Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8.cer
File:                     D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8.cer (raw, json)
Hash identifier:          SnVG8DwQ0FiiJdyEBudEUOQXJoenwSjju0d5Zttzia8=
Subject key identifier:   D7:18:59:E3:E9:A2:DD:D4:A6:FF:C8:04:3C:1A:8F:E3:AE:1E:07:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B01813EC7414917BF1069AD6FA028B1E40188C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2024 18:43:55 +0000
Certificate not after:    Fri 24 Jan 2025 18:48:55 +0000
Subordinate resources:    AS: 269474
                          IP: 45.187.172.0/22
                          IP: 2804:6530::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:01:81:3e:c7:41:49:17:bf:10:69:ad:6f:a0:28:b1:e4:01:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 26 18:43:55 2024 GMT
            Not After : Jan 24 18:48:55 2025 GMT
        Subject: CN=D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d0:ab:d2:18:e3:92:1a:23:81:a9:ac:30:38:
                    f4:66:6a:21:19:36:30:73:79:23:a9:77:2c:6c:29:
                    04:b1:a1:5e:19:f4:13:56:16:da:d2:75:70:81:1a:
                    43:ff:03:e0:88:fc:6b:ae:d4:cc:0e:c4:2a:44:ae:
                    14:c7:55:cf:4c:dd:24:f2:4d:40:1d:e2:d5:43:c3:
                    2a:bd:61:a3:53:12:28:4b:26:b4:95:77:40:a9:d9:
                    77:24:a5:9e:89:12:07:79:60:92:5f:1d:cb:c4:12:
                    be:36:e0:07:d2:3e:fc:71:13:f7:dc:3d:1b:7d:66:
                    cd:e4:0c:8e:69:aa:94:5a:db:aa:13:26:2e:05:6e:
                    8e:77:25:e1:7a:b9:8b:8b:0e:42:f7:d8:cc:89:b1:
                    b6:04:a0:6e:90:1f:da:ce:5f:70:9a:da:89:f6:e2:
                    0d:86:64:ff:10:8b:c8:7a:a0:18:1f:9e:ca:d6:65:
                    93:23:de:2f:69:18:fb:ee:88:8b:51:16:99:6b:e8:
                    ce:5e:84:6e:a8:09:80:b2:e6:38:37:17:a7:84:23:
                    95:e6:7f:e8:e8:b0:dc:11:5d:37:d2:e6:3a:be:61:
                    75:59:a3:6b:c7:b6:c7:98:f2:5c:a2:7a:dc:1b:98:
                    73:4a:e1:9a:4d:c6:75:46:b1:70:5c:58:cb:e9:1d:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:18:59:E3:E9:A2:DD:D4:A6:FF:C8:04:3C:1A:8F:E3:AE:1E:07:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/D71859E3E9A2DDD4A6FFC8043C1A8FE3AE1E07E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.172.0/22
                IPv6:
                  2804:6530::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269474

    Signature Algorithm: sha256WithRSAEncryption
         6b:0f:d4:2d:35:ec:f9:cf:7e:03:d4:df:f4:8f:55:45:ef:22:
         ee:4e:dc:0c:ca:5e:a1:db:23:2b:41:d2:79:c8:d7:37:d4:2e:
         c8:18:ad:2e:21:13:ab:32:db:b9:1d:b7:0f:87:61:d2:15:f5:
         8c:3e:d0:cb:7d:fd:77:39:e1:1a:cb:03:b4:8d:a7:6a:2f:71:
         a6:d2:c0:22:60:06:d4:4c:92:bf:88:08:7c:0a:4d:bd:d7:54:
         3e:da:fd:0d:52:20:38:f0:70:41:d9:8d:15:b6:52:08:f3:60:
         93:86:8a:bf:f6:27:ee:9c:cb:a9:32:99:9e:5d:4d:07:81:1e:
         b1:1b:5e:51:a1:5e:50:d5:8d:0c:41:6c:b7:eb:1a:c2:ef:b1:
         62:24:28:06:1e:31:e6:69:69:66:7d:45:bb:fa:d0:2f:c1:65:
         6c:32:16:4f:fa:32:23:b1:c1:6c:a7:d2:f4:1f:9e:b4:80:ff:
         9b:2c:65:49:b2:15:20:73:e6:75:85:d2:1e:0f:ab:80:9c:5e:
         42:22:02:c3:ae:7c:81:13:e7:60:d5:27:d1:e1:27:01:99:c5:
         73:46:43:ec:49:c0:14:ff:a9:60:81:92:26:65:e8:ec:80:2d:
         7c:74:5c:87:4e:d3:4e:cb:93:76:72:f7:2e:66:ce:2e:34:e2:
         02:1e:cb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org