Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2FD34957E649B1523E1FF87A9590244D5E9C6A98.cer
File:                     2FD34957E649B1523E1FF87A9590244D5E9C6A98.cer (raw, json)
Hash identifier:          04BJE1Y2ih8VgLQh9MxIT0L91KJR9lhcVBWcOwez6r0=
Subject key identifier:   2F:D3:49:57:E6:49:B1:52:3E:1F:F8:7A:95:90:24:4D:5E:9C:6A:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04000ACCA2C7F93257B1707C2659BD2961D72D81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/2FD34957E649B1523E1FF87A9590244D5E9C6A98.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Oct 2023 12:32:10 +0000
Certificate not after:    Wed 09 Oct 2024 12:37:10 +0000
Subordinate resources:    AS: 266063
                          IP: 45.4.104.0/22
                          IP: 2804:39fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:00:0a:cc:a2:c7:f9:32:57:b1:70:7c:26:59:bd:29:61:d7:2d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 11 12:32:10 2023 GMT
            Not After : Oct  9 12:37:10 2024 GMT
        Subject: CN=2FD34957E649B1523E1FF87A9590244D5E9C6A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:3a:2e:b0:06:e6:a3:7c:cc:5b:34:ed:7f:
                    df:81:de:bb:81:44:de:c1:97:b0:5a:98:d1:ad:ec:
                    85:7a:0c:5d:bc:ad:3f:8c:6e:c8:22:c2:b8:a0:f3:
                    32:6f:bc:e9:57:ce:26:24:1d:2d:ef:39:5f:7e:b9:
                    d1:89:17:51:d1:52:a4:6d:8e:fa:71:3f:04:17:f1:
                    c0:2f:dd:03:d1:08:1a:8c:17:02:2b:09:9b:9e:56:
                    81:3f:ec:75:19:d4:1d:f6:72:0e:cc:eb:43:7f:84:
                    6c:3f:ae:d1:98:a9:67:f6:7c:ee:c2:09:4e:a3:0a:
                    eb:f7:fc:79:b6:72:60:27:d0:41:1a:85:f6:8e:5b:
                    91:28:f4:91:d1:15:1c:66:0b:4a:ce:e5:55:37:61:
                    95:17:23:7b:d2:5d:a6:35:a4:ce:56:3a:af:82:02:
                    ad:89:48:f7:ae:be:c6:cb:21:73:d5:3c:3b:cd:e7:
                    f3:35:57:d0:4a:90:08:d2:b4:7b:a9:74:0f:36:c2:
                    2e:89:1d:39:53:13:bd:34:80:d0:e6:25:8a:da:93:
                    a9:75:4f:6b:f8:79:5c:f5:35:9a:c4:e7:4b:31:75:
                    38:26:0e:e2:0a:0d:e8:71:a8:3c:44:c2:97:cb:cf:
                    8b:09:d8:08:16:e6:f0:96:dd:6e:73:99:b7:8c:be:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:D3:49:57:E6:49:B1:52:3E:1F:F8:7A:95:90:24:4D:5E:9C:6A:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/2FD34957E649B1523E1FF87A9590244D5E9C6A98.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.104.0/22
                IPv6:
                  2804:39fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266063

    Signature Algorithm: sha256WithRSAEncryption
         0e:eb:32:7d:9a:c9:7c:04:3a:e7:42:9b:a8:65:e0:ba:fd:1e:
         b0:f1:33:51:6e:20:10:51:69:f3:b2:f1:8b:4b:36:9d:7d:76:
         f6:a4:b8:9b:69:a9:52:b4:6e:67:7e:4b:06:db:2b:fe:39:91:
         d1:43:21:48:d5:b5:5a:1e:33:58:98:97:7d:06:11:8c:a3:fa:
         88:4b:20:7d:c8:ed:59:4b:63:a0:b0:a1:0a:e7:25:3f:3a:8a:
         ac:6e:9c:78:ef:e8:f6:83:68:11:08:32:c4:1c:8c:74:65:95:
         43:c9:b8:70:ae:a3:54:11:27:1d:d5:c6:e8:5f:8f:ca:ac:30:
         e5:d4:f8:78:8a:b2:ea:5c:c1:a3:ce:8f:01:6b:c9:ee:f4:96:
         fd:64:8c:e2:6b:43:2f:39:5a:be:7c:c0:67:5b:49:14:b6:9c:
         fa:4b:89:0f:c3:23:65:84:99:85:66:bf:62:62:68:2e:ba:e5:
         66:c9:b9:73:d6:9f:48:26:42:fd:db:4d:09:34:f4:ce:fa:52:
         3b:9e:93:93:7c:6f:9c:b3:50:f4:53:f4:96:b9:b8:90:57:47:
         9e:d5:59:c3:a2:8f:fa:97:ea:78:18:92:ea:66:38:b8:4b:f1:
         bb:5e:56:e4:a8:ce:76:83:d1:2e:ff:95:a6:f3:1d:84:94:2a:
         67:95:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----