Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B73BF0E2F1298145FEEE53A6FD22172627C39AAC.cer
File:                     B73BF0E2F1298145FEEE53A6FD22172627C39AAC.cer (raw, json)
Hash identifier:          +rMFvrjEEu2yb8oxYE07wjZcD24wh/lV5wLG8OZxo2A=
Subject key identifier:   B7:3B:F0:E2:F1:29:81:45:FE:EE:53:A6:FD:22:17:26:27:C3:9A:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       08E0FAFFFC3EDB19FC4D4AA57D40583FD97BD2D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/0/B73BF0E2F1298145FEEE53A6FD22172627C39AAC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 21:06:26 +0000
Certificate not after:    Wed 10 Jul 2024 21:11:26 +0000
Subordinate resources:    AS: 267147
                          IP: 45.229.100.0/22
                          IP: 2804:48d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e0:fa:ff:fc:3e:db:19:fc:4d:4a:a5:7d:40:58:3f:d9:7b:d2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 21:06:26 2023 GMT
            Not After : Jul 10 21:11:26 2024 GMT
        Subject: CN=B73BF0E2F1298145FEEE53A6FD22172627C39AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:83:56:00:03:fd:d9:aa:89:65:9e:89:e3:
                    f6:0d:f0:48:21:01:ec:b2:77:7d:44:a4:ff:dd:b0:
                    1e:84:61:a8:d8:5c:b9:7f:df:11:86:2e:c6:71:73:
                    16:00:dc:cc:84:2e:68:ca:97:41:e0:1a:e8:f0:51:
                    f1:7f:08:ef:c4:fb:78:78:ce:09:f9:d8:23:79:36:
                    aa:f9:27:ee:19:a1:12:1c:e3:10:56:2d:2b:30:f4:
                    42:0d:17:ae:a3:62:64:e0:35:0a:28:12:d1:f4:c9:
                    83:0b:52:3a:95:11:c2:77:a4:31:56:ab:b3:b7:65:
                    b9:d3:33:78:b0:23:23:34:0b:01:92:dd:d4:88:07:
                    ae:fa:94:ea:0d:5c:5d:04:8f:3d:90:ff:3c:f4:d5:
                    fe:46:8c:95:71:62:cc:f4:a8:d2:ab:75:68:23:51:
                    2e:f2:06:eb:99:47:0b:75:ad:d6:f5:87:1e:98:3a:
                    52:c4:2a:3e:ed:7c:3a:90:7a:6b:7f:1b:44:45:eb:
                    e7:c2:28:57:67:d0:84:e9:e8:f1:5c:01:ab:dd:cb:
                    67:b2:d4:7c:cd:4c:16:32:9e:6d:fc:e0:3c:64:74:
                    06:fa:cd:4e:be:21:d4:bc:e9:a2:0c:17:59:d5:85:
                    b2:2b:f1:f5:0b:f6:95:81:1c:d6:a2:9e:77:15:36:
                    be:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:3B:F0:E2:F1:29:81:45:FE:EE:53:A6:FD:22:17:26:27:C3:9A:AC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/0/B73BF0E2F1298145FEEE53A6FD22172627C39AAC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.100.0/22
                IPv6:
                  2804:48d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267147

    Signature Algorithm: sha256WithRSAEncryption
         1c:ba:a7:21:78:74:50:b7:c5:54:a7:ab:3e:04:7b:1c:d5:74:
         b3:d2:0d:76:be:b8:7d:cc:28:17:1e:19:d8:20:fa:f4:d8:5d:
         90:28:dc:a3:98:d3:c3:d5:1e:1e:55:e8:35:08:e6:09:05:b0:
         61:10:a6:94:32:c3:4b:d4:4e:4a:fd:da:2e:4b:95:82:fa:75:
         e0:74:63:55:89:7c:13:2e:ee:3a:2d:fb:73:b9:7b:35:7c:be:
         00:fc:8b:06:24:79:37:ae:55:41:7b:73:5e:9f:0f:01:ea:5e:
         23:ff:89:b4:8d:ab:77:77:bf:73:6d:a5:db:c3:a9:4d:c5:9d:
         9c:39:80:94:c4:b7:07:17:06:b4:fd:5c:50:4a:57:10:ce:e3:
         f2:12:26:68:f7:75:c8:71:b3:4c:ef:99:87:75:09:e9:1b:ab:
         64:87:99:87:af:63:86:5b:5a:ba:bd:5d:8d:f6:41:5a:1c:32:
         e1:ed:01:74:ac:bc:a7:1a:81:ae:04:60:6f:6f:ea:cb:37:63:
         db:60:d2:0e:96:77:b3:3e:94:17:2d:77:3c:d1:3a:c2:53:b5:
         cb:a5:cc:72:c0:96:3f:ad:95:fc:c1:2a:a8:6a:90:7b:78:84:
         87:d3:42:cf:42:1f:05:6e:ff:10:97:20:0b:f5:1d:11:9b:19:
         6c:1c:55:ad
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUCOD6//w+2xn8TUqlfUBYP9l70tAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTIyMTA2MjZaFw0yNDA3MTAyMTExMjZaMDMxMTAvBgNV
BAMTKEI3M0JGMEUyRjEyOTgxNDVGRUVFNTNBNkZEMjIxNzI2MjdDMzlBQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/4YNWAAP92aqJZZ6J4/YN8Egh
Aeyyd31EpP/dsB6EYajYXLl/3xGGLsZxcxYA3MyELmjKl0HgGujwUfF/CO/E+3h4
zgn52CN5Nqr5J+4ZoRIc4xBWLSsw9EINF66jYmTgNQooEtH0yYMLUjqVEcJ3pDFW
q7O3ZbnTM3iwIyM0CwGS3dSIB676lOoNXF0Ejz2Q/zz01f5GjJVxYsz0qNKrdWgj
US7yBuuZRwt1rdb1hx6YOlLEKj7tfDqQemt/G0RF6+fCKFdn0ITp6PFcAavdy2ey
1HzNTBYynm384DxkdAb6zU6+IdS86aIMF1nVhbIr8fUL9pWBHNainncVNr5dAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS3O/Di8SmBRf7u
U6b9IhcmJ8OarDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82UVFnUXZCTkRXZ0RGdmJ6VTEyVnNxWGFXZXV0cm9OdmU4
eFN3VGZzakJ5aS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNlFRZ1F2Qk5EV2dERnZielUxMlZzcVhhV2V1dHJvTnZl
OHhTd1Rmc2pCeWkvMC9CNzNCRjBFMkYxMjk4MTQ1RkVFRTUzQTZGRDIyMTcyNjI3
QzM5QUFDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt5WQwDQQCAAIwBwMF
ACgESNQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBOLMA0GCSqGSIb3DQEBCwUA
A4IBAQAcuqcheHRQt8VUp6s+BHsc1XSz0g12vrh9zCgXHhnYIPr02F2QKNyjmNPD
1R4eVeg1COYJBbBhEKaUMsNL1E5K/douS5WC+nXgdGNViXwTLu46LftzuXs1fL4A
/IsGJHk3rlVBe3Nenw8B6l4j/4m0jat3d79zbaXbw6lNxZ2cOYCUxLcHFwa0/VxQ
SlcQzuPyEiZo93XIcbNM75mHdQnpG6tkh5mHr2OGW1q6vV2N9kFaHDLh7QF0rLyn
GoGuBGBvb+rLN2PbYNIOlnezPpQXLXc80TrCU7XLpcxywJY/rZX8wSqoapB7eISH
00LPQh8Fbv8QlyAL9R0RmxlsHFWt
-----END CERTIFICATE-----