Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/71714DE78F2E192FB3D40B1713BD1211A9F432D3.cer
File:                     71714DE78F2E192FB3D40B1713BD1211A9F432D3.cer (raw, json)
Hash identifier:          YLJjxbE76lpz/br848Rmf1dHo86mIrIOjNBYLoDx5Cw=
Subject key identifier:   71:71:4D:E7:8F:2E:19:2F:B3:D4:0B:17:13:BD:12:11:A9:F4:32:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       33A6067D7C75A575F79B3BEBBED6B4DE9C6F175E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/71714DE78F2E192FB3D40B1713BD1211A9F432D3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 19:42:27 +0000
Certificate not after:    Tue 11 Mar 2025 19:47:27 +0000
Subordinate resources:    AS: 53054
                          IP: 187.73.192.0/19
                          IP: 2804:a3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a6:06:7d:7c:75:a5:75:f7:9b:3b:eb:be:d6:b4:de:9c:6f:17:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 19:42:27 2024 GMT
            Not After : Mar 11 19:47:27 2025 GMT
        Subject: CN=71714DE78F2E192FB3D40B1713BD1211A9F432D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:22:fe:83:05:4a:c8:6d:fa:87:8a:cd:98:
                    3d:db:a8:c8:6f:5a:b4:9c:fa:3c:43:f9:95:e8:d2:
                    bc:4a:0c:c0:0b:8c:b8:7b:1b:7d:33:0a:a7:19:85:
                    6b:c4:e6:48:9d:20:6f:81:d2:2a:09:22:15:78:6f:
                    bf:2d:1a:d5:6a:18:b1:5e:64:d7:f4:e2:7c:bf:f5:
                    11:b4:ff:ce:3b:62:8a:ce:62:1f:00:d9:9f:cb:2c:
                    e2:07:ca:8c:f7:29:6b:f6:6b:9f:3d:62:cb:3d:a5:
                    6d:45:35:37:68:23:95:4e:c5:4c:9f:e1:55:6c:a3:
                    05:39:c3:89:3e:b3:ac:3a:db:6a:e9:e8:d4:42:90:
                    e8:98:fa:26:99:d2:e4:d4:4e:28:73:9f:a3:6a:28:
                    4c:8e:17:55:31:70:2f:85:91:fe:1f:51:f6:76:6e:
                    d0:d2:7b:a7:53:36:61:7a:98:aa:e3:c2:5e:05:26:
                    05:69:f8:bb:bf:0b:48:5d:cb:4b:e6:81:7d:c2:e7:
                    89:f2:23:23:79:31:d1:f5:c0:7d:c0:24:fe:ff:87:
                    79:82:a3:d6:a7:7c:67:23:97:71:00:0d:cf:23:40:
                    4f:d7:a5:79:34:54:b4:8e:ff:c4:ed:d8:18:11:2a:
                    db:11:3e:54:c0:d5:33:ad:ab:d6:de:8d:c2:8e:25:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:71:4D:E7:8F:2E:19:2F:B3:D4:0B:17:13:BD:12:11:A9:F4:32:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/71714DE78F2E192FB3D40B1713BD1211A9F432D3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.192.0/19
                IPv6:
                  2804:a3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53054

    Signature Algorithm: sha256WithRSAEncryption
         4e:d7:57:99:9c:a5:ee:f8:6f:ce:76:e9:73:11:6e:04:86:0d:
         21:d9:bb:4e:6c:14:63:d5:bd:03:40:5f:52:ae:31:57:05:84:
         e8:aa:19:d1:5f:1e:75:90:f8:d2:c9:93:cb:97:e6:22:b2:8c:
         de:97:21:5a:a9:92:ad:40:8a:4e:7b:6b:14:d5:41:9f:b6:57:
         a6:ba:5d:0a:a5:ff:73:f7:92:cf:33:65:bc:53:fa:21:98:bf:
         d8:05:a2:61:f5:f2:5e:b4:bf:f6:e1:3b:24:0b:c3:00:1f:fd:
         7a:02:2b:7f:66:cd:b3:0c:01:72:33:18:2a:e9:10:4e:3e:63:
         24:4d:51:0a:44:3a:fc:7d:94:e3:9e:92:07:30:d7:cd:be:2a:
         cd:93:69:a5:aa:78:87:f1:1f:42:73:2b:3e:4a:15:aa:84:e7:
         d9:57:96:2b:28:13:90:b3:c5:de:ab:d4:2a:7b:64:60:07:36:
         ee:20:4f:4a:cc:1c:6b:fe:1c:2b:c7:8c:fb:bb:65:96:d9:58:
         96:4b:3d:cd:83:d7:db:65:85:6f:16:95:69:85:1b:1f:a4:02:
         34:d4:39:dc:2f:86:e5:bc:87:c9:8e:f2:47:89:fd:a0:d6:ae:
         61:32:b1:fa:f0:70:09:29:34:2a:e9:d9:40:4f:13:d1:52:b9:
         2a:63:aa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org