Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.cer
File:                     0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.cer (raw, json)
Hash identifier:          cp/Mg4sHLPuuztUHKUeaGjyoJ79y6m79DqYVfMDRGxA=
Subject key identifier:   0C:FF:9C:CB:B4:AE:CE:D8:75:43:2D:E6:7D:4D:72:CB:1A:F6:FC:F0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       056F327221C76F6EC346798C97B88E4B5E51ECFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 18:17:09 +0000
Certificate not after:    Mon 10 Mar 2025 18:22:09 +0000
Subordinate resources:    AS: 53097
                          IP: 187.63.208.0/20
                          IP: 2804:3190::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6f:32:72:21:c7:6f:6e:c3:46:79:8c:97:b8:8e:4b:5e:51:ec:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 18:17:09 2024 GMT
            Not After : Mar 10 18:22:09 2025 GMT
        Subject: CN=0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:07:2a:4a:20:b5:c5:dd:6d:b6:f5:34:8b:
                    f6:ed:88:64:b3:c7:4f:91:18:15:2a:85:90:78:92:
                    47:9b:18:79:5e:bd:45:34:3d:cb:43:c3:1a:57:af:
                    77:80:29:78:a5:34:bb:0c:8e:b0:23:5a:db:34:a0:
                    59:b1:c9:3e:54:ff:e5:78:d5:20:5d:ba:a9:67:51:
                    9f:6a:ea:76:ef:33:25:f3:bc:fd:db:b9:c6:ff:8c:
                    3a:c5:77:70:b5:6b:1e:4f:ca:2e:a8:cc:28:4f:44:
                    d9:f0:89:27:55:bd:e6:de:c6:d4:d7:c3:7f:3f:1c:
                    23:4e:d1:a5:98:31:86:fe:92:e7:49:bb:3b:dd:12:
                    78:d0:d2:f6:b9:c4:15:8b:ab:cf:b8:7b:5b:98:61:
                    ae:d4:e9:68:45:28:03:94:93:0d:e0:91:cd:03:77:
                    b7:38:33:fc:93:5c:17:b3:28:0f:01:d2:df:f5:fb:
                    ea:4c:6a:2e:96:d9:77:a9:9d:1a:28:14:b7:33:20:
                    c0:f8:99:1c:aa:6c:db:33:31:27:5b:f4:d5:7a:85:
                    fa:86:16:0c:c2:f9:6c:10:33:58:72:b0:c2:7b:98:
                    19:1b:4e:fb:e2:ab:ae:c5:dd:72:86:3e:71:e3:5f:
                    48:ad:74:be:bb:0e:20:73:a9:b0:6f:98:c4:23:07:
                    4c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:FF:9C:CB:B4:AE:CE:D8:75:43:2D:E6:7D:4D:72:CB:1A:F6:FC:F0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.208.0/20
                IPv6:
                  2804:3190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53097

    Signature Algorithm: sha256WithRSAEncryption
         64:89:71:a3:05:6c:cd:ce:62:46:c2:09:34:f1:bd:11:52:01:
         ea:c2:01:c3:64:06:13:b0:65:84:1a:25:c9:1d:db:0d:2b:f4:
         bd:da:4b:3e:d8:22:fb:b7:ff:07:42:05:f6:78:1e:e3:8e:e3:
         c0:9d:1e:cf:b8:e6:3d:3e:04:b2:6b:d5:03:ba:d6:f0:a9:3b:
         e4:75:8e:52:9f:ab:c7:2f:bd:3e:c4:91:07:d0:ba:26:98:47:
         b9:22:99:3c:bf:6f:37:cd:4e:f5:6a:3a:34:8a:0b:c5:80:36:
         47:d6:1c:b2:cf:e1:36:49:c7:4e:20:f2:53:26:a5:b8:75:e4:
         ef:d6:7b:e3:8f:96:38:25:32:e5:b6:64:1d:49:07:96:47:7c:
         f2:34:17:72:78:2a:7b:c9:48:34:58:bb:6d:c4:36:82:f9:a9:
         57:f4:1f:3a:eb:84:71:93:2f:cb:bf:33:88:d9:4d:d9:b2:84:
         88:1e:13:ac:be:f8:a3:01:d3:3a:d4:f8:48:38:8d:c1:7a:cc:
         66:33:53:99:79:8a:4e:fe:6e:e0:a5:55:4c:32:96:bf:b5:d5:
         a4:28:ba:55:ae:a4:49:99:3e:b6:95:6b:bc:e4:20:8e:0d:3a:
         5b:94:4c:c0:a6:f6:8f:7c:ce:33:32:79:f5:43:a0:60:19:c5:
         29:d3:0f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----