Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/11E710341EFB8CFEE7722CDDCEC0B393875429B6.cer
File:                     11E710341EFB8CFEE7722CDDCEC0B393875429B6.cer (raw, json)
Hash identifier:          LgrExbgUh+4UyahcykPLu5b3x9WtnF0UkJylgrC//28=
Subject key identifier:   11:E7:10:34:1E:FB:8C:FE:E7:72:2C:DD:CE:C0:B3:93:87:54:29:B6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       227A0686A2B48CAD768DEC88A05488E8ED1BA709
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/3/11E710341EFB8CFEE7722CDDCEC0B393875429B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/3/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 17:26:40 +0000
Certificate not after:    Mon 07 Apr 2025 17:31:40 +0000
Subordinate resources:    AS: 265102
                          IP: 170.254.96.0/22
                          IP: 2804:32e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7a:06:86:a2:b4:8c:ad:76:8d:ec:88:a0:54:88:e8:ed:1b:a7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  8 17:26:40 2024 GMT
            Not After : Apr  7 17:31:40 2025 GMT
        Subject: CN=11E710341EFB8CFEE7722CDDCEC0B393875429B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:2c:2f:9a:a4:91:02:97:38:fc:a1:a6:04:
                    1f:7f:7b:d1:f0:84:69:f5:72:c6:1e:ce:d9:40:1c:
                    a3:e3:ff:11:8b:c5:70:94:44:43:fb:d9:67:16:f8:
                    b9:93:a6:37:dc:b9:cb:09:bf:7f:e6:91:69:03:4f:
                    2d:e0:15:bc:c6:90:62:3d:13:6b:10:16:09:40:f8:
                    df:9f:64:19:cb:5f:2a:c4:b8:b1:c1:f9:ea:67:0d:
                    3c:3f:30:fc:32:f7:5e:20:d9:53:90:a9:24:dd:bb:
                    1e:66:d7:3a:16:ab:a7:19:39:fc:6a:33:63:f1:84:
                    bd:21:fb:81:33:72:7c:13:b4:be:5b:7d:d1:ab:94:
                    91:8b:39:81:fc:fb:4a:68:c5:6c:48:5a:ba:16:e4:
                    b6:88:f4:70:80:17:38:1c:74:f9:0d:0f:82:90:64:
                    61:b3:61:c1:dc:33:69:3e:53:33:65:31:85:75:6c:
                    99:00:61:44:97:6e:70:4d:97:28:87:80:8b:ed:d8:
                    ce:08:23:5b:95:65:56:3a:b3:a6:40:14:66:b1:1c:
                    9f:99:79:90:62:71:91:13:34:28:0c:de:45:ff:d5:
                    51:fe:81:f0:b4:d1:07:db:36:33:26:f2:de:78:1d:
                    0b:92:92:18:bf:44:b7:f7:7c:e0:bc:18:e8:0d:15:
                    7a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:E7:10:34:1E:FB:8C:FE:E7:72:2C:DD:CE:C0:B3:93:87:54:29:B6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/3/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/3/11E710341EFB8CFEE7722CDDCEC0B393875429B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.96.0/22
                IPv6:
                  2804:32e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265102

    Signature Algorithm: sha256WithRSAEncryption
         86:31:f7:ac:86:30:08:15:14:af:6c:2f:93:ac:bd:9c:01:7d:
         46:3e:48:e1:58:ff:44:5c:2b:97:ce:0b:e3:7b:9f:2c:9f:98:
         5a:fb:0c:e8:0f:07:11:20:e7:f3:24:c0:c7:b9:ff:58:49:4d:
         80:21:de:21:c7:6f:fd:66:28:4a:b1:64:32:c1:d9:3b:96:a8:
         53:e9:a9:fa:02:d8:f5:22:3f:80:f0:4f:79:4d:84:70:02:9e:
         5a:80:b6:46:bd:cf:fa:98:db:6f:2b:94:85:ac:03:18:8e:3a:
         49:79:60:de:e7:51:d0:46:4d:55:7f:11:f0:60:6e:b4:e4:43:
         ab:b0:3c:00:82:a0:88:20:03:64:da:96:cb:72:74:8c:04:7d:
         14:c9:7a:f7:81:8c:af:7e:3e:ae:76:5e:ed:bf:8b:d4:62:72:
         80:6d:04:13:dc:c8:d2:a1:3e:31:9e:e2:ba:14:76:3c:d3:84:
         29:6b:74:c1:4f:2d:5b:24:d6:1d:79:8f:bf:99:e0:21:8c:15:
         81:c8:38:90:05:06:33:e5:b0:fc:d8:d2:53:f3:7b:7a:42:da:
         b5:4f:16:42:5a:32:fd:9c:a4:12:23:62:fe:a4:0c:40:52:33:
         ab:5f:d3:aa:01:2a:c2:87:ce:56:46:40:3a:ab:c4:e3:30:72:
         97:aa:69:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----