Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/73F8BDEC83DDCD973453F97F14C25CC94499272E.cer
File:                     73F8BDEC83DDCD973453F97F14C25CC94499272E.cer (raw, json)
Hash identifier:          eX33/kcSwaX2zhfJmQlzTYEt7lkHA1RRmvLvTPhWAh4=
Subject key identifier:   73:F8:BD:EC:83:DD:CD:97:34:53:F9:7F:14:C2:5C:C9:44:99:27:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       31DBB1FE2297159CC3C292A2854A1890C747E26E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/73F8BDEC83DDCD973453F97F14C25CC94499272E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 14 Jan 2024 15:11:09 +0000
Certificate not after:    Sun 12 Jan 2025 15:16:09 +0000
Subordinate resources:    AS: 265300
                          IP: 168.121.68.0/22
                          IP: 200.106.132.0/22
                          IP: 200.125.176.0/22
                          IP: 2804:2dbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:db:b1:fe:22:97:15:9c:c3:c2:92:a2:85:4a:18:90:c7:47:e2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 14 15:11:09 2024 GMT
            Not After : Jan 12 15:16:09 2025 GMT
        Subject: CN=73F8BDEC83DDCD973453F97F14C25CC94499272E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f1:49:bf:17:e4:78:b0:1c:05:e6:64:27:bd:
                    83:30:ea:f4:bc:2b:bc:b3:61:51:31:6d:7a:0f:2e:
                    fc:ca:27:dd:b2:1a:e7:9e:0b:b5:4f:d0:dc:dd:7f:
                    cf:37:e7:39:c9:01:e7:da:b5:de:3b:6e:55:d5:9f:
                    49:91:87:83:f8:01:1b:b1:e6:7c:32:e8:0b:26:27:
                    2f:6b:da:cc:ef:35:4a:71:5f:51:98:fd:6e:eb:3f:
                    15:36:04:f4:c4:3c:fd:5b:11:98:d7:29:da:09:2c:
                    75:24:25:45:7e:62:f2:b1:85:16:23:a6:a1:7c:c0:
                    fe:c7:a3:86:b5:64:d6:48:c5:44:20:bf:4b:0b:63:
                    92:a7:17:9b:dc:5f:75:33:48:ee:29:15:db:84:bd:
                    4c:3b:79:af:19:d5:d7:0c:c6:bd:97:11:cb:5d:a1:
                    34:9d:db:d9:ba:f0:b4:4e:8e:9d:a8:da:1e:70:ef:
                    ae:88:28:b1:03:60:1d:86:13:e0:07:90:3d:58:58:
                    28:01:7f:86:b9:ca:2f:8e:c1:9e:7d:12:95:26:5c:
                    7d:e8:42:dc:a1:d6:ad:cf:88:59:58:8f:e7:77:c0:
                    c3:92:c9:64:e2:6c:69:52:f3:34:2d:81:4f:57:6a:
                    5e:35:b7:24:63:7d:41:9e:32:8b:4c:8d:8f:c8:69:
                    80:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:F8:BD:EC:83:DD:CD:97:34:53:F9:7F:14:C2:5C:C9:44:99:27:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/73F8BDEC83DDCD973453F97F14C25CC94499272E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22
                  200.106.132.0/22
                  200.125.176.0/22
                IPv6:
                  2804:2dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265300

    Signature Algorithm: sha256WithRSAEncryption
         b6:91:9a:39:2e:9e:fc:ea:84:cc:6a:3e:3a:3f:d6:ef:0d:a5:
         64:e5:49:0f:f2:9b:79:db:35:90:a8:4f:a8:1b:d5:93:a0:7f:
         58:55:e3:1c:5f:89:0f:c0:dd:29:fd:77:e3:3b:2f:75:c9:36:
         00:06:8e:94:36:bc:a0:37:a9:5b:38:8a:af:e1:0e:d5:c6:3b:
         ca:5d:34:fd:d2:4c:bc:af:ad:1b:1b:10:ca:da:c8:dc:5e:9f:
         7d:49:43:2d:6d:22:8f:e1:62:c9:8f:db:34:07:08:59:54:b8:
         e2:f7:01:8c:d3:61:aa:59:fe:d1:80:b7:5a:8f:32:66:89:3c:
         3c:8a:e7:9a:c3:e1:f5:d7:fb:e7:69:78:b2:15:0c:e2:c1:20:
         4c:68:64:79:69:ef:79:c0:9b:f7:05:41:7a:aa:bf:c4:65:19:
         55:43:97:8e:c5:c4:b3:72:42:85:c9:bb:82:8d:9b:8a:c7:ed:
         f7:09:69:be:15:52:78:52:5b:2c:d6:51:9e:f4:17:58:f6:2f:
         aa:9a:d9:95:12:4f:b9:14:22:fc:a9:47:d6:19:86:0d:50:51:
         8e:94:c8:21:6e:fa:8f:c9:66:da:4d:9f:a4:ff:30:b8:c1:47:
         64:bd:b0:be:f4:8f:c2:8e:db:dc:77:2e:64:42:ad:1b:fb:12:
         d9:c2:7b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org