Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.cer
File:                     12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.cer (raw, json)
Hash identifier:          OYhckfy2lwVEm8ihgzu4SuOBbHdONoyECNkWIvZK18U=
Subject key identifier:   12:C8:B7:A2:CD:94:4B:93:D0:FB:21:B7:71:B0:F2:5A:CA:52:F8:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F362DBAF8597E1763FBCBB27FF93CCB62A1C625
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 05:11:13 +0000
Certificate not after:    Wed 19 Mar 2025 05:16:13 +0000
Subordinate resources:    AS: 264209
                          IP: 138.97.220.0/22
                          IP: 2804:2438::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:36:2d:ba:f8:59:7e:17:63:fb:cb:b2:7f:f9:3c:cb:62:a1:c6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 05:11:13 2024 GMT
            Not After : Mar 19 05:16:13 2025 GMT
        Subject: CN=12C8B7A2CD944B93D0FB21B771B0F25ACA52F800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:e3:ee:ac:63:5e:bf:1f:3c:c3:f8:7e:06:
                    35:a9:13:21:35:38:6e:21:7a:ab:2f:c3:70:cd:47:
                    b0:be:f0:09:48:47:15:5b:90:9d:22:67:68:c9:f8:
                    33:6e:28:28:ec:d9:42:a7:ca:be:91:af:ce:11:b4:
                    16:91:c1:4f:bf:84:a9:09:0e:35:d7:f0:22:f6:46:
                    9a:af:f2:35:c6:2a:06:9f:6b:20:fa:ca:11:87:20:
                    97:bf:e8:ff:ed:2f:e6:a1:76:79:20:7a:ea:b0:0b:
                    76:08:06:d4:f5:7f:0c:6e:58:ff:cf:96:7e:55:4f:
                    46:25:49:d5:98:a8:82:d7:ad:e0:29:33:9e:c8:ea:
                    53:c5:25:0f:69:82:70:e7:90:d5:7e:aa:fc:13:bc:
                    ce:59:64:a6:ee:83:4d:64:2b:dd:a9:76:03:f7:45:
                    9e:e2:22:d9:34:60:d0:c8:a0:f6:b7:5b:23:94:a9:
                    1e:13:5b:c0:a6:85:4c:7e:b8:49:5d:86:03:d1:b9:
                    ae:92:ed:55:af:bd:0f:e9:22:69:0c:31:a1:59:81:
                    fc:49:bb:95:fc:e3:f9:a5:8c:91:37:38:38:b4:93:
                    12:59:9c:5a:2e:24:44:d7:79:08:20:d7:da:fc:f4:
                    ee:70:27:30:79:58:e7:29:ef:8b:b4:d6:86:52:ed:
                    06:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:C8:B7:A2:CD:94:4B:93:D0:FB:21:B7:71:B0:F2:5A:CA:52:F8:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.220.0/22
                IPv6:
                  2804:2438::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264209

    Signature Algorithm: sha256WithRSAEncryption
         01:84:73:31:ef:1b:7e:5b:1d:66:2f:87:95:f2:ef:98:6f:a1:
         6b:98:49:0d:48:ce:60:56:4c:e7:4a:06:89:95:2b:25:af:16:
         34:04:08:1e:71:0c:0b:88:49:13:a3:66:af:74:92:4d:5b:fa:
         50:e3:5a:b8:a9:8b:3a:85:88:9b:83:3a:36:98:52:db:40:7c:
         70:93:71:cf:87:09:35:be:cb:bd:c3:49:0f:3a:dc:eb:e6:24:
         bd:4d:58:0b:47:e5:8d:8e:17:bb:9d:7f:25:a9:ff:f1:77:41:
         89:66:01:7b:b7:86:6b:6b:a6:ba:c4:44:c6:af:a6:69:44:72:
         a3:b0:28:46:97:54:ed:8b:2c:00:82:c1:b7:d3:4f:88:94:ec:
         a3:76:46:b3:06:f8:a0:9e:b4:a6:c0:cb:31:c5:cf:9f:7c:18:
         00:8c:02:4c:10:ad:fc:df:69:f7:50:81:7e:e0:e0:8f:d6:98:
         b2:f9:69:17:3e:5c:91:e7:a4:60:de:f1:42:c0:c9:56:5a:32:
         c2:cd:16:30:11:8c:8c:24:83:42:22:3d:a5:ab:e5:ee:62:be:
         22:85:03:db:c4:43:13:03:2b:62:ec:32:a3:be:68:fd:2c:83:
         be:95:05:d8:00:ab:96:ec:68:a6:b5:b0:18:75:8d:8a:4a:63:
         0c:e6:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----