Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/71A400A31C079C3533B10B08162C210937E52A75.cer
File:                     71A400A31C079C3533B10B08162C210937E52A75.cer (raw, json)
Hash identifier:          Eo3P++Nw/R5ZqDeWSUWBtR+0sRdv3GS0bvihI0KMV2E=
Subject key identifier:   71:A4:00:A3:1C:07:9C:35:33:B1:0B:08:16:2C:21:09:37:E5:2A:75
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3FF4A60308E86F62CDE6D88A7529CD8C50C812FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/71A400A31C079C3533B10B08162C210937E52A75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 11:35:17 +0000
Certificate not after:    Wed 19 Mar 2025 11:40:17 +0000
Subordinate resources:    AS: 265398
                          IP: 170.254.144.0/22
                          IP: 2804:3378::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f4:a6:03:08:e8:6f:62:cd:e6:d8:8a:75:29:cd:8c:50:c8:12:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 11:35:17 2024 GMT
            Not After : Mar 19 11:40:17 2025 GMT
        Subject: CN=71A400A31C079C3533B10B08162C210937E52A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:df:49:4b:1b:da:c8:32:a9:c4:fc:22:c4:
                    fd:b0:52:6d:12:92:a5:aa:ea:e4:38:2b:55:69:34:
                    63:5b:f8:dc:e1:8f:af:ec:1e:59:ee:9b:51:ec:fe:
                    89:ff:04:58:47:65:d1:c7:fe:fb:28:29:0e:22:ed:
                    37:9a:64:0f:d7:b7:02:86:24:d0:93:42:da:1e:c9:
                    41:bb:80:3a:ac:9b:f2:49:d7:0b:e2:48:71:99:cc:
                    fd:84:4c:7d:42:9f:d2:ab:e1:b7:03:ed:12:3b:99:
                    f5:e1:73:5b:80:61:8d:04:d6:f4:28:64:22:a0:e4:
                    fa:21:1b:98:2a:f6:b6:96:3c:df:06:30:f5:72:a6:
                    f0:ba:90:3e:c6:58:71:c8:30:9c:e4:e9:ee:05:51:
                    43:53:1e:08:e8:40:0e:0c:c6:f8:8a:da:c1:4f:d9:
                    31:88:17:a4:59:9c:c4:5e:68:bb:70:d5:ff:4d:d4:
                    32:11:42:2a:76:ad:bf:f8:92:86:cc:bd:8d:b0:f8:
                    81:3e:b7:bd:69:d9:40:17:1c:ae:a9:4e:f1:d2:7c:
                    79:2f:ad:d9:cd:aa:4a:16:02:8c:54:dc:85:de:24:
                    f4:60:9b:5c:21:5f:33:fe:31:8c:c7:fb:2d:9b:73:
                    04:06:e9:b0:ae:14:4a:fc:3a:66:d0:a7:95:1d:41:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:A4:00:A3:1C:07:9C:35:33:B1:0B:08:16:2C:21:09:37:E5:2A:75
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/71A400A31C079C3533B10B08162C210937E52A75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.144.0/22
                IPv6:
                  2804:3378::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265398

    Signature Algorithm: sha256WithRSAEncryption
         4d:84:44:48:de:46:e1:de:aa:33:fc:00:74:25:3d:77:de:2d:
         55:eb:23:fc:27:6d:c2:2d:88:83:8f:33:81:56:28:4c:e7:cd:
         1f:56:84:55:94:2f:cf:ff:7b:72:bb:04:5f:27:11:f0:9e:2f:
         8d:3a:03:ed:0f:d9:b1:58:7f:65:91:b9:a5:e8:6a:c7:95:30:
         e0:a7:a0:2b:eb:97:cd:65:4b:48:96:07:5b:dd:a7:2d:02:18:
         8c:75:eb:0b:8e:d2:41:65:48:67:0e:f8:c2:1d:1c:b6:95:eb:
         4d:bf:cd:36:90:a6:be:34:1f:79:be:82:ae:9b:a8:d7:e4:09:
         25:1f:a7:c9:5f:ce:24:89:df:dc:b1:8e:64:50:f0:73:38:ff:
         31:8b:cc:fe:5f:bf:c6:fc:c3:c2:f4:05:74:6b:6b:b3:f4:15:
         df:03:68:9c:df:c1:68:c8:62:e8:ad:85:b2:6c:b7:b6:20:86:
         fe:54:60:7c:7b:34:cd:70:52:de:22:4c:07:d8:60:a7:2e:ad:
         c7:24:e9:56:23:df:61:fa:df:c9:97:ec:b2:52:35:78:51:29:
         35:cf:2f:0f:fe:93:1d:cf:0c:4c:0a:a4:5f:96:fe:95:8e:d3:
         a6:83:b8:66:fe:49:49:c5:02:54:e4:10:53:88:e1:c8:55:37:
         b2:ae:f8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:44:28 2025 by rpki-client