Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1F2E84748355FBB127446FF91925D695C155F607.cer
File:                     1F2E84748355FBB127446FF91925D695C155F607.cer (raw, json)
Hash identifier:          yNKbFF9nro64YiCSl5BW94CISpyhiaS7R93s2bAITjE=
Subject key identifier:   1F:2E:84:74:83:55:FB:B1:27:44:6F:F9:19:25:D6:95:C1:55:F6:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       496CE0CD81249A5186BC8705CA2B533FEDFA7863
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/1F2E84748355FBB127446FF91925D695C155F607.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 19:04:10 +0000
Certificate not after:    Tue 28 May 2024 19:09:10 +0000
Subordinate resources:    AS: 270756
                          IP: 200.39.128.0/22
                          IP: 2804:70ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6c:e0:cd:81:24:9a:51:86:bc:87:05:ca:2b:53:3f:ed:fa:78:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 19:04:10 2023 GMT
            Not After : May 28 19:09:10 2024 GMT
        Subject: CN=1F2E84748355FBB127446FF91925D695C155F607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b7:95:52:c2:02:da:6e:b6:c6:e0:cb:47:3b:
                    f4:19:a5:32:3b:a1:d6:f0:00:bf:5c:32:af:0f:7f:
                    15:db:f5:6f:67:33:58:26:02:ac:b3:3e:9c:1c:25:
                    b2:9e:22:55:34:f3:8e:b2:3e:30:de:8f:f9:d1:5a:
                    ae:ae:64:b8:de:c4:38:51:5a:22:de:0b:5f:73:83:
                    c6:bb:5d:c2:d2:b9:8f:53:ea:ce:0a:a6:b1:76:b1:
                    d8:80:d4:da:2a:bc:c7:ce:98:c1:8e:e1:cf:8f:f9:
                    80:b2:7e:75:77:df:68:80:ed:fb:90:8d:de:e2:c5:
                    85:de:5a:02:2d:c4:1d:db:f8:0e:18:5e:d8:37:ed:
                    b2:35:5e:41:07:d5:71:66:e4:ae:06:d9:29:c5:d0:
                    27:23:b6:72:be:98:24:f8:1c:a5:da:0c:4a:de:d1:
                    0c:f8:2c:29:ab:ba:7c:be:dd:2b:c3:64:51:12:62:
                    04:9b:6b:ed:1f:de:7e:36:10:a8:ef:53:cf:14:1b:
                    60:a0:1d:1b:e4:ec:56:2e:82:b3:88:55:3e:36:30:
                    18:3c:35:e1:52:d7:da:ef:60:31:86:d4:76:cd:e7:
                    a5:0f:0e:75:ba:93:d6:73:26:ac:16:9c:62:68:f7:
                    bb:38:f9:0a:08:ab:51:cc:d4:7f:00:f3:e9:d9:73:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:2E:84:74:83:55:FB:B1:27:44:6F:F9:19:25:D6:95:C1:55:F6:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/1F2E84748355FBB127446FF91925D695C155F607.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.128.0/22
                IPv6:
                  2804:70ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270756

    Signature Algorithm: sha256WithRSAEncryption
         49:ab:81:cd:eb:11:17:cb:ec:cb:a0:79:0d:2d:f8:f7:dd:29:
         21:be:92:2c:28:0e:d7:85:7b:c0:3f:96:7c:99:8f:c0:9d:18:
         54:65:97:e4:b1:36:1d:ac:40:dc:a3:29:c6:4c:24:49:a6:7e:
         5b:5c:8a:c2:ce:69:8a:13:b6:a7:54:85:ef:c5:a7:f5:2a:bb:
         ee:cb:2b:c5:78:42:60:9e:45:1a:a0:52:0c:8a:cd:26:3d:13:
         4d:6d:74:0b:15:25:67:dc:86:eb:d4:68:85:17:15:d3:8c:e5:
         65:66:cd:f6:6b:e5:5e:be:de:63:0b:8d:df:1b:e8:2c:34:e0:
         08:71:4c:8f:4c:bc:8c:79:19:40:13:9d:15:ad:1f:4a:e6:01:
         08:e0:81:b7:bc:e9:6e:be:aa:8b:21:6c:c7:69:c9:23:2c:f0:
         87:6c:51:34:e8:d7:29:6d:d0:0f:9f:f4:ce:64:7d:6a:05:4e:
         a4:75:7a:90:79:ad:14:c5:35:7e:79:83:d4:91:ab:af:7c:f8:
         15:90:b3:73:8e:8d:b2:78:ea:b4:64:4f:10:7e:16:bb:cb:2b:
         58:67:99:5b:3f:b3:af:c0:14:f0:a4:1a:d5:a8:5e:bc:d3:56:
         ab:96:1d:11:31:5f:db:96:e6:ea:d0:6b:64:6d:36:1a:1f:d9:
         cf:ed:36:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----