Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/73F4CAC0D954451739E79AFE193B21C06A17D668.cer
File:                     73F4CAC0D954451739E79AFE193B21C06A17D668.cer (raw, json)
Hash identifier:          PV5B0ntRqEq5BvrBQzvpK+Nfb3FxDRJsQTo6Aw7qDp0=
Subject key identifier:   73:F4:CA:C0:D9:54:45:17:39:E7:9A:FE:19:3B:21:C0:6A:17:D6:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       342E2663916FB32F61C7BC2C82EC40EF640C8B22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/73F4CAC0D954451739E79AFE193B21C06A17D668.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Sep 2022 13:49:28 +0000
Certificate not after:    Tue 19 Sep 2023 13:54:28 +0000
Subordinate resources:    AS: 263897
                          IP: 138.204.112.0/22
                          IP: 2804:2760::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2e:26:63:91:6f:b3:2f:61:c7:bc:2c:82:ec:40:ef:64:0c:8b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 13:49:28 2022 GMT
            Not After : Sep 19 13:54:28 2023 GMT
        Subject: CN=73F4CAC0D954451739E79AFE193B21C06A17D668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:74:b9:ff:35:5d:4e:09:51:ec:87:98:aa:
                    d7:d4:c6:ad:47:66:04:bf:46:f2:20:13:b0:27:de:
                    07:c9:62:e4:70:d3:99:b2:5e:99:e7:c7:1e:23:30:
                    5f:c2:5a:72:31:b7:c2:df:4d:86:a2:b4:cf:d0:5b:
                    77:b4:d5:a4:d5:e3:b8:d5:80:d3:f8:9b:fa:42:44:
                    77:66:85:04:0b:fa:5c:31:6a:52:e6:8a:f9:08:99:
                    23:96:c4:39:a1:b5:19:e9:9e:da:81:f2:9b:ce:73:
                    14:7b:04:a3:cb:c3:24:59:41:d3:49:bd:31:37:fd:
                    75:32:c1:69:1f:3e:18:c4:7e:26:c8:7a:a8:55:3c:
                    12:36:ed:f2:7d:02:75:73:45:de:6a:3b:96:f2:f8:
                    30:d1:2e:a9:db:59:b1:91:0c:b3:58:a1:b4:5e:5b:
                    65:7d:87:4b:62:46:1c:a2:58:a8:c9:e3:46:df:9b:
                    52:54:e9:15:d3:55:22:91:30:88:01:f6:39:b2:44:
                    a1:f1:09:b7:29:31:ff:3f:37:b2:a9:ee:c8:a2:80:
                    c3:28:fa:53:33:1b:d0:fc:e7:33:89:88:50:cb:f2:
                    12:5e:81:02:05:8c:9f:75:45:69:55:84:b0:e1:a9:
                    93:51:b9:0b:49:d4:8c:0a:fb:bc:9a:c7:64:56:cf:
                    ea:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:F4:CA:C0:D9:54:45:17:39:E7:9A:FE:19:3B:21:C0:6A:17:D6:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/73F4CAC0D954451739E79AFE193B21C06A17D668.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.112.0/22
                IPv6:
                  2804:2760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263897

    Signature Algorithm: sha256WithRSAEncryption
         a0:d9:19:d3:b3:ea:53:60:56:ec:21:5a:77:ae:0c:83:58:d4:
         5b:ff:f7:91:f9:9b:c1:a4:ba:b9:77:7e:3a:be:2d:86:e9:e1:
         f5:e0:93:0e:f3:b5:6a:b2:f2:81:4d:d9:9b:4b:11:48:8a:92:
         5f:c7:73:73:82:fb:b8:ee:92:c5:51:f6:46:f4:e8:96:db:87:
         28:7f:a1:c1:d4:90:92:53:58:a1:f4:e0:b2:84:77:a1:26:66:
         50:99:40:1d:54:ed:84:cb:39:bc:91:3c:65:f6:05:de:ed:6a:
         27:48:0c:6f:64:4c:44:ab:ed:42:4e:fb:06:57:5e:05:eb:a3:
         8a:0c:77:7e:04:56:99:83:32:3c:39:b4:56:a1:5e:77:87:6a:
         9a:a0:1e:cb:d5:87:3f:5e:f6:49:a4:1e:49:4c:3b:a7:cc:c7:
         54:8c:7f:2c:b8:fa:ad:fa:6f:ab:ed:43:c9:80:e8:21:1e:48:
         42:16:f8:4e:68:13:e0:02:f2:e1:37:f9:61:05:05:4c:8b:80:
         3d:1f:6b:71:21:84:83:f4:0b:6e:78:4f:85:ab:06:a0:cd:2f:
         99:95:1d:c7:bc:a5:b1:2d:a3:e0:d2:ba:eb:f0:2e:b2:e6:15:
         9c:e2:72:a4:99:c8:f7:a1:4c:fc:17:74:65:4e:ae:75:02:98:
         6d:af:42:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org