Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/392A09A6355AA6A75B3022C4C1EDE48A3AC4E87B.cer
File:                     392A09A6355AA6A75B3022C4C1EDE48A3AC4E87B.cer (raw, json)
Hash identifier:          gXfYvxQ6XdfqMSkrbZxEBsRDUJ394LvVA3KoX4yFPYo=
Subject key identifier:   39:2A:09:A6:35:5A:A6:A7:5B:30:22:C4:C1:ED:E4:8A:3A:C4:E8:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       05D7678062888046BE4D52E6B29D96F4A30E83D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/392A09A6355AA6A75B3022C4C1EDE48A3AC4E87B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 19:15:42 +0000
Certificate not after:    Thu 20 Feb 2025 19:20:42 +0000
Subordinate resources:    AS: 28587
                          IP: 177.128.184.0/21
                          IP: 2804:da0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d7:67:80:62:88:80:46:be:4d:52:e6:b2:9d:96:f4:a3:0e:83:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 19:15:42 2024 GMT
            Not After : Feb 20 19:20:42 2025 GMT
        Subject: CN=392A09A6355AA6A75B3022C4C1EDE48A3AC4E87B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:be:d3:71:8d:42:3b:0b:14:ca:ce:dd:64:
                    99:99:14:de:00:8d:e0:c1:a1:eb:b2:9f:98:38:f1:
                    ba:43:5e:fa:11:c2:ed:16:2a:95:41:36:12:44:40:
                    20:45:dc:f0:68:7b:20:7d:a3:a6:53:19:ae:72:ad:
                    60:45:b9:89:d3:2d:3d:7e:46:33:fa:e8:14:2f:56:
                    46:cf:a9:2a:86:fc:df:28:43:cf:2f:81:52:34:9c:
                    47:47:e4:ae:cf:9e:2a:2e:b9:d6:01:60:86:fc:d3:
                    ea:a7:a4:2f:f1:86:8c:1f:ac:ee:b3:d2:78:c0:c0:
                    23:60:68:77:74:ba:dd:66:1f:bb:b0:b9:61:c8:5d:
                    10:5b:fb:f2:e5:cc:e5:88:33:01:fd:48:84:17:b4:
                    f3:8f:37:81:d5:55:47:1d:92:89:8d:b8:d1:66:a5:
                    14:f8:3e:a0:c9:28:0e:5e:87:b3:47:1b:91:3f:fe:
                    54:7f:f7:fb:af:8e:e0:af:54:12:d8:7d:39:9f:c2:
                    9f:cd:f7:ca:0b:2f:55:cd:47:0f:77:4a:2e:c4:60:
                    e6:1a:e4:82:07:d2:58:89:18:43:4a:3d:e8:8e:6b:
                    5b:98:33:87:4a:f2:c9:95:2a:67:5b:24:4b:69:0e:
                    6b:07:61:0a:ff:ca:3a:ee:26:8e:e4:13:69:a2:f7:
                    43:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:2A:09:A6:35:5A:A6:A7:5B:30:22:C4:C1:ED:E4:8A:3A:C4:E8:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/392A09A6355AA6A75B3022C4C1EDE48A3AC4E87B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.184.0/21
                IPv6:
                  2804:da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28587

    Signature Algorithm: sha256WithRSAEncryption
         49:4d:85:04:7b:d5:00:25:6e:2a:a5:c9:c9:af:44:be:0d:0c:
         2f:ec:40:87:3b:9b:0d:71:91:b6:a3:37:b8:eb:7e:d6:ba:cc:
         30:5b:ef:f5:8e:73:ec:f6:94:20:f1:15:f2:d3:dc:c9:38:be:
         0a:ca:25:a3:2d:2c:07:f2:fb:fc:f8:f6:8e:11:d0:e7:af:5c:
         73:79:e7:e8:84:9e:85:d0:bf:fd:47:b2:5c:85:0e:6b:28:2d:
         8d:b5:69:e5:37:fd:6c:b4:98:11:b6:83:43:fb:9d:9b:1d:5b:
         67:66:3d:21:8d:5f:8a:fa:63:f9:a1:34:fb:f5:fe:6d:67:52:
         12:33:8b:62:76:9f:cd:be:43:35:70:8b:de:db:9e:cd:1e:ee:
         06:99:26:b5:43:84:4a:1d:99:df:09:60:59:24:54:64:fb:1c:
         53:c5:38:54:86:df:79:6e:58:c1:54:c3:86:5a:c6:d2:9e:cf:
         f2:77:11:d1:bd:cb:81:f2:cd:c9:67:98:ca:75:0e:70:92:7c:
         7f:92:30:a4:19:54:77:b3:71:ea:51:85:0d:3a:57:a6:02:4b:
         1c:cb:84:cf:2f:65:e1:5e:d4:40:29:6a:56:01:97:75:35:c2:
         fa:ef:c3:c7:fc:3f:d5:c4:c2:21:41:e9:0b:56:0a:65:f4:e6:
         8e:ef:8f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----