:   73:DE:D5:B7:AE:1A:8E:D6:06:D6:DB:86:45:87:EE:DE:6F:16:E2:F4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A4A4062ECF19E6561F17185416EA99E2A5E6125
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/73DED5B7AE1A8ED606D6DB864587EEDE6F16E2F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 14:32:32 +0000
Certificate not after:    Wed 03 Apr 2024 14:37:32 +0000
Subordinate resources:    AS: 267328
                          IP: 45.233.152.0/22
                          IP: 2804:4bc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4a:40:62:ec:f1:9e:65:61:f1:71:85:41:6e:a9:9e:2a:5e:61:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  5 14:32:32 2023 GMT
            Not After : Apr  3 14:37:32 2024 GMT
        Subject: CN=73DED5B7AE1A8ED606D6DB864587EEDE6F16E2F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:a7:f0:b3:e1:2f:af:00:fc:ff:50:f1:bc:
                    94:2d:dd:e7:25:4a:1f:cc:fc:5f:59:6a:de:9b:52:
                    d4:73:49:63:68:8f:ee:c2:40:4a:da:e6:ad:a1:19:
                    ee:33:f8:cf:78:9c:e8:39:b0:cc:8f:ea:e0:23:71:
                    5e:52:9c:12:d2:5a:6f:5c:60:6f:a0:eb:f9:85:b9:
                    9c:e0:0c:24:84:29:cc:9b:dd:c5:3d:95:96:e6:23:
                    c8:60:98:e7:2b:c2:68:f4:cf:80:e9:45:c8:20:af:
                    4d:a9:39:ee:50:e3:7c:d3:0a:85:d7:31:9c:40:d5:
                    a0:98:79:64:5b:32:9a:74:0e:d4:4e:d4:81:31:80:
                    10:56:17:c0:f2:1e:6a:51:1d:02:f1:65:d9:88:59:
                    fa:f5:7f:d6:c3:d1:ca:9d:fa:29:31:e1:47:85:57:
                    1e:7e:39:19:a6:64:e2:98:6a:1c:c4:a7:c8:66:a8:
                    a2:f3:0b:65:1d:6a:a8:56:8a:0a:33:7a:9d:21:bc:
                    64:29:2e:c0:f6:44:07:e9:12:ca:c7:7d:c3:10:5b:
                    09:93:21:ce:e1:89:62:c5:ab:3b:a5:75:53:b9:a0:
                    fd:57:18:13:34:96:fc:6a:80:a5:77:2b:37:a1:ba:
                    9a:19:b6:41:37:24:38:55:86:d4:d5:cf:00:9d:ac:
                    34:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:DE:D5:B7:AE:1A:8E:D6:06:D6:DB:86:45:87:EE:DE:6F:16:E2:F4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/73DED5B7AE1A8ED606D6DB864587EEDE6F16E2F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.152.0/22
                IPv6:
                  2804:4bc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267328

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:9b:9e:57:5b:12:0e:0f:4c:b5:43:87:e4:fa:50:61:a5:
         b8:2f:41:6c:c9:c2:ed:17:b4:82:7a:87:5c:eb:5b:dc:48:b1:
         fb:83:26:10:12:14:71:f1:29:0b:65:b6:6a:11:61:04:0b:20:
         2c:27:d0:4a:6c:9a:e4:42:77:b3:5f:1c:85:43:1e:5b:27:ed:
         f0:36:5f:1d:74:78:cc:8a:9a:3e:a0:b8:11:36:fb:bb:11:38:
         73:bf:3a:88:1d:eb:9a:41:3e:4e:00:13:9f:94:b8:5d:dc:c3:
         9f:00:65:b5:2b:bc:a1:d6:09:f9:0f:98:8c:8f:1f:b4:c4:96:
         ba:9e:31:56:be:2b:78:12:c5:1a:ec:9a:db:f7:10:6f:df:8e:
         10:93:e1:8f:4c:d6:04:87:61:4c:91:9c:da:35:80:0e:b3:6f:
         0b:8a:78:e7:b4:09:c9:c5:61:2a:f3:57:98:2a:2a:5f:34:02:
         e3:e2:10:2e:f8:e6:40:58:af:47:e8:f3:44:64:23:32:18:82:
         d8:0b:65:1a:66:dd:6a:30:f5:ef:92:5b:ff:f2:bd:af:35:5f:
         c5:f6:a4:04:5b:67:87:22:13:ba:b6:dd:0f:f1:77:c1:9c:48:
         c7:ca:d7:94:ac:ed:a3:b5:1e:ae:c8:fa:14:44:63:ef:6c:1a:
         c6:4d:4b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org