Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/710D9DF0B46E0F4B973B281ABF19D2698C18B71A.cer
File:                     710D9DF0B46E0F4B973B281ABF19D2698C18B71A.cer (raw, json)
Hash identifier:          VXUP8smR8VnBh/DK8Q1KwASeU9rjIn6N8CZ6TuyKlgw=
Subject key identifier:   71:0D:9D:F0:B4:6E:0F:4B:97:3B:28:1A:BF:19:D2:69:8C:18:B7:1A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DE6BB020D827020C37F1F80E08147148BC141D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BUr6xBYiH2BS1LRQ8Sdaquk2LdhmAg8kBGqsQXEx2euK/0/710D9DF0B46E0F4B973B281ABF19D2698C18B71A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BUr6xBYiH2BS1LRQ8Sdaquk2LdhmAg8kBGqsQXEx2euK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 16:58:11 +0000
Certificate not after:    Mon 02 Sep 2024 17:03:11 +0000
Subordinate resources:    AS: 271207
                          IP: 179.42.136.0/22
                          IP: 2804:77e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e6:bb:02:0d:82:70:20:c3:7f:1f:80:e0:81:47:14:8b:c1:41:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  4 16:58:11 2023 GMT
            Not After : Sep  2 17:03:11 2024 GMT
        Subject: CN=710D9DF0B46E0F4B973B281ABF19D2698C18B71A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:45:07:a1:74:6e:6f:be:6c:60:b0:29:a4:
                    29:be:d3:48:c5:27:66:7e:b2:9c:92:56:7d:28:e9:
                    22:89:14:85:55:b3:2c:dd:14:15:bd:f4:9b:d8:f9:
                    e2:f9:3c:4f:a8:d0:96:c5:d8:cf:1e:42:2b:9e:eb:
                    a6:e6:84:c8:5f:91:7c:d9:01:9e:fe:b4:ed:58:9d:
                    23:1a:6c:44:d4:38:45:9e:aa:57:07:81:37:d9:59:
                    30:90:1f:d8:d5:ca:6b:c3:93:ed:8f:83:7e:a4:4d:
                    04:e1:3e:2c:3a:2e:a9:31:7f:ff:55:9c:20:64:74:
                    ed:83:53:80:91:ac:d5:c2:d3:18:99:b5:28:32:50:
                    c2:88:17:90:a8:c7:76:a6:af:dd:8d:63:bf:fc:4e:
                    6f:42:22:be:ca:a3:0a:8b:dd:2e:38:1d:af:5a:35:
                    51:c5:23:72:6f:3b:39:9b:1f:44:46:a5:a6:8e:52:
                    63:32:ab:fa:9b:39:97:37:1e:72:a1:18:9f:d2:d6:
                    a6:8f:2d:f5:1c:33:3c:5f:ab:6a:3a:c6:a8:0b:91:
                    a0:d7:c2:82:a7:dc:48:64:79:0b:85:0b:74:74:68:
                    48:b8:06:a2:d3:37:83:42:41:da:70:ba:8b:de:a7:
                    8b:45:0c:c8:fb:bd:f5:62:ce:f4:f2:c0:50:cd:65:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:0D:9D:F0:B4:6E:0F:4B:97:3B:28:1A:BF:19:D2:69:8C:18:B7:1A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BUr6xBYiH2BS1LRQ8Sdaquk2LdhmAg8kBGqsQXEx2euK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BUr6xBYiH2BS1LRQ8Sdaquk2LdhmAg8kBGqsQXEx2euK/0/710D9DF0B46E0F4B973B281ABF19D2698C18B71A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.136.0/22
                IPv6:
                  2804:77e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271207

    Signature Algorithm: sha256WithRSAEncryption
         31:0f:fd:b4:a9:15:f7:8e:8a:92:17:77:5e:c9:90:6e:1e:99:
         3c:37:fc:a9:38:76:52:cc:da:55:69:b3:da:1c:a8:c3:6f:ac:
         3a:89:bf:91:0d:17:c3:ff:23:c7:98:27:e0:55:e3:31:58:cd:
         d2:88:3d:ac:2b:85:ef:c6:7c:88:a0:9b:ea:bf:58:d2:33:3b:
         5c:0e:a9:84:a2:ec:17:cd:b8:28:9e:d7:65:b7:fa:8e:64:a2:
         ca:1c:d1:69:13:70:09:e0:b2:3b:79:89:0c:20:f5:45:0f:db:
         c8:67:d1:dd:6d:52:07:95:b8:74:90:09:03:b6:5c:ab:cd:b8:
         ab:9f:af:d3:a1:66:82:4b:db:6b:95:c6:51:52:e3:73:9d:f7:
         e7:6e:f6:c3:1b:56:dc:f2:87:cb:ed:d4:ce:1b:a3:f9:fc:81:
         5a:61:86:f0:f8:aa:15:14:9f:5a:9f:cc:7b:e7:92:fd:ec:da:
         27:41:27:bd:7e:04:2f:e0:72:c7:38:0b:f6:06:09:de:01:fa:
         7d:9c:5f:8d:3c:f6:cd:72:52:72:26:1a:4a:eb:6d:22:8b:5b:
         7e:7b:37:0a:91:7e:b7:7a:a7:5a:6b:94:f5:88:42:72:7e:be:
         9b:be:57:4a:f6:cb:38:ca:ac:11:3b:e6:83:ab:8e:fb:16:80:
         da:36:76:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org