Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E.cer
File:                     2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E.cer (raw, json)
Hash identifier:          p3n0ddWT8SSucl8jaUeD5wZklNgT4ddw1ZiC7QY+CNQ=
Subject key identifier:   2F:A5:91:97:AD:C5:E5:5F:C5:D0:AB:6A:A4:FC:7F:5F:1A:95:68:5E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D644FBEFB2D1433611B28B917597C35AF7AB685
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/0/2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 13:24:29 +0000
Certificate not after:    Wed 10 Jul 2024 13:29:29 +0000
Subordinate resources:    AS: 270735
                          IP: 177.221.142.0/23
                          IP: 2804:7094::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:64:4f:be:fb:2d:14:33:61:1b:28:b9:17:59:7c:35:af:7a:b6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 13:24:29 2023 GMT
            Not After : Jul 10 13:29:29 2024 GMT
        Subject: CN=2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9f:41:3d:ee:3a:2f:42:46:b3:16:7d:1e:f1:
                    99:6a:80:25:aa:b6:0d:ab:4d:82:77:23:62:3c:df:
                    75:9e:f8:d7:ad:76:af:e7:48:ad:bf:6e:99:6c:45:
                    b6:ad:d2:d3:31:51:b9:07:4a:0c:45:4b:aa:06:83:
                    38:14:96:b2:d6:b2:07:c6:fa:d7:ee:a6:df:7b:b5:
                    69:29:95:97:2d:cf:37:b7:2d:a1:bf:84:1a:05:f1:
                    d0:84:5a:d3:ab:75:5f:46:1c:25:bb:59:72:4a:06:
                    95:6c:3e:31:19:31:7d:b1:57:69:06:da:8b:14:10:
                    2b:4c:1a:e2:b3:fe:8e:3b:64:db:b6:bd:04:6d:40:
                    43:02:23:7c:26:bc:5e:58:0c:49:de:e4:da:71:42:
                    a8:3a:76:57:00:29:44:c4:22:ee:3c:3b:1a:4b:17:
                    fc:a4:00:33:8b:11:bc:48:95:16:0d:48:90:87:ec:
                    e0:f7:f4:80:8b:26:23:20:89:e1:17:69:a6:e6:08:
                    fb:e3:08:02:8d:c2:c3:25:c2:4f:d4:70:52:94:0d:
                    1c:00:5d:09:df:0e:55:44:1f:36:38:04:6c:11:5a:
                    17:5c:b6:61:04:12:a0:42:b0:b0:c6:f7:cd:8e:0c:
                    db:66:1a:1e:64:fa:7e:e7:35:99:0d:bd:24:77:30:
                    65:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:A5:91:97:AD:C5:E5:5F:C5:D0:AB:6A:A4:FC:7F:5F:1A:95:68:5E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/0/2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.142.0/23
                IPv6:
                  2804:7094::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270735

    Signature Algorithm: sha256WithRSAEncryption
         70:43:4d:97:f5:6b:20:fb:92:c2:77:3b:e2:0e:10:78:93:c9:
         5a:57:97:33:ee:9d:23:36:e7:9f:8c:50:39:7e:75:93:4e:4c:
         90:f3:25:e7:02:e5:d7:e4:38:7a:0f:33:49:6a:7d:a2:9a:b1:
         e4:23:48:b1:8f:33:c8:3b:8c:4a:01:b1:7d:34:34:20:b5:1e:
         f7:83:c9:51:ea:4d:1f:11:81:c8:ee:48:36:00:4c:1e:fb:8e:
         54:f3:3b:85:6e:59:7a:22:7a:27:10:8a:62:78:9a:b5:9a:dc:
         7d:0f:e7:c4:6d:ff:71:ee:fd:96:89:d0:9d:7a:93:5e:60:7f:
         79:92:38:c3:e5:3c:22:32:73:79:94:de:a7:18:4f:9a:5b:ce:
         d8:09:dd:34:07:6a:08:c7:2e:b8:f0:22:4a:8b:3a:05:3a:61:
         7c:98:64:de:32:c7:1d:0b:7c:e4:e6:4e:d0:0b:a7:3b:de:f4:
         d7:6d:97:53:1d:fc:fb:b4:ed:c8:30:31:8d:54:a5:13:0b:dc:
         11:2a:5a:36:fa:6b:cc:82:38:b9:c2:c4:32:ff:f3:08:c5:4b:
         a1:a7:88:cc:7a:63:c2:5e:c1:d5:0d:cf:ac:83:53:19:d1:ff:
         83:ee:f1:5f:6d:fa:34:f8:4b:2e:e7:18:a8:03:8b:cc:88:86:
         bc:83:38:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----