Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3029F170E419CC31484974DD3D6A9AFE10D5D3E5.cer
File:                     3029F170E419CC31484974DD3D6A9AFE10D5D3E5.cer (raw, json)
Hash identifier:          XzKvumGwpv6CzqYwe+FnS9OjZ2LZP7IEErc/rHoe644=
Subject key identifier:   30:29:F1:70:E4:19:CC:31:48:49:74:DD:3D:6A:9A:FE:10:D5:D3:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51CDCEC90761B870243F603A94BAC69D8CC97E9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DZuoggWM2sDHMUKpztLpCgHjVS88t6UJP3AxGKppz9Qq/0/3029F170E419CC31484974DD3D6A9AFE10D5D3E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DZuoggWM2sDHMUKpztLpCgHjVS88t6UJP3AxGKppz9Qq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Feb 2024 19:36:08 +0000
Certificate not after:    Thu 06 Feb 2025 19:41:08 +0000
Subordinate resources:    AS: 264166
                          IP: 138.94.160.0/22
                          IP: 2804:2380::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cd:ce:c9:07:61:b8:70:24:3f:60:3a:94:ba:c6:9d:8c:c9:7e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  8 19:36:08 2024 GMT
            Not After : Feb  6 19:41:08 2025 GMT
        Subject: CN=3029F170E419CC31484974DD3D6A9AFE10D5D3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:27:26:e7:d9:ba:b4:f6:20:82:89:f2:6d:db:
                    25:56:7e:ce:5e:71:0b:71:40:7f:38:3f:9c:60:75:
                    22:1f:55:ef:48:02:ec:4c:c2:ec:ba:7e:48:63:3e:
                    1e:94:cc:ac:e4:77:a9:8a:2e:91:0f:a5:5b:04:7d:
                    2b:e4:28:d4:71:a7:45:93:c8:eb:32:0d:c5:f7:bf:
                    82:e4:0a:5d:90:62:fc:b8:af:02:e9:ec:01:ff:ae:
                    f2:f3:73:b5:8e:0d:d5:e5:42:8f:69:7f:03:39:53:
                    cb:83:17:b5:56:47:f4:b2:be:20:2b:9d:a8:0d:10:
                    d2:15:b5:fd:19:62:2f:72:69:8d:99:a0:a6:e7:1a:
                    ea:63:05:05:32:d2:0d:51:35:a9:e0:3e:8d:82:7c:
                    1d:f9:66:27:da:4c:53:ef:26:2c:65:78:38:54:ad:
                    fd:ca:c6:82:a6:b2:2d:f9:4e:c4:da:9b:0d:a9:c2:
                    5d:65:ef:ed:bd:9f:94:d0:d7:48:6c:42:0e:ad:47:
                    8c:b8:4c:32:94:f1:59:03:61:f0:25:6a:ab:43:87:
                    ab:c4:75:16:1e:a7:22:f5:5a:69:b8:d3:e3:fb:4b:
                    04:02:94:c8:6d:c4:c2:e5:84:4c:9a:09:74:cf:fc:
                    40:43:62:a7:79:b8:b4:f7:fe:8a:9a:c7:97:65:20:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:29:F1:70:E4:19:CC:31:48:49:74:DD:3D:6A:9A:FE:10:D5:D3:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DZuoggWM2sDHMUKpztLpCgHjVS88t6UJP3AxGKppz9Qq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DZuoggWM2sDHMUKpztLpCgHjVS88t6UJP3AxGKppz9Qq/0/3029F170E419CC31484974DD3D6A9AFE10D5D3E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.160.0/22
                IPv6:
                  2804:2380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264166

    Signature Algorithm: sha256WithRSAEncryption
         0c:17:c2:7e:8c:84:c9:33:e6:f7:b5:9f:04:bb:c0:cb:ad:29:
         c8:d1:ea:30:f6:10:de:30:a7:40:42:fa:f3:95:88:2c:4d:04:
         d7:e0:33:7d:66:aa:78:fc:61:ca:26:e2:37:00:c2:8c:8a:26:
         9e:c8:2a:06:93:c4:67:73:3e:e4:c8:2b:d5:92:8c:c3:4a:c9:
         0d:90:35:ea:c0:d0:5d:32:7d:b1:f1:27:11:87:18:fd:57:90:
         15:19:74:3c:d8:ef:a9:e0:14:d3:10:f7:7a:6b:f7:08:d8:3e:
         3d:9f:1a:09:8d:64:29:92:28:06:e8:99:d4:87:ac:70:47:7a:
         b4:85:b4:2b:56:c0:83:01:ea:67:7c:92:9f:c3:e7:22:4c:68:
         78:4a:81:91:44:82:3e:4b:e0:d4:29:b5:3c:04:fd:6a:ec:e2:
         70:52:91:73:b2:4f:db:02:69:9d:ca:67:a1:a0:e8:bf:18:26:
         d7:53:8d:6a:68:02:64:4e:87:ea:ae:47:20:ac:d0:db:8b:58:
         85:34:17:dc:0a:0d:c8:5d:14:14:ee:cb:0d:3d:33:57:c7:a2:
         e3:af:cf:8f:ef:2e:3a:1a:17:64:87:41:62:fa:3b:bc:e0:df:
         9a:49:d0:18:e2:c3:d8:ec:6c:2e:51:84:e9:1b:a7:71:87:ae:
         f4:39:9f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----