Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/743DA51A3B5EC85C5AA43E192C25D4B498AE4A0A.cer
File:                     743DA51A3B5EC85C5AA43E192C25D4B498AE4A0A.cer (raw, json)
Hash identifier:          owoCi1apF+9OBw8kd9KL1p7RVOM5PoQSzHgb7ntHtoc=
Subject key identifier:   74:3D:A5:1A:3B:5E:C8:5C:5A:A4:3E:19:2C:25:D4:B4:98:AE:4A:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       24C90B0543FFFC95E6351AA5269E51D7B593EE30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/743DA51A3B5EC85C5AA43E192C25D4B498AE4A0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Oct 2023 16:44:25 +0000
Certificate not after:    Tue 22 Oct 2024 16:49:25 +0000
Subordinate resources:    AS: 263991
                          IP: 143.0.28.0/22
                          IP: 170.245.16.0/22
                          IP: 2804:28fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c9:0b:05:43:ff:fc:95:e6:35:1a:a5:26:9e:51:d7:b5:93:ee:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 24 16:44:25 2023 GMT
            Not After : Oct 22 16:49:25 2024 GMT
        Subject: CN=743DA51A3B5EC85C5AA43E192C25D4B498AE4A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:70:19:a9:b5:ff:9c:90:13:a1:e9:ea:e8:
                    b1:e3:95:da:63:87:32:f8:8a:4a:74:d2:f2:37:d2:
                    0f:a9:bc:e1:a1:c9:dd:63:a5:b4:5d:a1:d7:c9:ed:
                    5f:9a:f6:b1:0d:ba:7d:51:63:bf:4f:78:11:d1:2e:
                    53:de:1c:60:07:5d:7d:2f:89:18:a6:03:63:5a:fd:
                    e0:b3:59:1a:d0:6a:f1:dd:1f:5f:b2:e3:e0:4b:54:
                    57:c3:f1:ad:c5:78:b0:c1:5d:94:f2:e2:66:43:89:
                    5d:fa:26:ea:68:d1:7d:07:dc:3d:26:3e:ae:97:53:
                    dd:f1:10:2f:8b:49:3a:d4:64:f3:58:c8:fd:c2:4b:
                    31:c8:a0:44:89:c2:86:d9:e0:6e:37:87:ab:99:91:
                    c5:6f:b3:0e:5f:41:e2:9f:67:84:c0:07:5c:1d:70:
                    13:6c:04:13:a5:9a:64:c9:a3:cd:28:be:69:f4:aa:
                    f7:c7:2d:2c:70:4c:af:03:5e:07:9c:3b:53:37:8e:
                    cb:b5:4c:06:53:9e:4f:a5:d5:1c:08:62:ab:71:98:
                    63:b8:11:0b:a4:c6:3f:83:e6:1a:94:76:9c:8a:4f:
                    84:32:a9:7c:4b:0c:81:c7:09:4d:e7:f6:2e:ae:1d:
                    90:c8:1c:0e:b7:2d:9f:2f:72:66:68:9f:ca:b0:c2:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:3D:A5:1A:3B:5E:C8:5C:5A:A4:3E:19:2C:25:D4:B4:98:AE:4A:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/743DA51A3B5EC85C5AA43E192C25D4B498AE4A0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.28.0/22
                  170.245.16.0/22
                IPv6:
                  2804:28fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263991

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:9d:29:85:57:3b:37:e7:5f:cc:6b:fe:c9:f1:69:31:5e:
         01:65:df:29:d4:cf:60:34:dc:f4:77:d3:cc:5b:b9:69:f1:3d:
         e8:dd:03:2e:37:bd:5d:c4:07:4e:99:7a:40:c1:86:86:6a:3f:
         d6:98:7b:db:4a:df:1d:85:9b:3a:c6:6e:aa:b2:fa:76:35:be:
         f9:01:82:fe:ea:24:9c:a5:4e:b5:cc:fa:51:52:58:30:0d:7f:
         de:8a:54:ce:25:e9:db:ad:84:bc:7b:a3:b3:0c:55:92:19:c7:
         cf:c7:1b:03:4b:67:2c:9a:80:89:b6:b0:73:79:08:bc:4d:a1:
         a2:99:87:79:8d:f8:e9:0f:94:37:7e:41:d3:99:7b:2a:48:41:
         98:8b:5b:3d:35:9e:78:9e:78:4b:c0:1f:96:6b:9f:db:c4:20:
         1a:d3:e3:9f:99:c2:f5:d0:4e:d6:b9:6c:48:9d:10:31:05:e9:
         a7:97:d9:ca:e8:b4:62:ba:75:5b:35:6f:85:4a:77:a6:06:da:
         5c:e9:34:54:9b:f5:a4:63:ae:51:84:b7:e3:ab:07:72:38:9f:
         94:19:92:02:58:3b:2e:7f:50:97:41:fb:ca:6f:a1:6e:86:26:
         69:e4:75:1d:cb:5d:9b:b2:35:af:77:c7:c7:23:c1:9f:4f:d6:
         20:06:86:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org