Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/259481EEE5B47AA88639E34B0669E6971794C977.cer
File:                     259481EEE5B47AA88639E34B0669E6971794C977.cer (raw, json)
Hash identifier:          qdkB1yGcpvOuozwugiFfpe+h+VvK8f3F9enN5bfLNdM=
Subject key identifier:   25:94:81:EE:E5:B4:7A:A8:86:39:E3:4B:06:69:E6:97:17:94:C9:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A94255B4F5761EE4B88B30903F2E1DD1A4A328E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/259481EEE5B47AA88639E34B0669E6971794C977.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jan 2024 14:59:29 +0000
Certificate not after:    Mon 06 Jan 2025 15:04:29 +0000
Subordinate resources:    AS: 264293
                          IP: 138.121.120.0/22
                          IP: 2804:25a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:94:25:5b:4f:57:61:ee:4b:88:b3:09:03:f2:e1:dd:1a:4a:32:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  8 14:59:29 2024 GMT
            Not After : Jan  6 15:04:29 2025 GMT
        Subject: CN=259481EEE5B47AA88639E34B0669E6971794C977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:ed:d1:ef:7f:fe:f0:ef:1c:7e:ae:d9:58:
                    71:eb:97:dc:fb:e1:9f:2d:c3:39:28:f5:c1:07:c9:
                    7e:2d:1a:90:42:bd:5e:aa:5b:d7:76:f0:e8:c5:06:
                    f9:11:3d:20:73:6d:8c:64:7f:24:4f:45:97:51:15:
                    49:b9:f6:7b:ce:77:03:15:2f:25:bc:50:52:11:6c:
                    cd:aa:04:49:97:21:68:fb:46:da:ba:e6:6f:cf:02:
                    2a:76:9a:0a:09:66:5f:fc:66:9b:83:fc:bd:21:d9:
                    1d:f2:2c:d7:18:b6:94:76:82:c2:18:41:ad:82:dd:
                    28:13:3c:03:e0:87:25:72:d0:be:64:79:bf:a8:ef:
                    3d:46:15:93:0b:86:d8:56:38:4d:52:25:f7:4a:4f:
                    82:06:6f:f3:13:7d:21:a1:5d:7c:aa:67:b3:35:58:
                    d6:32:db:71:1d:24:4f:d0:48:9d:ba:a0:c1:a7:34:
                    ed:d2:63:7a:60:25:88:a0:56:35:ca:db:e7:ad:20:
                    6c:8a:6d:60:cd:5d:35:58:5f:35:93:9d:f0:43:a7:
                    1b:5f:23:f8:18:d3:8e:00:a7:8a:d2:60:a0:43:29:
                    6e:d7:69:34:1a:4a:36:40:ad:62:27:0c:ab:49:20:
                    83:28:2a:50:2f:20:38:2a:4e:81:e4:61:d0:05:2d:
                    06:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:94:81:EE:E5:B4:7A:A8:86:39:E3:4B:06:69:E6:97:17:94:C9:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/259481EEE5B47AA88639E34B0669E6971794C977.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.120.0/22
                IPv6:
                  2804:25a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264293

    Signature Algorithm: sha256WithRSAEncryption
         20:46:2a:16:7c:2e:f9:8a:58:8e:b2:23:a5:8f:b8:86:78:00:
         c4:9d:94:df:4b:d9:27:0d:e7:15:ee:4c:b1:3d:e0:69:c6:1a:
         97:dd:d8:9a:fd:99:c0:98:4f:ea:0f:79:b5:c1:d7:c3:bf:6d:
         81:4a:e3:ca:80:5d:de:0b:cf:67:a0:34:89:08:c3:5c:1b:ed:
         e3:18:7f:63:f2:7f:a1:5e:7c:13:79:4a:11:91:69:7c:af:8f:
         d2:0c:67:92:e4:39:33:51:94:23:eb:ed:86:70:71:10:0a:56:
         16:d1:ee:33:20:2b:e7:87:7e:7b:7a:13:15:74:0c:b0:36:f5:
         4e:6a:46:31:91:57:f8:10:46:0f:b9:1d:51:5e:e8:14:df:62:
         a9:95:c8:d7:e7:ac:57:36:5f:62:b8:e0:ce:4e:f0:85:8b:51:
         69:e2:b5:2d:ec:f7:5c:04:6d:7c:c7:db:79:d5:08:81:59:90:
         4b:bd:74:03:fb:a2:ab:55:84:83:20:5d:ff:50:06:ff:fd:ab:
         48:96:3f:3a:87:e5:ed:73:6e:b6:1c:40:61:a4:a0:77:f6:66:
         be:ca:04:60:3c:fe:bd:38:a8:1b:26:96:b7:7c:84:2a:5a:17:
         3a:0c:2f:5b:20:69:39:41:33:dc:e8:15:65:78:5a:63:a2:52:
         e2:38:6a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----