Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5FF71CDDAB4B88F6163D96DC07EF1E5799133F07.cer
File:                     5FF71CDDAB4B88F6163D96DC07EF1E5799133F07.cer (raw, json)
Hash identifier:          xi7I6/ZKGVMfRxmjcO0JFJx7J0MiEhq38cD100Q6+Uo=
Subject key identifier:   5F:F7:1C:DD:AB:4B:88:F6:16:3D:96:DC:07:EF:1E:57:99:13:3F:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       76504A029143F5B02C884424CBB5B7E8718D3460
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/5FF71CDDAB4B88F6163D96DC07EF1E5799133F07.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 04:44:58 +0000
Certificate not after:    Thu 13 Feb 2025 04:49:58 +0000
Subordinate resources:    AS: 61696
                          IP: 138.36.232.0/22
                          IP: 201.140.248.0/22
                          IP: 2804:1ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:50:4a:02:91:43:f5:b0:2c:88:44:24:cb:b5:b7:e8:71:8d:34:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 04:44:58 2024 GMT
            Not After : Feb 13 04:49:58 2025 GMT
        Subject: CN=5FF71CDDAB4B88F6163D96DC07EF1E5799133F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:49:74:60:69:b5:fe:19:c0:d3:d1:58:52:1c:
                    c1:d7:45:14:45:60:e5:84:a8:5e:1e:b2:24:ef:bd:
                    bc:23:ae:00:12:0e:9c:ca:e8:17:44:98:4c:e1:68:
                    5d:40:21:ea:04:bc:37:3a:50:88:2b:8c:50:39:f1:
                    36:7b:45:17:81:0a:0b:31:0d:c2:e0:20:7e:a4:e7:
                    1a:ab:26:ce:bf:a7:18:35:e4:8a:0e:18:a6:3d:50:
                    ad:3b:7f:98:41:49:33:14:75:a8:d7:54:17:39:61:
                    7b:2e:d6:c3:65:d7:a7:55:25:57:fd:54:2d:46:34:
                    7c:da:37:ab:50:5a:f0:36:d2:67:df:15:80:c7:d1:
                    ae:83:67:b0:af:a0:09:83:62:28:44:4e:b9:8c:a2:
                    34:5b:74:db:63:b1:a4:cd:b4:ec:33:0f:15:0b:86:
                    07:c5:59:49:19:81:d6:cb:a7:64:df:02:c8:c1:00:
                    c8:e7:53:04:b8:ae:a6:02:02:c2:85:8e:24:ff:ea:
                    0b:7e:a1:cb:3b:dd:1a:b2:d0:3f:0b:30:c7:b6:cd:
                    73:db:c2:17:0e:59:8b:ad:48:e8:21:60:27:3f:8f:
                    f4:7e:1d:7e:b9:cd:38:5d:37:b8:0f:38:2f:77:c3:
                    7f:95:7c:4a:45:a3:89:d2:84:53:e8:c8:de:ee:17:
                    26:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:F7:1C:DD:AB:4B:88:F6:16:3D:96:DC:07:EF:1E:57:99:13:3F:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/5FF71CDDAB4B88F6163D96DC07EF1E5799133F07.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.232.0/22
                  201.140.248.0/22
                IPv6:
                  2804:1ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61696

    Signature Algorithm: sha256WithRSAEncryption
         19:b6:99:d3:cf:1e:0e:c1:96:13:d4:06:7f:50:f9:aa:b9:46:
         c7:95:4e:97:60:8f:5e:10:de:bc:45:8a:f2:a3:a3:6b:1c:79:
         57:62:c5:7c:58:58:27:44:2d:c9:c1:a3:cd:1d:a1:c2:16:13:
         13:50:01:0f:6a:f8:57:f2:b6:68:74:11:2e:48:92:d3:6e:c9:
         31:79:af:a1:83:57:48:0c:04:97:e4:65:33:0d:c9:a8:bf:4d:
         2c:dd:ba:f2:dc:56:63:16:e2:9d:6e:01:9e:a8:25:35:2c:09:
         5b:a1:69:3a:52:cf:55:76:8a:17:0a:7a:dd:c6:d6:ba:d0:9e:
         eb:50:66:18:2f:f8:16:d7:52:75:7a:71:d0:6a:16:54:8b:ea:
         4e:48:3e:9d:d6:d9:0f:27:a9:b5:65:3f:da:48:90:c4:18:3c:
         74:ba:3a:c7:77:c5:0f:52:5f:b1:76:5d:39:f5:7f:5a:ab:f9:
         db:54:cb:9b:db:52:33:91:6c:7c:20:dc:fc:cc:82:94:d1:d0:
         06:a6:86:a1:81:10:d0:85:80:e9:b5:cc:36:43:32:ac:b4:c0:
         7e:24:c4:90:7d:cb:5f:a2:0c:95:8e:ad:b5:5d:ad:1d:d2:58:
         db:78:fa:c4:80:2f:19:8b:90:d0:69:40:37:b9:5b:bb:35:52:
         75:5a:68:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org