Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/51751B63E97EBF8F8F8083568EE27D930751549B.cer
File:                     51751B63E97EBF8F8F8083568EE27D930751549B.cer (raw, json)
Hash identifier:          SvjPsRV9KZSYRmFwO63rbTwofuLOf7x9C3dkJRltzNA=
Subject key identifier:   51:75:1B:63:E9:7E:BF:8F:8F:80:83:56:8E:E2:7D:93:07:51:54:9B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       07B7A90D19E871E8A0D4EB796F6A7266488FFACC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/0/51751B63E97EBF8F8F8083568EE27D930751549B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Mar 2024 16:54:40 +0000
Certificate not after:    Tue 25 Mar 2025 16:59:40 +0000
Subordinate resources:    AS: 265113
                          IP: 170.254.108.0/22
                          IP: 2804:330c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b7:a9:0d:19:e8:71:e8:a0:d4:eb:79:6f:6a:72:66:48:8f:fa:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 26 16:54:40 2024 GMT
            Not After : Mar 25 16:59:40 2025 GMT
        Subject: CN=51751B63E97EBF8F8F8083568EE27D930751549B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4a:3a:44:7b:9c:d1:06:0b:99:db:ba:af:45:
                    25:9d:b6:00:06:07:84:14:ff:ba:6e:b7:88:1b:c8:
                    a2:04:ad:e8:90:65:0b:3a:3f:c9:c4:12:c4:8c:59:
                    ad:51:80:09:8b:e0:4e:35:31:4a:cb:af:e5:39:37:
                    70:b9:f1:d9:c0:9a:2f:fe:8e:dd:b6:3e:25:4b:05:
                    4f:08:74:4b:bc:d8:1c:44:c0:a8:50:d6:cb:37:50:
                    29:dc:84:cb:f0:f0:aa:f6:ba:03:b3:87:e4:82:65:
                    91:a8:0e:df:c9:0d:96:89:66:7b:38:c3:ce:64:8e:
                    3b:ef:84:db:45:47:37:57:69:92:15:01:e8:ea:91:
                    75:60:df:4b:5e:1e:7c:63:2e:8a:6c:5f:ae:34:d4:
                    0e:36:f4:57:eb:89:41:b9:65:e2:73:07:8d:fc:09:
                    75:68:72:ac:68:c8:1a:df:2e:1c:7d:74:09:4d:3a:
                    21:e7:cb:c3:a7:ca:f8:90:e5:55:b8:f5:a6:dd:1b:
                    4c:8c:b9:e5:df:5b:6a:d5:39:d7:8e:cb:81:4a:80:
                    f7:6f:d7:47:ad:cc:4e:04:41:31:57:d6:99:8b:58:
                    62:88:12:57:f9:75:73:06:51:72:5d:93:81:db:db:
                    f7:b1:d7:b6:c5:6b:32:21:7b:14:da:58:57:a6:bd:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:75:1B:63:E9:7E:BF:8F:8F:80:83:56:8E:E2:7D:93:07:51:54:9B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/0/51751B63E97EBF8F8F8083568EE27D930751549B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.108.0/22
                IPv6:
                  2804:330c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265113

    Signature Algorithm: sha256WithRSAEncryption
         88:39:81:7c:2f:b0:e7:20:27:8a:c7:27:ed:d5:30:11:e6:36:
         94:60:f7:cf:70:e5:46:55:b1:cf:98:ee:83:fe:d9:a9:96:fc:
         7f:bb:9e:34:1f:6b:de:d1:04:12:df:23:b7:ee:f0:1a:b0:75:
         2c:ea:40:d1:3c:21:8b:32:75:f2:b0:06:d4:ad:27:e9:7d:ba:
         c7:59:ba:a4:54:13:11:a8:94:be:ca:80:1e:61:3f:4f:f0:e0:
         de:df:ec:ee:cd:b5:90:b8:35:00:1b:c0:b4:f2:0a:b3:7f:b7:
         2a:0e:99:29:6e:99:10:ca:b7:2d:4f:7d:aa:9a:63:21:e3:d9:
         73:3d:84:93:7f:ae:1b:19:6e:29:b3:27:1e:4e:0f:e2:eb:36:
         a5:66:c9:5d:2d:8c:f8:cb:25:d5:7a:91:78:4f:e7:f1:1e:93:
         89:19:3d:cf:37:97:12:9e:a8:5f:ff:cf:5d:d5:5a:72:6d:07:
         c6:ed:f4:c7:2c:01:24:78:e2:10:41:49:bb:e0:b4:53:84:c2:
         2a:a7:93:9b:70:80:e2:3d:ea:1f:6a:b6:4d:ca:57:8d:fe:f7:
         7a:83:61:da:1b:ea:db:c3:b4:ac:09:dd:fd:d1:cb:0f:2f:3a:
         7c:2d:75:05:2e:e5:74:c3:e0:cb:68:c1:aa:50:b7:30:d3:1e:
         de:0e:da:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----