Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1371F700CBADC91CFD992190FF23277F254E6E8A.cer
File:                     1371F700CBADC91CFD992190FF23277F254E6E8A.cer (raw, json)
Hash identifier:          ZoiKO+VvGyFcOTF+JYpInzJ5rg+4WJInXdKocVO9s3w=
Subject key identifier:   13:71:F7:00:CB:AD:C9:1C:FD:99:21:90:FF:23:27:7F:25:4E:6E:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F0E73C9616725494B24406D6175708D3A1A098E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/1371F700CBADC91CFD992190FF23277F254E6E8A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Feb 2023 13:59:51 +0000
Certificate not after:    Fri 02 Feb 2024 14:04:51 +0000
Subordinate resources:    AS: 266071
                          IP: 45.4.120.0/22
                          IP: 2804:3a1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0e:73:c9:61:67:25:49:4b:24:40:6d:61:75:70:8d:3a:1a:09:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  3 13:59:51 2023 GMT
            Not After : Feb  2 14:04:51 2024 GMT
        Subject: CN=1371F700CBADC91CFD992190FF23277F254E6E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:4d:48:d3:bd:dc:f2:f5:dd:8b:bb:92:b8:
                    00:d2:c4:11:01:6d:71:79:f1:20:bc:9c:75:e4:7a:
                    2e:d3:71:61:ea:04:6e:5a:cb:3a:33:82:94:96:1b:
                    8d:a4:cd:4c:ab:c2:0d:80:7d:2e:6e:ca:b0:69:6e:
                    a1:2f:8b:ad:24:02:77:48:11:24:8a:08:b3:29:78:
                    f0:9d:8e:04:e1:ab:c5:ee:39:75:ef:00:2d:78:17:
                    f0:36:dd:5e:e4:f6:58:56:d5:52:da:54:e4:cf:0d:
                    3d:30:05:e2:11:05:89:96:d2:25:b8:35:47:41:65:
                    d8:b8:25:c5:68:1f:99:02:83:aa:37:14:81:6a:9d:
                    79:0e:4a:3f:28:e9:50:fa:30:dc:e8:f5:8b:bd:b7:
                    e6:0e:b7:37:e8:c8:67:c2:58:ab:75:1f:10:98:dd:
                    5c:6e:9f:01:b6:6b:29:a7:48:59:8e:70:82:cf:9b:
                    71:1a:09:27:60:c6:41:98:38:7e:4c:c7:a8:95:c0:
                    3d:fe:7e:d0:4b:b4:dc:16:7e:5e:35:b0:85:9f:b5:
                    d6:6a:27:5a:38:bc:e2:20:ba:87:c1:67:7f:e0:f6:
                    b2:c8:40:50:48:ee:11:c0:ac:d6:54:81:4a:ce:06:
                    ae:b9:54:2b:31:e8:2c:1e:0a:90:03:e5:cd:30:df:
                    db:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:71:F7:00:CB:AD:C9:1C:FD:99:21:90:FF:23:27:7F:25:4E:6E:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/1371F700CBADC91CFD992190FF23277F254E6E8A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.120.0/22
                IPv6:
                  2804:3a1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266071

    Signature Algorithm: sha256WithRSAEncryption
         1b:87:02:8b:dd:09:14:e7:46:2a:bd:2d:eb:48:80:13:e7:ba:
         d5:11:bb:20:d6:6c:5c:91:98:da:c4:b6:aa:11:71:91:ab:93:
         27:39:e2:0f:3c:74:af:af:d7:cb:1a:e8:c9:f3:42:f9:f0:67:
         48:ca:1b:cb:d3:cc:86:a4:c8:51:80:05:7b:ce:a4:48:61:91:
         60:5e:99:81:5b:71:bc:b0:a9:2e:ec:f9:5a:86:0c:81:a6:77:
         0b:d0:f7:bd:66:49:ed:67:b6:73:6b:fb:26:0a:d3:da:98:ac:
         91:5d:67:b8:87:8f:a4:9c:f4:3e:7d:8a:b7:1c:08:6f:3f:8f:
         93:69:0b:40:5c:04:70:a9:f9:71:8d:b5:92:a9:f3:68:36:ef:
         67:7f:21:b4:f3:35:d3:54:ba:0e:53:6c:c6:35:7c:b7:85:c0:
         38:37:74:26:58:51:2b:29:a7:a2:2b:53:23:5a:37:f5:42:7f:
         f3:53:11:2d:18:95:ec:a5:77:69:0b:2f:2c:16:99:34:7f:3f:
         f2:e8:e6:30:8c:16:4e:0b:66:db:80:31:5c:c7:bc:4b:d0:cc:
         c1:c5:07:70:5a:57:2a:92:b1:a9:ad:3e:3d:cd:ec:c0:08:0c:
         a6:32:5e:80:57:7b:c0:64:1f:fa:c1:15:b1:94:7d:0d:4b:24:
         e2:e2:69:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org