Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/73C01ADD8CBA0394C678875BB3571CD4275399B1.cer
File:                     73C01ADD8CBA0394C678875BB3571CD4275399B1.cer (raw, json)
Hash identifier:          Z+844c3V5pWKi9SX/9pGObJdTey5nXzy8DTwtSVsli0=
Subject key identifier:   73:C0:1A:DD:8C:BA:03:94:C6:78:87:5B:B3:57:1C:D4:27:53:99:B1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E9701FA16CFB8B36EB954FC343DD19CD8F46B3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/1/73C01ADD8CBA0394C678875BB3571CD4275399B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:01:47 +0000
Certificate not after:    Thu 03 Apr 2025 14:06:47 +0000
Subordinate resources:    AS: 267351
                          IP: 45.234.4.0/22
                          IP: 2804:4c20::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:97:01:fa:16:cf:b8:b3:6e:b9:54:fc:34:3d:d1:9c:d8:f4:6b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:01:47 2024 GMT
            Not After : Apr  3 14:06:47 2025 GMT
        Subject: CN=73C01ADD8CBA0394C678875BB3571CD4275399B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:d3:cc:e9:e9:06:62:b1:3b:84:eb:2e:f0:
                    c1:18:cf:cf:27:b9:59:49:93:5f:73:22:1e:e1:07:
                    e1:16:e1:a2:12:fd:da:41:bd:f9:5e:08:c5:ea:b4:
                    87:c2:27:40:00:73:2f:17:7b:58:8b:73:4f:a8:68:
                    33:98:94:e5:e3:b5:74:d4:55:d1:37:a7:b8:ac:f2:
                    11:e7:47:0d:f2:7f:ec:d3:f2:e8:5a:45:3a:95:e8:
                    f0:8a:d2:2c:94:69:32:b4:9f:b4:fc:2e:83:83:32:
                    7a:36:75:7d:8e:bc:8c:71:2b:42:c3:8a:79:58:51:
                    06:7c:1d:26:99:b9:38:8b:62:e4:3a:5f:6e:70:35:
                    3b:7b:2b:56:d3:d2:58:22:6e:b9:26:82:f5:f9:72:
                    b6:c0:53:48:10:ef:27:13:96:f5:22:d6:ce:9d:1c:
                    c5:b6:91:d8:8e:74:f5:2c:c0:40:f9:f8:5c:53:2d:
                    32:c4:cf:56:17:04:7b:f2:17:cf:4e:a3:e5:47:be:
                    f7:74:df:bf:78:e2:ec:24:ad:69:07:56:c3:79:71:
                    e4:b7:19:c7:9c:3b:df:68:62:b0:64:0b:8e:c1:f9:
                    f5:6a:c4:2f:27:61:bf:f8:09:63:92:03:fd:4d:d7:
                    cd:df:e7:a6:35:5a:59:4d:e6:f8:66:c5:c6:81:e9:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:C0:1A:DD:8C:BA:03:94:C6:78:87:5B:B3:57:1C:D4:27:53:99:B1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/1/73C01ADD8CBA0394C678875BB3571CD4275399B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.4.0/22
                IPv6:
                  2804:4c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267351

    Signature Algorithm: sha256WithRSAEncryption
         7e:32:15:6c:6f:b4:03:70:dc:61:ca:85:d4:33:bf:0f:83:b4:
         50:d4:25:4b:f5:c4:24:10:1a:cb:85:2f:52:3c:3a:a5:c3:6c:
         38:37:ab:c7:01:d4:4a:44:87:45:84:2f:5f:57:9b:d3:a8:21:
         69:93:cb:77:24:25:8c:97:1d:9a:bf:aa:2d:1c:bd:25:4f:88:
         ad:f6:91:91:c5:dc:6f:6d:f9:86:60:b6:fa:e0:5a:4b:ae:20:
         91:9e:f7:2e:c7:36:10:3a:ed:f8:0b:41:00:64:a8:b8:37:20:
         91:97:a2:cf:91:fa:6b:79:8d:be:b4:bf:d0:21:ba:9a:61:00:
         ab:ce:55:54:84:69:21:db:62:f8:14:95:69:b4:91:8f:4b:79:
         a4:41:af:02:42:7c:9f:04:fb:51:c6:c3:a5:87:fb:fa:0e:00:
         8e:c6:c7:1c:9f:e0:6c:8f:cc:87:a8:5b:5f:a0:a5:d5:9c:76:
         6d:5a:b1:60:c9:17:da:be:c5:36:66:d0:3d:6c:c5:5f:f6:1f:
         6e:a0:60:cd:bc:2a:22:9e:ea:db:c2:ff:7b:8a:09:77:18:91:
         5d:ae:0b:d0:04:4e:01:30:85:a2:d7:7b:8e:90:6f:81:9f:9f:
         3b:9e:be:7d:87:cc:36:f0:91:2a:d4:14:f1:13:09:d5:ed:9f:
         de:03:df:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:19 2025 by rpki-client