Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/743645EE32CC2F2FD36B3672BC1D73CF661FE0AA.cer
File:                     743645EE32CC2F2FD36B3672BC1D73CF661FE0AA.cer (raw, json)
Hash identifier:          SbrKvryUw2A+mK9JwZapusAcZruxUlgKTZhJdgaPhFs=
Subject key identifier:   74:36:45:EE:32:CC:2F:2F:D3:6B:36:72:BC:1D:73:CF:66:1F:E0:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       702145E4A1C7B9922438555C6EE6447E3F074F46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/743645EE32CC2F2FD36B3672BC1D73CF661FE0AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 19:52:14 +0000
Certificate not after:    Thu 18 Jul 2024 19:57:14 +0000
Subordinate resources:    AS: 28359
                          IP: 177.70.192.0/20
                          IP: 179.97.192.0/19
                          IP: 187.94.128.0/19
                          IP: 189.76.176.0 -- 189.76.207.255
                          IP: 2804:15fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:21:45:e4:a1:c7:b9:92:24:38:55:5c:6e:e6:44:7e:3f:07:4f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 19:52:14 2023 GMT
            Not After : Jul 18 19:57:14 2024 GMT
        Subject: CN=743645EE32CC2F2FD36B3672BC1D73CF661FE0AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1b:c3:4d:fa:cc:1c:7a:2a:d2:1b:98:86:cd:
                    53:5e:bb:2d:4e:23:9e:97:b1:fb:c6:46:21:cb:b3:
                    1b:f0:05:e9:4f:e5:49:19:a4:07:36:f9:af:fd:a9:
                    09:99:7f:ba:42:27:e4:52:5a:d3:46:65:9a:c1:99:
                    f9:3d:20:20:07:d1:78:59:13:8d:38:18:3c:33:b0:
                    f6:f9:52:fc:80:7a:b5:79:5f:45:8c:22:92:05:4a:
                    28:95:85:24:a7:f2:14:dc:78:41:6a:80:71:65:56:
                    71:85:5f:78:31:b0:02:22:2f:56:65:e2:d2:ac:1a:
                    f3:6e:17:7a:e0:73:7a:13:0c:2a:7a:03:dd:8e:b4:
                    f8:f8:21:d3:4f:1d:71:56:3d:8f:5d:d1:5c:7f:35:
                    bd:22:52:8f:be:0a:86:e7:33:5e:4a:83:cf:a6:db:
                    ad:69:5f:91:22:54:cb:05:3e:d4:8d:6f:9f:92:e0:
                    99:de:58:e9:83:01:99:e5:12:70:12:3b:65:69:3c:
                    69:e2:04:e5:8a:ef:b4:03:47:b5:74:42:df:f5:d2:
                    88:a6:fd:14:bb:c7:43:ca:2f:58:ef:d0:99:3c:a3:
                    d3:d0:46:a8:f7:86:ae:49:d2:11:dc:08:65:59:f6:
                    a9:dc:b5:dc:4e:c5:39:a9:b3:f5:47:22:67:63:15:
                    bf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:36:45:EE:32:CC:2F:2F:D3:6B:36:72:BC:1D:73:CF:66:1F:E0:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/743645EE32CC2F2FD36B3672BC1D73CF661FE0AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.192.0/20
                  179.97.192.0/19
                  187.94.128.0/19
                  189.76.176.0-189.76.207.255
                IPv6:
                  2804:15fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28359

    Signature Algorithm: sha256WithRSAEncryption
         94:68:41:38:43:a9:a0:33:41:ac:05:97:e6:63:03:c5:e2:e6:
         b6:21:aa:2c:6f:8d:11:b9:d7:48:89:74:a1:c7:4d:34:68:59:
         0d:30:a2:82:d8:b5:b9:e0:ff:d4:ad:77:4b:51:a6:da:e4:20:
         e3:14:11:fa:d6:1e:29:33:ee:bd:51:4e:4d:46:60:47:46:66:
         51:fb:ac:32:e7:16:96:f5:16:45:e1:0f:d9:c9:68:20:b8:f9:
         49:22:69:77:22:ea:7c:eb:f7:33:1c:66:d3:0c:4e:e0:24:64:
         a7:41:db:5a:92:88:5d:d3:8b:8a:6c:00:ba:a7:ef:43:ce:36:
         73:e0:26:59:c0:40:5f:ce:04:4d:5b:71:cb:a7:f2:1b:2b:5b:
         9b:44:bd:65:be:81:d5:e3:24:73:16:e0:ec:ef:b7:f3:1b:f5:
         0b:67:52:f2:a0:f5:47:d3:ba:83:df:60:e6:81:87:19:1c:36:
         e4:c4:39:df:56:b3:9e:6b:80:a2:37:b5:35:8a:e6:e0:d8:cf:
         09:98:03:90:71:fc:be:03:a5:2f:fb:22:5f:93:3e:77:54:fd:
         a3:7f:26:bb:62:75:df:e3:ac:89:0d:78:62:60:eb:08:fa:f5:
         a0:f4:08:33:d2:8f:ba:9d:b7:b5:0f:be:09:b4:64:bf:90:e4:
         77:f7:01:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org