Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer
File:                     4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer (raw, json)
Hash identifier:          6csc+GFRHH6RvH67UoksJo1qkHcy2p+Cv7K9Y1rTojg=
Subject key identifier:   43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E3ABF74B8C0BCC8BE07144760CD7E2033D93150
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Mar 2024 17:55:06 +0000
Certificate not after:    Wed 26 Mar 2025 18:00:06 +0000
Subordinate resources:    AS: 266353
                          IP: 170.239.140.0/22
                          IP: 2804:3684::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3a:bf:74:b8:c0:bc:c8:be:07:14:47:60:cd:7e:20:33:d9:31:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 27 17:55:06 2024 GMT
            Not After : Mar 26 18:00:06 2025 GMT
        Subject: CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:b6:68:c8:41:5c:03:34:88:1a:84:4f:cc:
                    cc:3c:8c:ce:c2:c8:58:92:8c:3b:ca:02:85:15:80:
                    b9:22:21:ef:52:dc:ad:bc:94:b5:46:0b:b8:0e:cc:
                    0e:60:38:31:d1:92:a3:59:a3:47:c1:77:33:eb:3c:
                    d0:75:82:2d:c9:e8:bd:b5:46:43:ee:1f:c3:08:0d:
                    97:8d:7f:5e:bf:b2:63:ec:d0:68:ad:2c:16:b5:59:
                    cd:c6:fb:49:1e:a1:c6:cc:94:74:99:5d:6c:ee:c4:
                    0a:61:17:70:bf:de:ad:b0:26:45:59:d3:e6:79:83:
                    69:f3:a5:e5:1d:87:42:02:24:5c:0d:9c:49:3d:fb:
                    54:e2:9a:a5:91:1b:7d:ce:fa:77:d7:12:8c:0d:df:
                    d8:5a:a0:81:b0:fc:44:46:23:29:ae:4c:c7:c8:fc:
                    c0:75:e3:8e:56:13:42:81:cc:8e:d7:1c:8e:d1:98:
                    ec:61:ae:fb:26:6e:0a:99:66:6f:08:58:59:4c:62:
                    00:bc:74:5d:ac:1f:6b:f9:4d:05:a8:e9:61:dc:04:
                    5c:60:2d:c9:29:6a:fb:3a:77:ae:22:03:8f:4e:93:
                    17:66:dd:68:6a:db:01:d5:95:d8:02:76:d2:80:5f:
                    14:02:25:ba:5d:99:92:3a:67:37:15:7c:c3:79:b0:
                    b0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.140.0/22
                IPv6:
                  2804:3684::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266353

    Signature Algorithm: sha256WithRSAEncryption
         00:b5:10:db:b4:15:c7:a0:3a:7e:df:fb:3a:f1:97:8d:a1:59:
         62:f1:05:15:be:c0:fe:2c:f0:11:cb:58:92:87:6f:3e:8e:46:
         36:9e:69:bb:f4:5a:5e:fb:a7:56:fb:b4:a1:69:00:bf:29:f4:
         9e:89:21:b4:9e:c8:49:60:c5:e0:35:61:10:f0:b8:33:90:5a:
         97:82:ae:d0:73:f2:37:8e:be:f3:5b:b7:c6:c0:cd:ba:11:05:
         e0:40:e3:77:4d:1d:b8:3d:71:2e:ec:05:f2:c1:06:c1:29:91:
         9c:60:2d:cb:18:80:0d:01:c5:13:ca:c3:5d:9e:36:34:8d:91:
         49:b7:8a:4a:58:04:23:23:34:63:33:dd:80:3b:bf:63:1f:01:
         56:6a:21:74:f8:9b:ac:46:b0:a2:97:e0:2d:f3:20:23:50:e9:
         c1:bd:89:f5:72:7d:8d:6f:d0:2a:96:47:4c:f6:91:73:71:dd:
         08:2c:57:cd:50:f4:51:8e:53:1b:94:fa:03:de:84:b2:63:9f:
         ad:e1:49:e2:fb:7f:98:0b:93:b3:37:67:ca:e2:4a:b0:5c:25:
         d5:f1:3a:26:83:74:31:c4:19:94:9f:61:bf:6d:b3:3c:ff:f8:
         52:49:5c:8d:93:42:f9:9f:28:57:cf:1b:14:f7:87:f7:38:97:
         a4:9c:73:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----