Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2FD1962A21CE917021C7761F9A90E37DD427A749.cer
File:                     2FD1962A21CE917021C7761F9A90E37DD427A749.cer (raw, json)
Hash identifier:          o9CEFDWHf+zJB7K/Xmn1gXVIITafAq1urpzSkerzTEU=
Subject key identifier:   2F:D1:96:2A:21:CE:91:70:21:C7:76:1F:9A:90:E3:7D:D4:27:A7:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7344880BB1D795CCAA3D7911B0A1BD0183364DFB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/0/2FD1962A21CE917021C7761F9A90E37DD427A749.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Mar 2024 14:43:11 +0000
Certificate not after:    Mon 24 Mar 2025 14:48:11 +0000
Subordinate resources:    AS: 272535
                          IP: 201.94.152.0/22
                          IP: 2804:82b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:44:88:0b:b1:d7:95:cc:aa:3d:79:11:b0:a1:bd:01:83:36:4d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 14:43:11 2024 GMT
            Not After : Mar 24 14:48:11 2025 GMT
        Subject: CN=2FD1962A21CE917021C7761F9A90E37DD427A749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:02:8c:04:f7:fd:f0:00:cc:f3:f9:25:ea:a8:
                    31:e5:35:11:4d:c2:e3:d2:ae:8c:01:73:48:9e:4b:
                    08:de:94:ff:c3:ff:35:ca:9a:87:e6:f3:e8:77:1d:
                    06:66:2d:1d:23:9b:79:90:45:66:f2:d5:dc:19:3a:
                    8d:ed:59:d5:67:7d:c5:a8:08:d3:5b:d2:84:d9:fb:
                    28:00:c3:31:9d:46:2c:c9:8a:ed:1c:b3:5e:2b:71:
                    90:e3:7f:af:05:54:ab:47:cf:c4:31:9c:cd:1f:67:
                    0a:cb:73:56:4c:3a:40:26:76:06:4b:7a:03:47:48:
                    87:c7:c8:85:db:7b:60:3b:ac:bc:3f:cd:b5:e6:f8:
                    c3:1c:e1:4c:2e:01:58:6c:5c:bb:d4:43:32:39:d1:
                    ee:f4:29:ee:73:40:22:4d:2c:6d:b2:2e:31:30:9f:
                    5b:81:d6:38:25:16:eb:c1:0a:f0:77:ff:27:67:b9:
                    c7:7e:25:31:12:84:9c:08:51:41:be:74:4f:e5:c1:
                    55:12:a7:8c:b1:5e:da:a4:26:77:9d:ff:d4:31:97:
                    12:24:24:2f:0b:5e:fd:8e:3e:81:dc:b2:0d:b6:63:
                    00:1b:a1:f8:40:9e:dd:a6:d2:70:3e:0a:98:fe:88:
                    9b:a3:67:c2:5e:e6:bb:ca:8d:c3:ed:d6:6d:47:41:
                    0c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:D1:96:2A:21:CE:91:70:21:C7:76:1F:9A:90:E3:7D:D4:27:A7:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/0/2FD1962A21CE917021C7761F9A90E37DD427A749.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.152.0/22
                IPv6:
                  2804:82b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272535

    Signature Algorithm: sha256WithRSAEncryption
         57:1d:cc:87:18:55:72:18:54:8f:a8:e6:2f:f9:d1:62:12:ba:
         6d:59:e2:11:dc:78:38:8f:82:84:0e:d7:7b:b0:21:d4:a4:93:
         54:96:ef:a3:74:9d:cb:ad:27:43:f4:fa:f4:d9:ac:cb:4d:8a:
         63:29:1d:7c:7b:26:2f:84:be:74:b5:b7:20:c9:4b:23:32:ba:
         35:75:7f:6c:4a:a1:6f:77:f6:fe:e5:a6:10:92:a3:67:76:b7:
         03:79:07:f8:f5:58:7d:10:7d:09:ae:1f:b0:3a:2e:fa:1a:86:
         63:c1:c8:dd:f9:1e:64:5c:a9:96:6b:d4:0c:22:1a:a6:aa:ea:
         5c:1a:27:2e:04:97:3d:5b:68:4c:35:44:fc:3d:af:d3:6a:4e:
         31:b7:71:62:9b:6f:ee:26:b5:14:43:53:1f:c4:b1:cb:18:21:
         ec:88:21:2b:7e:08:e6:05:65:b0:6a:33:9d:b5:04:d1:c5:df:
         c8:66:af:1a:1c:c3:57:7a:9b:ab:2d:ce:42:49:58:57:81:7d:
         79:54:91:b4:ab:04:cf:37:9e:71:f8:7a:f6:e5:4d:9a:73:1e:
         df:04:af:a6:4a:26:ad:0d:dc:1d:9f:99:f2:28:a8:9f:35:b6:
         cd:29:57:2f:3d:bd:d0:5a:be:3f:3d:51:31:33:42:a7:c2:cb:
         c2:16:31:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----