Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DF73B5B96F50D7BF692262B31FA39EFDFC25B470.cer
File:                     DF73B5B96F50D7BF692262B31FA39EFDFC25B470.cer (raw, json)
Hash identifier:          TjakDltkeGgX99kd0d9+B6/wIv5AwfSDhZDk0bSDLkQ=
Subject key identifier:   DF:73:B5:B9:6F:50:D7:BF:69:22:62:B3:1F:A3:9E:FD:FC:25:B4:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2D37683A9D3080643B4E8867E5FB2011E04BFC14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/DF73B5B96F50D7BF692262B31FA39EFDFC25B470.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Jan 2023 17:01:52 +0000
Certificate not after:    Fri 19 Jan 2024 17:06:52 +0000
Subordinate resources:    AS: 270337
                          IP: 190.83.48.0/22
                          IP: 2804:6a74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:37:68:3a:9d:30:80:64:3b:4e:88:67:e5:fb:20:11:e0:4b:fc:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 20 17:01:52 2023 GMT
            Not After : Jan 19 17:06:52 2024 GMT
        Subject: CN=DF73B5B96F50D7BF692262B31FA39EFDFC25B470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:ef:99:3a:5b:f9:18:01:3b:f6:89:d8:dc:
                    67:7c:7b:97:57:69:b7:f7:34:94:48:49:2b:1f:37:
                    97:d5:c6:75:f4:a3:62:07:a6:36:ba:36:36:69:85:
                    ac:1b:96:0c:75:8b:a3:b4:09:e5:53:20:92:a9:19:
                    0f:b0:02:c6:97:dc:3a:65:cc:91:3d:49:16:51:28:
                    44:cc:9f:99:46:46:e4:01:b9:8c:d9:88:de:cb:7b:
                    15:a4:f4:f2:79:29:7a:00:7a:fe:88:5b:44:1e:cc:
                    6c:60:69:79:90:cb:fd:38:99:ac:c3:21:8c:2a:28:
                    db:cd:fc:1c:fe:e6:4a:2a:2a:cc:46:24:8e:33:ae:
                    71:58:01:1b:4e:03:23:63:bd:93:60:bc:13:3c:5e:
                    c3:6f:7f:3a:60:de:9c:ba:e2:67:44:1d:83:00:81:
                    06:4d:b5:a1:cc:31:96:96:aa:ca:60:c0:73:66:20:
                    f5:f6:50:37:5b:94:8e:26:05:fd:bf:f2:ce:d6:9b:
                    a9:b8:42:68:65:97:8a:63:c3:a8:71:45:14:ff:d3:
                    88:ba:f0:66:c2:93:5e:a7:c5:c7:cb:6d:01:b1:6d:
                    b5:eb:70:5d:5f:48:87:3b:3f:5b:4e:7c:7d:65:76:
                    bf:26:87:19:73:13:c9:75:ca:07:bb:9d:b2:d0:c4:
                    77:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:73:B5:B9:6F:50:D7:BF:69:22:62:B3:1F:A3:9E:FD:FC:25:B4:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/DF73B5B96F50D7BF692262B31FA39EFDFC25B470.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.48.0/22
                IPv6:
                  2804:6a74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270337

    Signature Algorithm: sha256WithRSAEncryption
         41:0a:db:c7:67:c9:a2:58:bb:68:c0:bc:8e:31:e1:3d:39:16:
         2d:f5:79:2f:57:57:de:62:9c:1c:69:9f:c5:5e:68:bf:6b:1b:
         2f:73:e7:0a:a2:ee:0b:61:2c:68:7e:01:48:d2:83:5b:1c:37:
         f2:c0:23:0b:bb:38:cc:5c:f9:8d:5b:7a:fa:71:e8:3f:c7:82:
         52:44:a2:2f:f4:07:78:83:0b:f6:fe:5b:c7:1c:7c:19:2b:f0:
         bb:88:86:a8:a4:d0:c8:43:0b:7f:5c:6d:ac:ac:12:c0:55:8f:
         20:b8:c7:f8:5d:ea:ff:c6:16:89:f7:c4:d5:b6:10:e2:89:34:
         ea:b2:7e:18:3f:89:b1:24:85:1b:86:47:ec:56:3a:e6:6c:cd:
         ee:8b:5d:8b:70:df:23:db:ec:23:0f:6c:2b:c5:00:fd:99:d0:
         13:09:f2:f9:57:b4:0b:ce:a3:e0:ff:40:5a:d7:52:40:1d:4f:
         a4:46:7d:c8:9d:00:7f:6f:79:f6:6c:bb:0e:cb:48:1e:e6:cd:
         43:eb:07:d2:57:22:de:f7:74:7c:f4:a5:19:ac:ec:16:33:c2:
         47:00:d0:95:04:3e:44:6b:80:f3:a8:96:14:b7:8f:8c:69:9e:
         1b:46:a0:f6:8a:09:75:e4:d3:b1:5d:2f:b0:94:28:8c:db:9d:
         e3:32:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org