Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3133BF6AAE53BAFEA21E0049D95F837433471001.cer
File:                     3133BF6AAE53BAFEA21E0049D95F837433471001.cer (raw, json)
Hash identifier:          7cLe+6VGvuvj6a6W110efuqfN4crWYGwB+KH1iVNDG0=
Subject key identifier:   31:33:BF:6A:AE:53:BA:FE:A2:1E:00:49:D9:5F:83:74:33:47:10:01
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D6FCE1E0B08C45983690C5431D09B21992C08F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3133BF6AAE53BAFEA21E0049D95F837433471001.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 20:01:01 +0000
Certificate not after:    Mon 10 Mar 2025 20:06:01 +0000
Subordinate resources:    AS: 270253
                          IP: 200.110.204.0/22
                          IP: 2804:692c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6f:ce:1e:0b:08:c4:59:83:69:0c:54:31:d0:9b:21:99:2c:08:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 20:01:01 2024 GMT
            Not After : Mar 10 20:06:01 2025 GMT
        Subject: CN=3133BF6AAE53BAFEA21E0049D95F837433471001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:a7:ae:30:49:5c:73:fd:77:49:16:36:10:
                    5a:c6:6d:e3:e4:78:35:88:41:ca:1d:00:fe:19:10:
                    42:16:53:60:aa:99:06:10:f8:ef:62:e5:70:e9:64:
                    54:96:0f:81:91:f1:4f:e6:d6:13:5e:35:c3:8c:a8:
                    0f:81:a1:1e:f3:8e:d7:27:54:5c:85:8d:b4:b4:3c:
                    30:b1:5b:fe:ec:ac:04:4d:88:fa:75:e0:e7:94:0f:
                    58:28:49:b5:38:1f:9f:bf:f0:48:38:0f:9b:59:19:
                    d1:38:59:5a:6e:9d:83:7c:dd:4c:fb:c5:ed:03:fb:
                    36:a2:87:00:71:f3:06:d6:60:ef:27:ec:46:16:e5:
                    31:47:eb:91:0b:c0:3a:63:df:b0:90:7e:b0:3d:a5:
                    50:50:93:5d:89:2c:e8:f4:a5:3f:c6:b2:e4:e8:12:
                    d6:98:f8:46:a1:ad:32:67:39:c6:c0:b5:ba:fd:8b:
                    7e:88:5e:0b:c2:55:28:8c:8e:d4:fa:55:73:89:69:
                    b8:fd:aa:90:7d:e2:42:f6:72:ba:1b:d5:73:88:c5:
                    70:29:84:49:b2:aa:fb:f8:e0:2f:b1:9d:8f:e1:e2:
                    2b:25:fb:74:3c:98:d6:28:b4:7b:c6:1c:76:e1:85:
                    2d:45:6e:74:63:b1:4d:1e:7f:d1:6b:c1:71:fe:88:
                    b6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:33:BF:6A:AE:53:BA:FE:A2:1E:00:49:D9:5F:83:74:33:47:10:01
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3133BF6AAE53BAFEA21E0049D95F837433471001.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.204.0/22
                IPv6:
                  2804:692c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270253

    Signature Algorithm: sha256WithRSAEncryption
         18:62:e9:8a:21:cc:4b:97:89:b1:73:f9:da:63:1e:4d:4a:89:
         dd:35:1f:58:29:6c:f8:93:0b:bb:b4:04:fb:5f:73:08:9e:73:
         98:db:86:e2:6f:e9:b1:01:a3:de:d1:16:7a:43:ad:6e:0f:f6:
         aa:72:e2:49:b0:21:d2:51:b8:da:51:21:0d:d2:de:b4:77:ae:
         f6:b7:6d:7e:14:75:93:45:c5:33:45:7d:e0:89:59:e1:e9:15:
         55:3d:bf:d4:45:f4:cb:db:89:6e:5b:90:f5:16:fd:c5:d8:37:
         f6:06:f9:14:95:f9:51:e9:05:24:94:35:57:7d:93:dd:7c:b9:
         42:a6:76:8d:52:7f:bd:89:ed:ad:27:eb:15:c6:10:4c:2f:d3:
         34:c3:25:9d:1a:d5:5d:de:d8:c2:7a:f2:5e:d4:d9:d4:5d:3c:
         d7:62:c6:d9:5b:bb:01:c5:17:d9:c2:c4:01:79:27:59:08:00:
         c0:0e:e8:c6:b4:93:55:84:ff:19:87:7c:65:2d:cd:8d:35:3c:
         ca:ee:1d:0b:87:a1:de:7b:a6:17:56:36:8b:6d:0d:d4:d8:1d:
         c9:a5:32:e2:6a:06:5f:c2:25:aa:63:1f:04:8d:19:6b:c1:25:
         0c:7c:62:87:8e:fa:e5:ca:98:8f:50:19:2b:ef:c7:23:21:f1:
         b7:43:a4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----