Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0.cer
File:                     71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0.cer (raw, json)
Hash identifier:          EDQuTxyUH8jXvcNRjD6nEN6HTZHuwGwYT9hRls+zW4Q=
Subject key identifier:   71:AF:85:1F:A1:AB:7F:3F:8F:F5:9D:7E:8C:21:2F:57:81:89:CF:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6294DE759B2A48B50993575DEA0755D81531B70A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 19:37:27 +0000
Certificate not after:    Wed 23 Oct 2024 19:42:27 +0000
Subordinate resources:    AS: 53132
                          IP: 177.125.144.0/21
                          IP: 179.107.112.0/20
                          IP: 186.192.32.0/20
                          IP: 2804:1668::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:94:de:75:9b:2a:48:b5:09:93:57:5d:ea:07:55:d8:15:31:b7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 19:37:27 2023 GMT
            Not After : Oct 23 19:42:27 2024 GMT
        Subject: CN=71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0c:b7:3f:f9:e5:73:88:01:cf:40:a1:0f:b7:
                    33:81:1c:81:4f:be:3e:19:ea:c1:38:be:6e:81:5a:
                    9a:3c:db:84:2f:7b:d2:b5:a2:61:b0:e8:c4:62:77:
                    73:ec:5a:52:00:83:93:87:63:dd:7b:48:31:7d:37:
                    45:3e:85:2e:ec:0b:74:87:44:52:a7:64:a1:96:c3:
                    19:2e:e5:ea:3d:15:7d:50:f4:16:01:cd:92:d1:a1:
                    5d:36:e3:11:af:91:45:48:3b:e3:1d:ea:5d:fd:33:
                    67:89:54:b9:52:e5:7f:d6:b4:f3:cd:64:ec:ad:70:
                    70:84:ca:f6:69:fe:87:e4:58:3c:f7:f9:74:67:2f:
                    e9:c4:94:7f:04:64:b8:5f:63:6e:b1:e7:9b:41:3d:
                    58:e8:a7:94:4b:24:61:e4:1e:68:22:bc:30:cc:9e:
                    ae:88:ab:cf:9d:a4:9d:d2:ef:7c:f0:62:2d:a6:4a:
                    d5:d4:a9:39:20:04:0b:bd:0f:99:1a:b2:df:3b:2d:
                    0e:a1:66:6d:c2:17:6b:c8:e8:0a:92:fb:10:bb:17:
                    e4:32:d5:54:bb:e8:8e:fc:f5:5a:91:bb:23:03:d5:
                    00:8b:63:d5:62:e8:11:f3:08:d3:03:9d:1e:11:c6:
                    f5:4d:7c:73:be:82:9c:47:12:5d:a1:5a:e6:88:02:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:AF:85:1F:A1:AB:7F:3F:8F:F5:9D:7E:8C:21:2F:57:81:89:CF:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.144.0/21
                  179.107.112.0/20
                  186.192.32.0/20
                IPv6:
                  2804:1668::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53132

    Signature Algorithm: sha256WithRSAEncryption
         08:e4:57:3b:82:06:48:bc:0c:61:1c:62:43:f5:bc:77:d5:2e:
         5b:8a:93:46:17:e1:a6:f2:55:a6:60:84:11:08:b4:89:aa:cb:
         8b:6f:99:f8:7d:a1:db:74:20:a7:bb:05:1c:02:5e:e4:9e:34:
         3a:20:e2:58:06:24:d6:17:f4:4f:bb:e4:11:fe:6f:d6:07:cf:
         b5:24:5a:e6:2b:38:1b:ee:2a:ed:6a:21:e3:d9:49:09:4c:30:
         9e:9a:0e:c4:17:cd:e1:0f:98:18:14:03:19:df:02:ca:dd:01:
         26:a4:68:f0:5f:e4:d2:a7:97:29:2a:61:48:c1:f9:8b:72:c6:
         66:96:41:16:64:b4:73:c4:80:4e:bb:85:27:be:00:69:40:c7:
         23:e4:f5:92:02:f8:ec:cb:be:59:66:8e:e8:66:a0:76:07:8f:
         04:a6:a0:90:fd:ea:12:2f:b4:38:3e:9a:63:1b:94:8f:8a:b1:
         d9:a3:ab:ca:4b:af:e9:bb:b5:0c:94:79:65:df:68:d9:15:14:
         af:2c:b8:ac:59:9e:56:24:ea:1a:77:9d:0e:85:d5:94:5b:0a:
         93:a3:7a:c3:cc:15:be:4c:f9:1f:c0:3e:87:c0:d2:9b:ea:5f:
         cb:a0:c0:33:41:f8:ac:36:9b:5c:0b:4a:bd:02:ca:04:c7:f5:
         3c:a0:a0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org