Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FD71D7D2BF29A4B4085F41F6D90CFA2FB3697968.cer
File:                     FD71D7D2BF29A4B4085F41F6D90CFA2FB3697968.cer (raw, json)
Hash identifier:          y+5QNurjrzNJrfKlH5jnl+tSMlFZ4wloN9HLk0+BYiY=
Subject key identifier:   FD:71:D7:D2:BF:29:A4:B4:08:5F:41:F6:D9:0C:FA:2F:B3:69:79:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       543F8D7ADC19899E93ACA2BBED42B1C3C1D6D9A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/FD71D7D2BF29A4B4085F41F6D90CFA2FB3697968.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 07 May 2023 01:02:39 +0000
Certificate not after:    Sun 05 May 2024 01:07:39 +0000
Subordinate resources:    AS: 262661
                          IP: 177.128.216.0/22
                          IP: 179.96.168.0/21
                          IP: 2804:1548::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3f:8d:7a:dc:19:89:9e:93:ac:a2:bb:ed:42:b1:c3:c1:d6:d9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  7 01:02:39 2023 GMT
            Not After : May  5 01:07:39 2024 GMT
        Subject: CN=FD71D7D2BF29A4B4085F41F6D90CFA2FB3697968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:c4:75:bd:ba:38:78:b4:cc:60:87:d6:c4:
                    4b:34:95:a8:b6:7d:f5:9f:9c:b6:31:b7:62:9e:ec:
                    f2:76:27:ed:d0:c5:e4:80:78:4b:b0:2b:d8:a9:e8:
                    4f:07:77:04:c3:4e:c0:da:b1:b7:dd:1f:43:c6:e3:
                    70:b6:f3:12:35:da:61:6d:ca:f6:e6:9e:c2:98:f0:
                    9b:9d:af:e1:b8:d1:96:38:45:dc:fe:a8:dd:4b:5a:
                    f8:fb:c0:e5:46:46:4f:2d:14:59:18:b8:65:e2:e1:
                    ee:28:4e:4a:1b:d2:e8:cd:16:92:cb:09:6d:01:85:
                    a0:ae:90:06:55:a0:1c:7a:fe:e6:89:bc:eb:11:3d:
                    75:c1:9d:25:de:b3:f8:ef:6a:7c:da:8b:0c:3b:1c:
                    7e:17:e4:ca:70:38:a1:e9:69:f1:fe:60:25:68:ab:
                    95:62:b7:dd:eb:64:43:76:e7:7b:64:42:a0:e6:30:
                    4e:68:03:64:f3:cb:63:46:a7:3d:f8:f4:90:b0:8e:
                    d4:40:4e:33:f9:40:cc:25:c1:98:92:8c:50:3a:3e:
                    ca:68:1c:d0:d9:7d:c1:f4:26:5c:56:18:af:0d:98:
                    23:d3:e6:59:19:72:d8:f1:40:7f:0a:91:11:73:f8:
                    d9:bc:b5:bb:bd:aa:67:2a:c7:4d:cf:c0:19:58:16:
                    4e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:71:D7:D2:BF:29:A4:B4:08:5F:41:F6:D9:0C:FA:2F:B3:69:79:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/FD71D7D2BF29A4B4085F41F6D90CFA2FB3697968.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.216.0/22
                  179.96.168.0/21
                IPv6:
                  2804:1548::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262661

    Signature Algorithm: sha256WithRSAEncryption
         87:17:88:1b:cb:d5:a5:a7:bf:f1:7e:8d:ef:bf:a8:fb:d2:54:
         37:d0:15:7a:44:43:64:ce:af:71:08:95:54:5f:61:29:cd:fb:
         61:3d:5a:c3:e9:72:cf:42:c6:f5:f2:bf:f2:c4:57:a5:9c:84:
         db:27:ec:e3:57:d5:50:33:d4:71:a0:b4:57:c1:3a:99:11:f3:
         42:b4:76:75:47:92:2e:27:37:03:aa:3b:70:1e:f3:09:6c:dd:
         65:b2:d4:27:2c:f9:ae:c1:f6:dc:5d:52:7b:57:96:ee:83:58:
         4b:89:08:46:b7:04:2a:ca:55:de:cc:79:b9:c4:1e:6b:2b:b3:
         2e:83:b2:3e:4a:9d:fd:87:08:cc:27:55:2b:c4:30:c8:b6:76:
         e7:b5:02:00:ee:fe:0d:a2:7a:27:9d:37:4a:29:77:06:8c:d9:
         fb:d8:06:52:1c:a1:e4:18:28:9d:0b:a7:80:f0:bb:a4:a0:40:
         b5:ae:91:ff:7d:d6:60:c6:31:5f:74:3b:11:48:2f:01:dd:47:
         44:05:89:57:e8:75:0e:1c:70:6e:0e:3d:20:ad:e9:51:a7:9b:
         d8:7d:89:66:0d:e6:70:b7:25:5a:76:1a:96:02:3d:43:14:55:
         a1:f6:93:e2:9a:9c:17:53:25:48:50:22:9a:65:ee:16:20:04:
         eb:74:f2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:36:02 2025 by rpki-client