Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/44A80C025AAF3AD8EC09391696998A951E52E60F.cer
File:                     44A80C025AAF3AD8EC09391696998A951E52E60F.cer (raw, json)
Hash identifier:          XOBr2tqdzHtefaSTYynODjXzzGiZGKL+7pk2JD3pdIw=
Subject key identifier:   44:A8:0C:02:5A:AF:3A:D8:EC:09:39:16:96:99:8A:95:1E:52:E6:0F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       52502EC4A1FF809083A6E2343618423D1B314EE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/0/44A80C025AAF3AD8EC09391696998A951E52E60F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Feb 2024 19:19:30 +0000
Certificate not after:    Thu 27 Feb 2025 19:24:30 +0000
Subordinate resources:    AS: 269714
                          IP: 187.62.80.0/22
                          IP: 2804:68c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:50:2e:c4:a1:ff:80:90:83:a6:e2:34:36:18:42:3d:1b:31:4e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 29 19:19:30 2024 GMT
            Not After : Feb 27 19:24:30 2025 GMT
        Subject: CN=44A80C025AAF3AD8EC09391696998A951E52E60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:1a:02:7a:2b:cb:ac:fe:1c:40:45:d9:12:
                    9d:a2:95:8a:b3:9e:ce:b7:c2:3b:dd:a8:42:bf:24:
                    42:d8:a6:93:42:30:74:71:ea:84:2b:1e:44:1e:25:
                    cd:90:9a:ae:af:36:50:5a:8b:cb:97:c0:7a:13:7d:
                    74:94:53:b0:c1:57:19:c8:91:bf:c6:91:03:ab:59:
                    ca:29:87:ec:bb:36:f4:10:23:27:80:4a:a4:15:1c:
                    2f:93:78:b4:29:bf:47:33:ea:8b:12:36:36:52:e6:
                    59:60:e4:90:6b:3e:f8:74:df:56:ab:93:4c:f9:66:
                    c6:ce:1c:71:3c:91:ca:9a:f7:f1:18:b2:45:91:5a:
                    7a:d2:a3:d0:62:83:68:3b:69:e8:89:6a:04:28:49:
                    6f:b5:2d:49:aa:e7:b8:01:1e:41:02:c8:a1:e8:24:
                    2d:ab:fb:11:d5:78:cd:69:89:c8:fe:5e:c7:97:c0:
                    89:84:a8:eb:20:0e:99:66:5a:db:d2:4b:94:9d:e1:
                    72:66:05:e4:6d:df:6c:3f:40:34:48:bd:fe:4c:fe:
                    7a:86:2f:f5:dc:84:fd:11:7d:9f:80:73:6e:59:27:
                    7a:cd:a2:eb:40:5e:91:52:1f:79:f0:f5:51:de:8c:
                    7e:81:af:96:f5:21:8b:4b:6a:c3:5c:f6:2e:e1:37:
                    1f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:A8:0C:02:5A:AF:3A:D8:EC:09:39:16:96:99:8A:95:1E:52:E6:0F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/0/44A80C025AAF3AD8EC09391696998A951E52E60F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.80.0/22
                IPv6:
                  2804:68c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269714

    Signature Algorithm: sha256WithRSAEncryption
         13:18:84:99:17:af:fa:a1:52:d7:e6:da:68:79:b6:ea:08:e7:
         82:23:6c:c6:40:ac:75:d0:fc:eb:01:6e:14:8f:f6:d7:75:53:
         da:fa:be:5b:4f:9a:0a:d9:a7:42:45:4b:e1:d8:3f:be:6a:b3:
         ec:4b:9a:44:46:45:d4:22:70:2e:a5:2c:7d:57:2e:39:b8:4f:
         97:b7:b7:f8:94:8b:ae:40:01:07:89:da:4e:20:85:51:4e:9e:
         6c:db:cf:68:4b:af:b9:a2:0d:3d:fe:45:a7:a8:6e:f6:ba:0d:
         64:6b:0f:46:cb:23:fb:e4:0e:89:c6:a8:e9:0c:01:8c:fc:8e:
         67:f1:18:8c:6b:c7:fd:90:a8:10:ce:f9:75:67:cf:db:11:17:
         f0:58:33:2a:51:38:e2:62:4d:5c:fd:73:94:82:08:af:11:7d:
         4b:64:7d:75:ee:d5:eb:ac:de:80:7a:73:12:11:a4:3c:74:9f:
         07:1a:89:18:9e:8a:0e:66:a3:fb:d4:c8:b5:74:b2:8a:0e:2a:
         54:85:51:4b:50:c3:31:78:e6:38:d4:1e:d8:a8:fb:98:77:8e:
         41:5c:c0:85:26:12:b5:0f:40:d8:05:d5:64:2c:86:dd:b0:5f:
         d6:4d:cd:4e:d4:be:4f:53:70:26:2e:65:ee:be:27:56:f3:4b:
         d6:99:a1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----