Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/71042702EDFA8EAFF1AAEA443672598D19FEC303.cer
File:                     71042702EDFA8EAFF1AAEA443672598D19FEC303.cer (raw, json)
Hash identifier:          a1NsWoULzlgc0bgRcffg9s9FTqc/JXSpSZWPv+YV4fo=
Subject key identifier:   71:04:27:02:ED:FA:8E:AF:F1:AA:EA:44:36:72:59:8D:19:FE:C3:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32EE2524D2127DA8CB32ECE1703AB790D17D92F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GWxs28nfR9Liffk5sW41P7Grp9WxB62eEJrRPaoprfdY/0/71042702EDFA8EAFF1AAEA443672598D19FEC303.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GWxs28nfR9Liffk5sW41P7Grp9WxB62eEJrRPaoprfdY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 13:51:39 +0000
Certificate not after:    Mon 07 Oct 2024 13:56:39 +0000
Subordinate resources:    AS: 264155
                          IP: 138.99.64.0/22
                          IP: 2804:2350::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ee:25:24:d2:12:7d:a8:cb:32:ec:e1:70:3a:b7:90:d1:7d:92:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  9 13:51:39 2023 GMT
            Not After : Oct  7 13:56:39 2024 GMT
        Subject: CN=71042702EDFA8EAFF1AAEA443672598D19FEC303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:91:3c:37:6e:c5:9b:e1:9d:e8:27:ce:df:2c:
                    36:66:e1:9a:3a:95:d8:2d:9e:bf:d8:fb:1f:1c:c7:
                    05:a5:f2:84:f4:be:87:71:79:52:cc:d1:e8:7e:48:
                    d2:3f:81:a1:09:80:42:d4:6e:4f:cf:bd:02:3e:41:
                    75:8c:55:1c:2c:c6:ae:56:7e:38:5b:ff:14:d7:05:
                    f0:aa:1c:7c:77:e6:0e:6c:a6:4c:8a:4a:cd:a8:e5:
                    ef:d0:1f:35:10:3d:29:12:43:c3:67:3e:f0:8a:6e:
                    e1:17:72:3c:0a:90:ab:e1:7d:90:b5:88:f6:87:ff:
                    6e:d7:ed:23:8d:0b:97:bb:ca:05:31:05:5e:f7:e5:
                    a6:a1:51:ba:83:00:e8:7f:8e:01:fd:d2:5f:68:c4:
                    95:9a:76:7c:98:81:8f:e1:6b:da:10:27:4c:7c:79:
                    36:bd:a6:ae:08:40:bb:3f:04:82:24:8f:db:ef:ca:
                    61:f8:60:3d:23:5e:97:a2:5d:bf:44:ea:c2:5e:26:
                    4c:71:3c:ed:f3:78:ad:e6:66:b0:1c:7f:0c:65:ff:
                    9a:ad:c9:01:1c:52:06:93:12:c5:2c:fc:b9:74:2f:
                    7e:4e:e9:3f:9d:a6:9e:ba:a7:1b:d4:82:d5:0d:f5:
                    25:d2:fd:e2:8c:e9:47:e6:dd:ac:62:4e:03:1b:8c:
                    25:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:04:27:02:ED:FA:8E:AF:F1:AA:EA:44:36:72:59:8D:19:FE:C3:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GWxs28nfR9Liffk5sW41P7Grp9WxB62eEJrRPaoprfdY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GWxs28nfR9Liffk5sW41P7Grp9WxB62eEJrRPaoprfdY/0/71042702EDFA8EAFF1AAEA443672598D19FEC303.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.64.0/22
                IPv6:
                  2804:2350::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264155

    Signature Algorithm: sha256WithRSAEncryption
         62:db:ee:29:f4:47:c6:fd:d0:40:58:81:81:46:8c:46:28:43:
         0d:51:ce:d9:63:90:6a:ea:fe:78:ac:a9:96:ac:36:c5:8e:52:
         2b:ad:06:a4:bc:fd:13:cb:8a:db:ae:6d:d1:70:e5:fa:22:85:
         b5:22:42:26:cf:03:36:26:41:6f:57:2f:2d:44:6b:06:95:7d:
         df:eb:c7:07:71:1e:13:3f:51:fc:cf:0b:5e:02:96:5e:7f:60:
         db:ae:98:0b:d8:b8:f7:07:f0:c9:c4:18:0b:0d:1b:d4:59:54:
         5e:98:f7:11:5a:da:65:ef:c5:55:cd:f2:c2:e7:34:bc:56:0c:
         6c:47:de:d1:e1:7b:df:5d:d7:b6:18:f1:8c:f4:9b:e9:84:9f:
         1f:3a:f0:b5:36:19:cb:f5:52:97:1e:12:67:d7:4d:c4:45:7a:
         4a:70:ab:ad:8f:48:57:28:5e:8b:dd:c3:5b:16:50:04:e0:4c:
         d2:46:14:37:aa:ca:34:00:c7:59:da:ab:7d:88:be:a2:1a:88:
         f6:62:f4:6d:2f:2a:c2:7f:40:d8:ab:27:d8:cc:19:c2:8a:e4:
         16:bd:70:ce:e6:c6:f7:26:a7:57:b0:8a:d9:bf:38:80:ff:89:
         ca:77:0e:33:72:9f:65:8f:24:e4:38:46:16:f2:1a:af:ed:69:
         e7:96:7c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:51:45 2025 by rpki-client