Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3751E14F83E2CE00B85D8F4A98C3ED0330138694.cer
File:                     3751E14F83E2CE00B85D8F4A98C3ED0330138694.cer (raw, json)
Hash identifier:          9IkieY+1N1luV7A7BfkjNNSgE8DM5pE0VCy3W+9P4H4=
Subject key identifier:   37:51:E1:4F:83:E2:CE:00:B8:5D:8F:4A:98:C3:ED:03:30:13:86:94
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       17EF160E77370A6D0BF104D32D9ACF1EFDF38B41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1/3751E14F83E2CE00B85D8F4A98C3ED0330138694.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Mar 2024 11:47:38 +0000
Certificate not after:    Fri 28 Mar 2025 11:52:38 +0000
Subordinate resources:    AS: 271293
                          IP: 170.233.240.0/22
                          IP: 2804:793c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ef:16:0e:77:37:0a:6d:0b:f1:04:d3:2d:9a:cf:1e:fd:f3:8b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 29 11:47:38 2024 GMT
            Not After : Mar 28 11:52:38 2025 GMT
        Subject: CN=3751E14F83E2CE00B85D8F4A98C3ED0330138694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:e8:92:27:19:06:2f:18:fc:90:6d:8c:b4:
                    76:7e:8d:00:09:8c:2d:ad:c2:d1:c4:63:7d:1c:a9:
                    85:b8:64:45:f6:7f:6c:0f:bd:63:fd:af:37:e0:da:
                    2e:8d:76:c2:43:eb:55:a8:ac:6a:f5:e0:0d:b4:95:
                    85:10:f5:ec:b1:68:26:b9:1a:c9:62:79:8c:6a:11:
                    ca:af:3f:42:13:b1:2c:a2:97:c0:f3:44:fe:e1:60:
                    d8:b2:44:25:f3:a9:51:f1:8d:97:16:7e:2d:d6:80:
                    87:03:96:41:b6:ff:72:26:a5:d1:8a:72:ea:2b:78:
                    1d:82:8c:ef:96:91:f3:bb:9e:6e:11:aa:58:25:04:
                    93:cf:10:82:31:57:af:4c:b5:b8:99:5b:9f:02:25:
                    a3:8f:76:bc:bc:0d:3f:46:8a:4f:86:b4:fc:e6:96:
                    a3:27:3e:0c:23:a3:e1:8d:f0:bc:9e:1c:d6:7e:2b:
                    0e:f6:7b:29:b8:ba:a9:80:f1:de:2c:07:23:2a:7b:
                    61:70:c2:fb:b7:6b:04:e5:8c:d9:0c:33:a8:ba:93:
                    1a:af:07:6d:2f:e8:77:1a:db:71:e5:ad:6e:8b:67:
                    89:b5:98:8b:78:a8:13:3f:47:e0:2e:d0:24:c5:59:
                    a1:b8:6b:1c:24:4d:65:9f:f8:ad:74:46:3c:b2:78:
                    a1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:51:E1:4F:83:E2:CE:00:B8:5D:8F:4A:98:C3:ED:03:30:13:86:94
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1/3751E14F83E2CE00B85D8F4A98C3ED0330138694.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.240.0/22
                IPv6:
                  2804:793c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271293

    Signature Algorithm: sha256WithRSAEncryption
         20:88:85:cd:97:46:20:50:b4:10:9b:7c:23:57:9e:03:59:59:
         cd:86:bb:21:d7:49:1f:27:68:f0:d4:9b:97:a1:e8:6d:97:c4:
         64:64:60:10:6b:f3:39:25:90:f6:c5:13:ea:f3:50:83:7e:15:
         e9:60:09:f3:65:f1:e6:73:c1:9b:3f:54:44:c9:f0:0c:fc:f4:
         7f:0d:64:e4:ef:f0:d0:2f:97:09:7b:4a:8a:92:2e:29:36:38:
         ca:49:87:25:4a:da:47:c1:6a:17:e7:ff:fe:3f:c7:87:61:fb:
         cc:11:fc:12:bb:41:58:28:00:e4:d5:76:78:d1:08:ed:ea:b1:
         3e:d7:e6:2c:1d:b7:cd:e6:b0:a6:1b:29:c7:12:dd:df:ef:59:
         26:ef:d7:3c:6f:a9:61:e0:26:66:6a:2a:97:60:33:48:0f:14:
         a9:99:8a:15:2e:6c:76:29:8e:bd:e2:bb:e7:e4:a2:35:dd:78:
         12:c6:ca:e9:ff:e4:22:26:63:52:1d:9f:37:9d:53:0d:a7:78:
         0a:23:cc:c0:9e:cc:5d:39:7f:35:ae:42:62:d5:0b:7b:0a:61:
         7b:b4:e2:04:bd:92:e0:12:80:58:18:a8:63:5b:22:3e:7f:4d:
         75:64:e9:54:0b:16:e2:4b:c5:92:21:43:a0:b7:2f:06:17:c0:
         7a:2f:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----