Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/326958A85BA517646A7E49A08B0C9118B47E29A5.cer
File:                     326958A85BA517646A7E49A08B0C9118B47E29A5.cer (raw, json)
Hash identifier:          h65pkQ0iIVDSz5fltTnH+0AmFztBK6AXvdMsY9HSYpA=
Subject key identifier:   32:69:58:A8:5B:A5:17:64:6A:7E:49:A0:8B:0C:91:18:B4:7E:29:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4ACFA7A0E47F5DECDBB3DE3D92FF0B44701282F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/0/326958A85BA517646A7E49A08B0C9118B47E29A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Feb 2024 16:14:46 +0000
Certificate not after:    Thu 27 Feb 2025 16:19:46 +0000
Subordinate resources:    AS: 262637
                          IP: 177.105.64.0/20
                          IP: 2804:75c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cf:a7:a0:e4:7f:5d:ec:db:b3:de:3d:92:ff:0b:44:70:12:82:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 29 16:14:46 2024 GMT
            Not After : Feb 27 16:19:46 2025 GMT
        Subject: CN=326958A85BA517646A7E49A08B0C9118B47E29A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:22:46:cf:9b:47:84:39:1c:24:1c:d4:d7:b7:
                    7d:c0:42:ab:47:df:51:69:1e:08:b7:93:f9:10:75:
                    95:6a:c2:25:8d:71:f1:05:60:f1:f0:39:2e:96:77:
                    87:16:56:70:53:3d:cb:f4:4c:d1:cb:7e:2e:7b:17:
                    aa:9e:44:b6:64:bf:f1:2e:e3:7c:59:9a:73:bd:9a:
                    94:34:7c:16:c3:c5:24:f3:9c:57:de:dc:97:31:27:
                    7e:34:00:97:75:04:c6:cc:0d:ad:cf:81:7c:90:13:
                    42:23:81:5c:33:ff:33:a6:8f:5b:86:fe:f4:00:1c:
                    0c:11:81:bb:81:29:f4:23:9f:8a:b7:20:9a:9c:5d:
                    1c:69:30:d8:04:96:9c:ba:09:38:3a:a4:d9:1c:90:
                    29:69:fc:04:b1:fc:36:e8:43:66:fe:73:36:88:55:
                    11:a7:ef:eb:dd:56:9c:d9:f2:43:a1:13:97:b0:20:
                    29:a9:e0:df:63:95:15:7a:7e:38:96:fb:33:5f:40:
                    5b:a0:2a:e0:9d:1a:e6:49:18:68:d2:c7:4e:2c:c7:
                    1a:fb:56:22:d8:da:80:75:2f:fb:cb:d1:d4:43:79:
                    d6:b6:63:72:4c:76:71:ab:c9:5d:0e:e1:98:ab:ef:
                    2e:d1:97:eb:4b:92:ba:4d:d8:eb:ed:6f:0f:9f:ec:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:69:58:A8:5B:A5:17:64:6A:7E:49:A0:8B:0C:91:18:B4:7E:29:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/0/326958A85BA517646A7E49A08B0C9118B47E29A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.64.0/20
                IPv6:
                  2804:75c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262637

    Signature Algorithm: sha256WithRSAEncryption
         70:ef:70:2c:8b:ec:2e:f8:43:65:45:0f:c4:0c:88:3c:70:1d:
         06:59:d3:9f:89:2a:b6:4c:a4:ba:e8:7e:6a:d0:50:e7:5d:62:
         21:d2:76:88:14:11:ec:8f:c1:ce:90:a8:f6:c6:fd:e1:8b:23:
         e6:61:d2:c6:30:b0:ed:33:46:4d:2a:60:56:bd:2d:c2:39:c7:
         7a:ce:16:eb:fd:52:20:ff:82:27:ba:9e:6c:7e:6e:ef:98:8c:
         e6:21:b7:91:dd:8d:36:6c:d2:76:cd:b5:09:90:e9:3d:60:ef:
         4a:23:4b:b0:06:72:e2:db:1b:29:5f:aa:ce:4f:00:e1:1d:06:
         6f:53:14:b7:59:13:a4:93:bb:da:82:a5:a7:3d:d9:d8:5c:e4:
         df:cc:ae:9b:d8:69:ef:54:8f:8d:36:57:f8:ca:1d:c9:94:98:
         57:ef:4f:b3:e6:57:aa:fd:64:83:13:ee:f3:11:5b:a5:5b:92:
         86:2f:35:e5:e0:09:87:4d:f4:dd:ee:59:14:a5:78:71:0f:6e:
         88:93:a0:b6:fd:12:6e:f4:fe:d5:44:0c:ed:7e:0d:76:ba:ac:
         5a:8b:fc:4b:bb:95:36:15:5d:89:56:1a:14:d4:fc:d0:d8:7c:
         5a:ee:6c:90:83:2b:d2:47:34:c2:97:a4:32:18:74:f9:18:5d:
         9e:27:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----