Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/71D9378B416332BCF52B27861247E3C062298D7C.cer
File:                     71D9378B416332BCF52B27861247E3C062298D7C.cer (raw, json)
Hash identifier:          AnXwYS/c3dhbKk6fyfmucsMjVINZ2xl7FKFkjxOA4Fs=
Subject key identifier:   71:D9:37:8B:41:63:32:BC:F5:2B:27:86:12:47:E3:C0:62:29:8D:7C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7DD0391CA9B781D2C5913F72A717B96B26CD9255
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/71D9378B416332BCF52B27861247E3C062298D7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Feb 2023 06:35:14 +0000
Certificate not after:    Tue 27 Feb 2024 06:40:14 +0000
Subordinate resources:    AS: 268939
                          IP: 45.176.24.0/22
                          IP: 2804:5cec::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d0:39:1c:a9:b7:81:d2:c5:91:3f:72:a7:17:b9:6b:26:cd:92:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 06:35:14 2023 GMT
            Not After : Feb 27 06:40:14 2024 GMT
        Subject: CN=71D9378B416332BCF52B27861247E3C062298D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:46:1f:10:11:64:88:7f:c7:49:06:c5:3b:
                    c5:e6:ee:ea:af:6b:2a:16:70:69:5c:f0:a0:9d:c5:
                    ab:af:7f:98:6a:5e:16:4c:de:8e:3f:e3:78:bf:24:
                    e6:fe:7b:93:12:70:31:7c:d8:96:c8:e8:9d:9e:20:
                    cc:f4:27:00:11:66:d4:26:10:52:5b:7c:50:ed:c4:
                    d1:8e:26:73:8c:29:f6:f0:1d:e7:0f:2d:5e:64:bf:
                    00:df:1e:c3:52:2b:ce:0c:2e:0e:2a:71:5e:cc:db:
                    41:e5:4e:73:fe:5f:39:b8:3f:a1:70:c6:76:17:9b:
                    e4:42:56:67:1a:98:47:80:f0:e1:00:e9:d4:cc:a3:
                    79:fe:86:9a:23:5d:18:1b:c2:08:5b:b3:74:ae:32:
                    9b:30:cd:d1:e9:89:c1:31:8d:d7:be:4a:27:12:ab:
                    b1:a5:ae:f1:00:0b:00:89:7a:e1:b6:1b:0a:e2:5b:
                    27:ec:4b:88:51:e1:af:a2:03:ac:62:39:1b:bf:70:
                    f0:0c:54:be:5e:d3:69:01:6c:89:76:10:55:eb:ea:
                    4c:92:1b:cb:1a:ce:49:71:f4:a1:f2:f4:cd:f1:3a:
                    df:2e:df:5b:d1:e1:3a:89:5f:dd:10:5e:4f:65:55:
                    1b:73:60:2d:e1:ba:6e:a8:6d:02:19:2b:41:4a:b8:
                    44:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:D9:37:8B:41:63:32:BC:F5:2B:27:86:12:47:E3:C0:62:29:8D:7C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/71D9378B416332BCF52B27861247E3C062298D7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.24.0/22
                IPv6:
                  2804:5cec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268939

    Signature Algorithm: sha256WithRSAEncryption
         62:99:20:ce:02:4c:e2:74:fe:be:83:d0:c4:a5:76:1a:88:1c:
         b6:c1:c5:6a:cd:42:fc:02:e0:f5:93:3a:17:18:a4:b2:a6:03:
         cc:4f:ff:bd:cd:f0:a6:04:3c:5f:6b:c6:59:e0:e4:a8:aa:3a:
         62:f3:78:26:d8:d3:8f:9b:13:bc:1b:30:c5:35:82:41:f0:47:
         78:f3:4c:8e:83:b2:8e:e7:89:39:f8:86:a3:d2:9b:22:dc:e7:
         95:5b:fb:e4:a3:dc:40:87:bc:38:16:eb:d9:aa:2f:14:12:80:
         88:4a:40:68:f2:3a:84:94:bd:7b:c1:7a:16:9d:f5:59:e5:b9:
         b3:3f:bb:50:d6:f3:ad:ae:f0:f6:50:2f:36:73:85:9f:74:58:
         de:27:a3:d6:cc:97:af:b5:36:be:e4:42:01:a9:e0:95:70:58:
         e4:e4:dd:e6:e9:c7:ab:90:a1:f0:09:3d:84:42:94:3d:2e:ca:
         58:52:83:cb:30:02:82:4d:5c:84:e4:03:06:8e:d3:95:11:0a:
         3e:cd:39:66:b8:a5:1b:fb:c0:c1:78:9f:34:48:d8:a1:5d:a7:
         1c:98:c4:bc:8e:0e:96:c7:20:e4:d4:f1:ad:1d:df:25:2f:d8:
         65:11:51:bf:e1:23:cf:7b:93:6d:d5:80:22:fd:23:12:e4:20:
         12:16:6c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:21:41 2025 by rpki-client