Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.cer
File:                     3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.cer (raw, json)
Hash identifier:          OrQN/r/ECsItm0ayqpUDU3BIKW3H1HG2a0lTDCJ4tA0=
Subject key identifier:   3C:EB:A0:D8:B0:1B:41:E6:66:FC:70:F4:AC:5B:0A:B6:99:C6:5D:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E7C18FB752DC0FAB8B3920E37F881FBD7E5F8C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 21:56:24 +0000
Certificate not after:    Wed 26 Feb 2025 22:01:24 +0000
Subordinate resources:    AS: 52694
                          IP: 177.73.36.0/22
                          IP: 200.6.128.0/22
                          IP: 2804:c58::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7c:18:fb:75:2d:c0:fa:b8:b3:92:0e:37:f8:81:fb:d7:e5:f8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 21:56:24 2024 GMT
            Not After : Feb 26 22:01:24 2025 GMT
        Subject: CN=3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:78:a3:f2:67:db:d7:5a:b2:6b:01:76:47:
                    bf:ba:8c:ef:43:27:22:a5:26:8d:38:df:d7:61:f5:
                    c3:d3:8d:aa:8f:00:24:92:68:1a:e2:aa:b8:55:6a:
                    0d:fa:31:c5:9e:c6:d4:50:23:23:c2:ac:39:b8:e6:
                    de:8d:e9:1c:18:55:78:03:1e:fe:2a:17:65:fc:fe:
                    ca:6f:90:a8:b6:68:d9:d9:f2:33:4f:b7:a4:ee:77:
                    ae:db:1a:38:44:07:fe:a9:00:06:53:f1:5a:78:58:
                    5f:be:0a:45:34:89:b2:ca:3a:69:34:15:64:c9:86:
                    6c:85:48:eb:1a:d4:4d:5e:03:8e:62:a7:05:31:dd:
                    77:e1:71:38:d9:24:9b:47:65:ba:27:54:60:64:3a:
                    27:22:c7:e3:28:4e:64:5d:14:91:15:5e:e1:7b:db:
                    f0:93:ca:b0:be:90:27:31:bd:d7:e2:b7:64:51:54:
                    eb:89:92:83:0c:7d:94:f5:74:71:a7:03:58:bd:69:
                    80:64:b1:7a:b3:3e:7d:48:6b:69:cd:cc:23:72:40:
                    7f:55:7a:91:14:3e:09:84:d0:96:c3:05:25:c2:1e:
                    28:aa:bd:8e:04:75:39:1a:3c:42:ea:f1:f8:96:2b:
                    ee:ce:e0:93:65:b8:fc:03:c1:e8:d9:77:fc:f3:f8:
                    8c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:EB:A0:D8:B0:1B:41:E6:66:FC:70:F4:AC:5B:0A:B6:99:C6:5D:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.36.0/22
                  200.6.128.0/22
                IPv6:
                  2804:c58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52694

    Signature Algorithm: sha256WithRSAEncryption
         5d:fb:b4:10:fe:db:9f:f0:16:55:81:ec:41:1e:2a:92:86:c3:
         f5:fe:90:a3:92:97:95:ba:e1:c8:15:9e:92:d5:73:76:7e:6f:
         79:5a:79:4d:ce:33:6c:bc:61:ed:f8:ab:73:2c:3d:ed:0e:50:
         f3:8f:96:f4:25:0d:a7:37:02:3a:9a:f1:cb:e9:71:ef:f3:2b:
         cc:ce:2b:93:4c:de:de:8c:fe:4c:b1:44:72:b8:d2:69:b7:3e:
         e8:c0:cc:ac:3f:be:7f:a0:67:73:01:b1:4c:18:22:83:21:c4:
         b7:54:97:a7:71:64:4f:fe:d2:be:b1:f2:76:87:3d:74:73:ee:
         76:2d:cb:9f:f2:63:92:fe:01:ae:c7:3b:e3:f0:bb:df:37:67:
         9c:03:60:6c:47:77:4e:b9:4a:9a:e1:94:df:f7:17:e8:a2:20:
         44:7d:75:72:e5:d6:d1:4c:dc:78:15:1d:cc:fa:d6:52:67:f9:
         bb:43:43:ad:94:b8:be:02:d1:fb:c4:27:ce:04:a3:47:15:22:
         9b:f2:72:57:1e:ad:5e:cf:85:b6:e6:e6:f5:bf:a8:c6:16:6a:
         95:b6:8c:91:13:e6:aa:9b:cf:c1:ca:ee:55:52:05:e0:e0:f1:
         b9:9c:78:c2:f1:d4:75:f1:d7:ae:42:c0:cd:1c:72:e9:58:26:
         51:f9:c0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----