Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/71227233A4C9097DDA2442755C381DEA6E3523C2.cer
File:                     71227233A4C9097DDA2442755C381DEA6E3523C2.cer (raw, json)
Hash identifier:          8M2JRSqOG8XiQ+RVdwpjwN0gGm5J3ABV8A0+yUDP/ZQ=
Subject key identifier:   71:22:72:33:A4:C9:09:7D:DA:24:42:75:5C:38:1D:EA:6E:35:23:C2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       74DF05E38908036DCBFC76DEAF080148B42F9FA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/71227233A4C9097DDA2442755C381DEA6E3523C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:32 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:32 +0000
Subordinate resources:    AS: 262315
                          IP: 177.124.24.0/22
                          IP: 2804:7b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:df:05:e3:89:08:03:6d:cb:fc:76:de:af:08:01:48:b4:2f:9f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:32 2024 GMT
            Not After : Mar 31 11:03:32 2025 GMT
        Subject: CN=71227233A4C9097DDA2442755C381DEA6E3523C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:15:0c:33:ff:1a:83:b9:4c:dd:54:36:1f:84:
                    27:12:b0:2f:aa:4f:17:a4:02:9d:7b:28:46:19:da:
                    1e:c1:1f:10:7b:25:20:79:55:9c:a7:bd:1a:0d:b8:
                    99:25:cd:c6:17:6a:a1:43:bf:21:8d:e1:16:a0:4d:
                    32:eb:cf:ef:b6:c5:55:fc:ba:a9:7a:2f:65:e8:71:
                    55:38:29:a3:13:1a:f6:1b:d8:3e:d1:c8:f7:90:c1:
                    48:49:73:54:87:7f:41:5f:a7:b7:f5:54:18:e6:31:
                    ee:b5:41:0b:d1:88:51:af:c3:66:21:5a:ef:83:a8:
                    21:b0:88:8d:8d:06:ff:e2:0b:4d:80:09:a0:e0:a8:
                    4d:86:89:25:72:36:0a:3b:dd:b4:5f:b6:d0:40:0e:
                    97:e1:76:6b:41:7b:2f:94:91:51:91:d1:62:5a:d0:
                    d4:af:34:da:a0:8a:08:2c:30:9a:91:56:57:2a:3f:
                    55:2e:6b:a0:f8:81:2f:6d:ff:c4:3f:28:00:37:86:
                    f8:c5:d5:59:93:8b:04:f2:39:85:54:d4:57:8f:57:
                    d4:dd:fc:c6:18:e6:a7:1d:8e:b3:7e:94:de:1a:62:
                    05:ff:df:9f:5d:39:1c:3b:a1:d1:97:5b:dd:f4:79:
                    99:ae:ae:f2:1f:7b:63:b1:1b:d6:cb:04:81:4e:55:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:22:72:33:A4:C9:09:7D:DA:24:42:75:5C:38:1D:EA:6E:35:23:C2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/71227233A4C9097DDA2442755C381DEA6E3523C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.24.0/22
                IPv6:
                  2804:7b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262315

    Signature Algorithm: sha256WithRSAEncryption
         9a:c6:39:6a:0d:7c:5b:81:4c:32:08:52:f2:39:68:e0:7a:62:
         92:9c:2c:27:85:9d:9b:f8:fd:3a:60:b1:f0:6e:a2:d9:79:5e:
         8b:22:64:69:54:c3:45:f5:d0:45:c6:4c:64:60:ec:1f:67:97:
         b9:b3:ee:36:a3:e2:6c:3c:bd:db:05:83:61:90:c4:7f:84:04:
         c9:44:79:f4:99:61:d5:1e:76:a0:68:76:07:6c:c6:84:92:6d:
         a1:80:e3:7c:d3:c0:bf:79:55:a4:ff:05:65:ae:cc:a2:d9:30:
         3c:9f:55:b8:52:ce:d5:00:d1:7c:7f:e4:2d:88:b6:ec:e5:91:
         7d:5e:df:0c:09:83:6d:2f:23:60:c3:32:fc:6b:00:56:8b:db:
         3a:3e:78:eb:39:aa:29:06:6e:47:8e:90:1a:54:9d:f5:8d:b3:
         80:22:86:a8:06:4d:01:4c:e1:10:4b:81:fe:ad:ca:c4:7e:19:
         b6:df:48:0e:0c:46:5d:19:ad:91:a7:a6:a7:78:46:9c:38:a1:
         6f:5e:41:a2:db:aa:13:29:bc:90:df:2f:93:2c:4a:9a:a6:b4:
         dd:fa:72:e4:e5:1f:23:79:3f:e9:48:62:23:d8:dc:8c:c2:3a:
         af:02:20:fa:ee:8e:85:24:97:67:5b:9a:c8:7b:2d:bc:ab:75:
         7a:24:66:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org