Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/71E4B1B2D8E62598325258ABC27E0CC832471B96.cer
File:                     71E4B1B2D8E62598325258ABC27E0CC832471B96.cer (raw, json)
Hash identifier:          V+EsbC3TM/LKqccBRIHMXY3qcLykcjJFPFMmYfqLAHI=
Subject key identifier:   71:E4:B1:B2:D8:E6:25:98:32:52:58:AB:C2:7E:0C:C8:32:47:1B:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       70BFC9BA639809E2F39E1C2E2867E138A9B8F1A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/71E4B1B2D8E62598325258ABC27E0CC832471B96.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Oct 2021 12:47:00 +0000
Certificate not after:    Tue 18 Oct 2022 12:52:00 +0000
Subordinate resources:    AS: 265437
                          IP: 168.195.176.0/22
                          IP: 2804:3420::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bf:c9:ba:63:98:09:e2:f3:9e:1c:2e:28:67:e1:38:a9:b8:f1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 19 12:47:00 2021 GMT
            Not After : Oct 18 12:52:00 2022 GMT
        Subject: CN=71E4B1B2D8E62598325258ABC27E0CC832471B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5a:03:ee:b5:85:f2:23:a3:2d:e7:47:0e:31:
                    35:b2:83:02:7e:f7:11:65:43:ea:29:8c:62:b5:26:
                    0c:97:a6:8d:1e:3a:f9:38:61:66:09:5f:e6:78:a3:
                    60:29:e2:7f:f7:b6:28:c0:4c:0c:55:5d:c2:bf:1f:
                    a0:0d:7b:da:49:18:0d:b5:a5:11:bf:19:af:77:69:
                    eb:26:6b:4e:96:48:c3:c2:5f:e8:fd:07:51:56:f9:
                    8f:9c:a5:45:8e:d7:21:b7:45:9d:9f:bd:6d:ed:0f:
                    ee:48:20:cc:7a:f8:2b:04:bb:4d:75:d3:9d:a1:ed:
                    6f:13:3e:ab:f9:12:38:94:8b:ca:ec:45:b1:f6:36:
                    56:33:43:f1:c8:be:59:c6:ad:76:ab:dd:55:5a:25:
                    25:62:ab:14:0f:cc:f1:e3:89:37:96:84:fb:84:b0:
                    49:fb:09:65:26:40:0e:24:07:62:3d:ff:af:28:26:
                    2d:40:4a:6f:a3:11:9e:f3:b6:24:05:33:9d:70:59:
                    de:c6:c3:4f:5a:7f:b3:ce:08:e2:cb:62:0a:fd:7e:
                    ea:1c:20:a2:7b:3c:ab:fe:8a:6f:7e:40:5c:03:5e:
                    f1:41:94:82:2a:2b:42:67:ec:d3:64:81:0f:6f:8c:
                    c8:2e:a0:28:92:b5:93:44:b4:88:50:82:e9:bc:35:
                    31:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:E4:B1:B2:D8:E6:25:98:32:52:58:AB:C2:7E:0C:C8:32:47:1B:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/71E4B1B2D8E62598325258ABC27E0CC832471B96.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.176.0/22
                IPv6:
                  2804:3420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265437

    Signature Algorithm: sha256WithRSAEncryption
         0d:33:ef:4e:e4:8f:5b:25:87:dd:a7:5c:65:8b:72:9b:b1:51:
         52:de:7c:80:2c:fb:4e:1a:4a:af:0e:38:85:18:04:99:68:0e:
         8f:02:dc:bd:a6:70:60:91:7f:57:f8:b7:de:70:3f:8a:fe:e7:
         02:a3:c3:4d:60:0b:10:ab:19:31:04:c2:fd:3f:62:be:c5:d9:
         84:b5:e8:a9:6d:da:b6:de:1b:83:eb:56:1d:1d:12:2c:7f:19:
         98:ad:ec:11:89:dc:52:4b:a9:19:2d:7a:78:3a:e8:87:13:c3:
         70:1d:22:1f:28:57:de:33:11:21:4a:08:b5:c4:5c:52:0e:5d:
         d7:12:e9:5d:db:81:54:70:cc:36:f8:ff:f7:9a:15:ef:6c:f2:
         44:8f:f3:7d:2f:12:a4:71:36:d7:95:e0:8e:23:0b:41:4a:e0:
         f1:ed:e8:eb:ee:99:e5:86:33:ae:35:2b:c7:f2:d0:fe:5b:84:
         3e:a2:f1:fa:36:da:5f:c1:41:7f:29:58:4c:24:43:ba:d6:81:
         ed:b9:5e:b1:1b:cd:3c:ff:27:e9:01:92:d3:8c:ab:0e:d5:da:
         00:76:e6:c9:63:99:c7:84:b3:2a:26:af:c3:bf:8f:32:47:75:
         8d:da:f7:d3:90:2d:27:55:9d:63:53:ee:ca:f2:4d:00:8a:fe:
         47:cc:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:13:35 2025 by rpki-client