Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/04004212A99696A4F283C73FE7EC609301933701.cer
File:                     04004212A99696A4F283C73FE7EC609301933701.cer (raw, json)
Hash identifier:          kF1dkv7ZKFWGMSUmU/LBwlUX5sEyBApTCSshqJIiI/w=
Subject key identifier:   04:00:42:12:A9:96:96:A4:F2:83:C7:3F:E7:EC:60:93:01:93:37:01
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B6D0633930CB59A7B70EC59E0576F66B46E5756
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/04004212A99696A4F283C73FE7EC609301933701.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Mar 2024 16:29:16 +0000
Certificate not after:    Fri 14 Mar 2025 16:34:16 +0000
Subordinate resources:    AS: 268674
                          IP: 45.165.96.0/22
                          IP: 2804:54dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6d:06:33:93:0c:b5:9a:7b:70:ec:59:e0:57:6f:66:b4:6e:57:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 15 16:29:16 2024 GMT
            Not After : Mar 14 16:34:16 2025 GMT
        Subject: CN=04004212A99696A4F283C73FE7EC609301933701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:08:2d:a2:dc:92:4b:4f:09:00:36:90:b6:
                    8e:d4:cb:5c:8c:85:b6:c3:33:06:3b:9b:37:fc:9d:
                    cd:c7:f9:26:83:be:45:5b:f3:23:3a:fe:0c:95:c9:
                    7e:4e:02:05:23:46:bd:db:d5:52:64:be:40:51:71:
                    d0:6f:66:6b:6a:4f:ed:8d:54:7f:c9:89:02:e8:b4:
                    e0:12:35:1b:3f:23:e1:96:c8:b7:1b:46:85:49:9e:
                    b4:e4:a1:61:ee:83:4c:c9:c9:06:a4:09:57:0e:50:
                    c7:7e:e0:b0:d6:71:69:bf:2e:d2:3b:1e:80:bc:c5:
                    df:ae:ad:f3:89:41:4c:d6:a0:4d:04:a3:77:35:ab:
                    cb:c5:02:bc:06:f8:7c:49:97:cf:18:13:f5:f5:83:
                    42:d4:a1:95:15:9e:5c:71:45:51:f6:5d:da:30:4a:
                    f2:37:be:ed:df:60:60:be:68:85:72:c9:28:ff:a2:
                    2d:00:9a:cb:a4:6c:fb:98:b2:d6:84:f2:48:f3:de:
                    2a:70:1d:7a:db:4f:58:d4:79:81:e5:ee:2f:04:39:
                    d6:6f:77:ca:95:9a:dd:39:26:82:9b:e7:6e:37:1c:
                    3b:f1:2d:70:af:61:0c:67:c8:b4:4f:4d:fa:37:64:
                    0b:a3:5b:b4:a9:f9:d8:a5:46:61:f7:47:e2:7f:ab:
                    62:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:00:42:12:A9:96:96:A4:F2:83:C7:3F:E7:EC:60:93:01:93:37:01
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/04004212A99696A4F283C73FE7EC609301933701.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.96.0/22
                IPv6:
                  2804:54dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268674

    Signature Algorithm: sha256WithRSAEncryption
         1e:23:ed:48:55:2b:8f:f1:37:0c:54:e0:94:dd:e5:13:f0:47:
         8f:79:82:12:4c:26:f9:3a:c4:37:9f:b2:1c:8c:2a:0f:d5:6c:
         d8:98:5d:c8:9c:00:23:bc:d0:1b:29:52:81:14:cc:21:ea:c8:
         72:17:07:12:90:28:99:81:cf:c6:da:d1:b7:20:c5:44:c6:58:
         db:29:5a:8a:c9:ea:ff:2c:df:ef:8e:11:7b:b0:37:8b:0b:0c:
         14:d7:5c:fb:cc:c7:66:62:d4:8b:60:00:81:3b:54:d5:1c:64:
         ae:a9:8b:6c:63:67:b4:b6:f0:c1:89:d4:91:05:e4:c7:1e:2c:
         5f:a7:74:54:8e:d9:6f:21:bd:75:15:d2:de:0a:c8:74:10:a6:
         c5:fb:19:4d:21:dd:3e:50:42:27:c4:84:77:1a:c9:d6:7b:35:
         ed:14:29:08:35:e7:75:83:36:2a:13:5f:60:f3:e3:08:a6:54:
         53:59:c0:04:94:32:d7:cb:b3:5a:e2:8b:10:83:ba:37:4f:b8:
         96:af:ac:17:8d:da:02:54:19:7d:61:69:98:e9:6a:42:2e:82:
         34:b7:b8:33:cf:14:31:35:e3:fd:15:dc:87:43:ef:f3:71:ee:
         79:4f:40:3f:6e:40:0a:16:fb:b4:e0:20:d8:2b:7e:73:d9:e0:
         b2:9d:0c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----