Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.cer
File:                     71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.cer (raw, json)
Hash identifier:          sgeSP3GF8J5ktzsnb8fVK+COg4UVpRoQ9u8lNOa6pCc=
Subject key identifier:   71:DF:C4:D7:BC:2A:C3:AC:AC:17:FB:DF:EC:95:C4:46:9E:30:89:92
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       354F9ED23608C889822F654918C6578C98E26A19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Nov 2023 12:15:07 +0000
Certificate not after:    Mon 11 Nov 2024 12:20:07 +0000
Subordinate resources:    AS: 272453
                          IP: 2804:816c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4f:9e:d2:36:08:c8:89:82:2f:65:49:18:c6:57:8c:98:e2:6a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 13 12:15:07 2023 GMT
            Not After : Nov 11 12:20:07 2024 GMT
        Subject: CN=71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d5:e5:00:60:b6:e2:56:d1:d3:de:9e:b3:fe:
                    3a:23:3d:ca:4c:fb:9e:bc:6f:4e:e4:6a:ac:8e:5e:
                    0a:37:51:28:b2:13:76:73:a1:f3:28:3f:22:cb:0c:
                    6b:3d:1b:a5:a6:a6:6a:f5:79:da:34:29:a2:3b:3d:
                    05:fe:8c:d1:c0:05:e8:69:c6:37:0b:b3:79:bb:38:
                    18:6c:e8:6f:f8:16:f2:78:e0:dc:18:93:46:10:95:
                    c6:0b:64:d6:66:8e:56:e2:76:d8:2d:f8:09:1d:e1:
                    37:ec:b4:aa:eb:21:ee:77:bb:80:85:a5:ef:45:44:
                    72:86:e9:27:87:14:72:97:df:07:9c:dd:7e:c0:d0:
                    45:db:5b:fd:08:fd:21:e1:1f:19:1a:e5:07:64:83:
                    8f:e9:76:ab:a5:e1:09:71:6b:27:d0:83:be:aa:6f:
                    11:25:6c:8d:84:12:98:d8:28:4c:82:94:01:2f:f8:
                    0e:22:81:85:b0:1a:a9:5c:81:a5:c4:51:6c:22:11:
                    10:05:b6:5c:20:2e:b6:a2:d5:67:c7:0a:1d:40:d8:
                    0f:d0:2a:1d:5c:be:1f:53:9c:b2:e6:52:98:8c:ae:
                    c3:3d:26:02:20:f1:ad:a6:46:d0:b1:35:b5:e6:cc:
                    30:75:38:03:5f:b4:07:de:a4:41:de:04:88:68:5e:
                    3b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:DF:C4:D7:BC:2A:C3:AC:AC:17:FB:DF:EC:95:C4:46:9E:30:89:92
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:816c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272453

    Signature Algorithm: sha256WithRSAEncryption
         9a:cc:0e:cb:52:f5:a1:f6:d3:05:1e:b8:fc:b8:1d:ea:6b:6b:
         18:36:90:16:70:fd:ed:16:e9:85:3c:c6:c8:20:d9:89:f3:b0:
         ea:b8:d7:b9:30:de:d7:f4:11:16:89:3a:9f:39:67:7d:55:6a:
         ad:e8:db:06:1a:20:e1:05:4e:45:77:92:ef:cf:03:a5:0c:c0:
         fb:21:d3:10:68:b9:2b:52:4f:1b:18:95:4c:25:19:ed:c4:03:
         2e:95:00:e3:83:f5:b8:17:32:c5:a2:d7:d2:d5:41:d7:5d:86:
         43:4e:1e:f2:a1:1c:45:27:47:5a:86:26:cb:3f:59:2c:6c:9b:
         39:2e:45:52:42:fb:99:2e:1c:59:59:12:aa:dc:90:c6:bf:f3:
         46:2c:06:3f:99:de:0e:13:c1:c2:11:85:29:d2:11:da:2e:a7:
         75:93:bc:d1:8e:0b:84:65:a1:db:f7:3e:ba:4e:93:b9:da:17:
         73:f0:d2:01:f9:97:c7:37:e6:76:4c:85:ab:a9:b3:fe:c0:0e:
         a1:22:3e:4e:e6:b2:ef:ba:7e:60:d0:fa:f3:d4:67:90:b7:c6:
         fa:e8:86:5d:3c:c1:c4:3d:1a:57:1c:12:36:89:8f:bf:cc:ac:
         c4:56:9e:44:56:f0:c2:54:28:03:f1:ed:8f:e7:e1:60:f6:c5:
         b4:92:8c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org