Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/711709BC181DF6689D366E1B328D3907419DF9AA.cer
File:                     711709BC181DF6689D366E1B328D3907419DF9AA.cer (raw, json)
Hash identifier:          OGGw8jGAEI5Mc+noTlszis8Vl4xsJr8VcYiDxmJhTVc=
Subject key identifier:   71:17:09:BC:18:1D:F6:68:9D:36:6E:1B:32:8D:39:07:41:9D:F9:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1845F17B629F65BE90788DBF01E80664DE19F65C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/711709BC181DF6689D366E1B328D3907419DF9AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 16:10:53 +0000
Certificate not after:    Fri 07 Mar 2025 16:15:53 +0000
Subordinate resources:    AS: 268138
                          IP: 45.168.64.0/22
                          IP: 2804:5898::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:45:f1:7b:62:9f:65:be:90:78:8d:bf:01:e8:06:64:de:19:f6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 16:10:53 2024 GMT
            Not After : Mar  7 16:15:53 2025 GMT
        Subject: CN=711709BC181DF6689D366E1B328D3907419DF9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:d7:da:6d:ab:e2:cd:41:6f:ff:38:71:58:
                    8c:3f:70:7b:f9:d4:be:60:c4:a3:af:58:4e:b8:37:
                    6a:db:2f:cd:0d:70:b5:44:91:c9:2f:0b:1f:13:20:
                    62:e6:d2:0d:73:11:37:1a:b3:bf:f6:a5:6e:de:11:
                    92:9a:f7:bb:c0:f1:b8:19:fe:9c:8a:16:7d:13:6e:
                    24:c4:3f:7f:e9:67:5e:c0:c3:37:cc:ce:e5:b4:c8:
                    56:6e:e1:a3:68:e1:e8:38:ab:6b:1c:22:02:4d:57:
                    a9:c1:7d:65:6c:09:fa:cf:13:76:87:54:ff:55:f2:
                    5c:e3:a6:9a:f1:fe:27:57:ea:bc:07:21:67:01:fb:
                    cd:5a:a9:4a:d9:a1:35:1e:c7:af:72:0d:5e:2d:2c:
                    1e:91:8a:45:ed:94:5a:86:fd:fd:57:55:a1:47:5a:
                    6f:02:69:7d:a2:91:cc:e1:95:ae:95:8d:0d:7d:d3:
                    f6:b0:07:17:5f:90:11:18:f8:e1:d1:40:1b:06:dc:
                    66:f4:db:33:2b:02:b5:2c:54:42:95:93:c2:54:da:
                    88:57:ab:94:f4:7f:ce:be:07:7c:1d:61:84:d8:ea:
                    9b:de:49:c0:64:e7:2e:1e:08:60:d8:db:1e:bb:6f:
                    ff:07:06:d2:3f:f7:6e:27:5f:b8:d8:34:0f:6c:1d:
                    f4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:17:09:BC:18:1D:F6:68:9D:36:6E:1B:32:8D:39:07:41:9D:F9:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/711709BC181DF6689D366E1B328D3907419DF9AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.64.0/22
                IPv6:
                  2804:5898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268138

    Signature Algorithm: sha256WithRSAEncryption
         7d:d0:55:a9:be:a6:1f:73:5e:4f:1c:61:bd:ec:4b:51:e4:6f:
         8c:80:02:42:17:d7:63:52:01:b6:fc:63:cc:37:41:34:1d:38:
         0f:f7:7b:38:0d:0c:d6:aa:df:d3:9d:ce:26:92:e9:3d:f2:bf:
         1d:09:0a:30:c4:cb:b0:95:01:5a:e9:1e:fb:de:e6:63:b1:15:
         15:ee:3d:1a:77:98:36:ad:b9:a1:89:02:44:23:e4:42:a8:07:
         69:aa:a7:cb:ad:dd:46:86:9b:55:32:4b:9e:f6:37:96:fa:12:
         7b:21:82:ff:ad:40:32:e4:58:7e:e6:52:82:dd:64:2e:83:12:
         34:fb:c4:a3:7e:4b:bb:5f:e2:94:86:ac:96:79:63:5c:fd:79:
         a8:90:44:c0:10:45:d3:5e:96:23:24:57:14:b4:b2:11:15:c6:
         66:0b:f7:02:2c:82:f5:e1:6e:38:65:aa:b1:36:0d:31:e7:f0:
         12:88:a8:49:4f:21:08:4b:9e:da:ff:71:29:9c:65:d2:61:5f:
         7a:ec:11:8a:c9:c0:62:13:53:7d:c7:b3:28:2e:a5:f4:7f:63:
         fb:fe:90:a5:11:4a:04:c9:67:0b:87:e8:e5:9c:b1:9e:eb:3e:
         ce:09:49:1d:bd:5d:03:1a:16:a0:4a:da:a4:c7:d6:6b:c0:b2:
         8f:51:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org