Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
File:                     42173031F4D425DF09DB731E4F7AC1011DE66F19.cer (raw, json)
Hash identifier:          0n2ZldOwraYZQb8GVPZ42Ongh4cDKINhJS3B0t1IfM0=
Subject key identifier:   42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6FA34A163B8CE1B01491EEB5942BC72BC949EB01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 17:24:51 +0000
Certificate not after:    Tue 25 Feb 2025 17:29:51 +0000
Subordinate resources:    AS: 263146
                          IP: 187.86.200.0/21
                          IP: 2804:1778::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a3:4a:16:3b:8c:e1:b0:14:91:ee:b5:94:2b:c7:2b:c9:49:eb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 27 17:24:51 2024 GMT
            Not After : Feb 25 17:29:51 2025 GMT
        Subject: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:48:69:ea:16:2a:c0:92:96:84:bb:52:67:
                    e8:e1:bc:2c:99:bd:62:ad:cb:8f:d1:de:86:f6:04:
                    0a:46:75:f3:6e:fe:2f:20:70:94:66:8f:1d:fc:07:
                    5a:b6:48:2c:cf:cb:1c:9f:90:11:64:db:05:2a:a4:
                    08:da:e5:c1:a3:86:d6:e9:d4:3e:b6:df:6c:6d:10:
                    b4:80:42:88:56:38:87:32:30:6f:22:85:1f:5d:45:
                    b7:47:00:16:e1:92:de:01:ca:65:7a:d0:d5:c2:c6:
                    a1:1a:29:2b:8d:75:4e:a1:f6:20:85:64:50:06:e9:
                    5d:11:8d:ea:71:c6:7d:de:18:b0:f1:18:3d:e2:4b:
                    35:c8:63:13:9d:41:5e:9c:f5:91:76:32:2a:83:07:
                    cd:a2:1f:ac:8d:98:8e:71:18:b9:41:32:c6:90:8c:
                    86:15:fe:72:af:15:c1:99:db:c2:7e:db:9f:bd:a2:
                    45:7d:7f:cd:1d:ae:d5:4d:8b:8e:22:93:68:8a:cc:
                    6f:97:6b:84:ae:4f:9b:d3:c8:4a:90:1d:d3:76:3c:
                    10:94:f3:6d:e7:a9:4b:51:b1:27:78:7b:31:a7:5b:
                    08:62:49:78:47:a0:93:20:b4:40:7b:2b:51:fd:c7:
                    1f:86:7b:aa:25:fb:8d:51:3b:2b:0f:81:b6:95:6a:
                    87:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.200.0/21
                IPv6:
                  2804:1778::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263146

    Signature Algorithm: sha256WithRSAEncryption
         02:a2:ba:98:1c:22:d0:2b:d2:1f:a4:92:e9:5c:ee:e6:21:2e:
         56:f8:12:e9:5f:4a:d7:86:24:8a:ed:36:33:2c:d5:3e:14:6f:
         94:36:de:77:f8:49:c3:1b:0a:2f:e4:25:23:db:d6:69:57:a4:
         43:73:68:ef:26:28:27:bc:f2:a0:00:3f:13:f0:47:13:2f:99:
         c7:67:77:96:8f:c4:db:4d:b7:93:57:31:12:d5:27:dc:88:6c:
         7c:4b:09:04:fb:fc:3e:e0:ec:67:23:35:b7:fa:41:bb:5b:f8:
         0c:d3:54:19:92:6d:fb:e9:40:3c:0b:10:a9:f4:4d:c3:c7:c0:
         d8:03:50:d9:24:1a:18:9e:22:6c:36:a2:ac:b9:c3:46:aa:5c:
         21:04:d0:d7:e0:92:d0:ae:a3:3c:1a:53:94:83:ed:58:34:9e:
         ba:44:ee:54:bd:56:31:56:ba:e9:0d:f2:7a:e1:6f:7e:84:d2:
         d8:f7:18:cb:64:95:b1:6a:10:9e:ec:6a:f4:0e:3c:c7:07:14:
         5a:de:fc:e0:09:fe:4d:87:6c:2c:0c:e2:50:7d:89:2c:92:66:
         b6:6e:5d:6c:59:1e:2d:2b:6f:b1:fa:69:69:e4:d8:9b:c0:6d:
         67:44:28:1b:a6:9b:44:89:15:3e:b3:61:a2:69:f7:fc:5f:4d:
         ee:a2:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----