Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0549302C88A43D16A7429BDFEB8D9B5036B2ED95.cer
File:                     0549302C88A43D16A7429BDFEB8D9B5036B2ED95.cer (raw, json)
Hash identifier:          g0qU05EjvHs96JcbtvY5YP8bSWBFWVzss+kD8vjOdJA=
Subject key identifier:   05:49:30:2C:88:A4:3D:16:A7:42:9B:DF:EB:8D:9B:50:36:B2:ED:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4AD6EAA873CE899088A245A43434E714000ACD78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0549302C88A43D16A7429BDFEB8D9B5036B2ED95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 16:44:09 +0000
Certificate not after:    Thu 20 Feb 2025 16:49:09 +0000
Subordinate resources:    AS: 264344
                          IP: 138.185.84.0/22
                          IP: 2804:2674::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d6:ea:a8:73:ce:89:90:88:a2:45:a4:34:34:e7:14:00:0a:cd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 16:44:09 2024 GMT
            Not After : Feb 20 16:49:09 2025 GMT
        Subject: CN=0549302C88A43D16A7429BDFEB8D9B5036B2ED95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a9:05:97:fe:c2:3f:3f:92:64:68:0a:c7:7a:
                    ce:83:71:e8:29:a1:6b:b0:0c:bc:9f:a3:09:1c:c3:
                    00:52:26:7b:f8:36:92:c7:36:64:8b:9e:e7:0e:35:
                    fc:f8:67:1a:65:2b:fa:22:cb:b4:1d:1f:af:ce:a5:
                    54:8e:a9:5a:26:d1:f6:ae:1c:10:52:65:cd:99:f9:
                    68:b8:dd:a0:40:10:8a:eb:2f:76:e9:cb:71:f9:f9:
                    00:2e:29:39:fb:7f:48:1a:5f:d7:0f:99:56:9b:bb:
                    7b:b6:ce:35:32:f5:92:df:3b:0c:89:01:b9:5a:17:
                    b3:29:5a:c8:8e:55:eb:66:69:6f:f5:5c:45:7d:f3:
                    ad:92:93:ee:25:0d:29:02:f9:b5:4d:24:4b:ea:a7:
                    f4:4e:d5:c0:13:91:cf:4d:02:d9:44:a2:1d:51:34:
                    d8:c9:99:37:b2:47:55:2b:21:db:20:2d:f9:e9:ff:
                    dd:94:09:22:c4:2c:c3:31:8c:ce:75:9d:52:fc:da:
                    4a:5e:c5:76:57:6f:e4:f1:54:f9:87:e9:ed:c3:a8:
                    de:9d:10:35:63:45:66:4f:c0:47:2d:db:1b:e1:81:
                    77:05:ba:a7:75:31:f4:4e:66:c1:db:fe:06:95:2e:
                    84:83:96:d1:f1:c8:6f:36:ba:21:b5:cb:67:95:07:
                    af:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:49:30:2C:88:A4:3D:16:A7:42:9B:DF:EB:8D:9B:50:36:B2:ED:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0549302C88A43D16A7429BDFEB8D9B5036B2ED95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.84.0/22
                IPv6:
                  2804:2674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264344

    Signature Algorithm: sha256WithRSAEncryption
         95:5a:89:fb:2f:93:49:38:7f:56:18:0e:d8:86:a9:04:8d:fa:
         cd:06:6a:3b:e3:60:ed:c8:5b:48:85:1d:88:ce:0d:10:59:5e:
         57:e9:5e:13:11:71:f4:11:98:38:f4:9b:eb:5b:90:16:61:04:
         b4:87:84:f6:41:53:72:9a:f8:31:4a:49:9d:d4:5b:58:3f:aa:
         58:fe:2e:65:83:32:fc:05:47:43:cf:70:43:9e:d1:da:8a:8c:
         17:e0:1c:53:a1:8b:fb:ca:7b:c5:a8:9c:c1:30:d4:76:c6:1e:
         60:b4:75:b9:68:62:16:0a:07:52:f3:99:0b:16:fb:6f:d6:be:
         d1:ad:70:6b:f7:62:d8:9c:ce:3a:90:b6:1d:0a:a5:9d:0b:cd:
         e3:82:28:e8:25:f6:0b:7b:86:d4:47:d5:6c:0e:e5:e8:63:6d:
         e8:d3:cb:64:1f:8f:05:a8:44:81:91:72:18:3b:2b:0b:75:75:
         40:f9:01:45:11:5a:48:e7:9a:b9:b3:5f:e8:ea:c2:c6:d1:6f:
         c2:c1:74:13:8c:b3:b2:a0:19:75:04:28:82:a7:58:99:1f:64:
         8a:38:d5:87:a6:db:5c:83:78:ad:88:99:8e:df:9f:15:c0:5a:
         46:d2:a0:86:ba:04:cb:24:01:7f:5f:7b:74:79:1d:33:24:a5:
         b1:d2:76:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----