Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5FE811DE36B4F9CC446D3A204D0F739A65A5EF36.cer
File:                     5FE811DE36B4F9CC446D3A204D0F739A65A5EF36.cer (raw, json)
Hash identifier:          4JTym9oOJe3d3TH5OSKVT3kcgq3nq+ibSt3XqOHsBk0=
Subject key identifier:   5F:E8:11:DE:36:B4:F9:CC:44:6D:3A:20:4D:0F:73:9A:65:A5:EF:36
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5218FF1FC65CAD66EAD57CC60978A5AAA5902E8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/0/5FE811DE36B4F9CC446D3A204D0F739A65A5EF36.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 31 Mar 2024 02:04:33 +0000
Certificate not after:    Sun 30 Mar 2025 02:09:33 +0000
Subordinate resources:    AS: 61869
                          IP: 131.0.36.0/22
                          IP: 138.99.24.0/22
                          IP: 2804:1a94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:18:ff:1f:c6:5c:ad:66:ea:d5:7c:c6:09:78:a5:aa:a5:90:2e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 31 02:04:33 2024 GMT
            Not After : Mar 30 02:09:33 2025 GMT
        Subject: CN=5FE811DE36B4F9CC446D3A204D0F739A65A5EF36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cf:cc:00:fd:29:a0:4f:4a:9d:77:d5:c9:cf:
                    d1:ab:c3:af:63:74:c2:57:03:a5:1a:9b:71:e1:fa:
                    b7:31:b4:cb:a5:f4:dc:5d:0d:8b:6b:42:91:5b:7b:
                    8a:c4:00:48:e7:d5:17:6e:81:cf:e2:94:f5:fe:f2:
                    06:ad:a8:26:b6:cf:a6:b7:71:6a:02:0e:b4:e5:a1:
                    77:43:44:dc:20:18:1d:76:d7:54:0f:6c:c3:db:38:
                    60:d8:91:94:13:4b:32:38:2f:01:f2:30:10:c8:ee:
                    65:8f:7b:09:b4:6d:c7:43:2f:01:03:c8:d5:64:56:
                    18:eb:d4:18:17:45:4c:8b:b9:d7:97:16:67:76:f8:
                    7c:20:53:22:14:92:56:dc:c0:4a:93:87:7e:47:e2:
                    8c:06:37:9b:9e:d0:01:38:92:3f:fe:a3:cb:7b:67:
                    5b:43:09:21:2c:19:68:95:25:59:98:6b:41:05:39:
                    b5:f8:42:30:31:89:ca:3c:96:bb:c1:5b:5a:d6:3f:
                    4d:6b:d1:f3:a3:b0:d5:ac:15:e6:62:2e:b1:fc:9a:
                    b8:73:37:67:24:d1:b4:00:1d:20:49:9a:54:10:ed:
                    c0:9d:ef:20:bb:9a:88:fd:8c:bb:fb:bb:f0:9c:25:
                    eb:67:aa:d7:f0:e0:94:e7:17:07:a1:0d:ae:b2:e9:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:E8:11:DE:36:B4:F9:CC:44:6D:3A:20:4D:0F:73:9A:65:A5:EF:36
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/0/5FE811DE36B4F9CC446D3A204D0F739A65A5EF36.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.36.0/22
                  138.99.24.0/22
                IPv6:
                  2804:1a94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61869

    Signature Algorithm: sha256WithRSAEncryption
         4e:b6:b5:5a:af:11:06:59:a1:3a:4a:df:e9:2a:47:29:97:04:
         74:c2:b1:85:43:c2:bb:9a:b6:f8:0b:dd:a6:4b:7e:13:2b:0b:
         5b:ad:48:78:06:83:ea:e8:46:97:ce:70:ec:33:03:03:3c:e9:
         0b:0c:9d:59:a7:a2:9c:e1:06:e1:0a:87:54:df:d5:e5:01:33:
         ce:63:35:dd:d5:9c:7c:8e:7f:a9:a2:91:25:6c:78:47:b4:df:
         e6:a6:f6:80:4f:bf:c1:ad:84:8b:a1:f0:91:68:f7:b0:8f:9f:
         e1:0c:55:57:25:1e:b0:3c:e0:9b:91:10:9b:49:a9:10:5d:33:
         a1:65:cb:07:26:54:26:38:fe:ad:df:55:b8:29:f8:1b:32:0a:
         b2:c8:0c:75:12:e9:79:cb:b3:e6:71:d8:34:71:01:7f:4d:9b:
         34:ae:ff:87:a4:69:eb:54:66:f4:d9:9d:c8:fc:36:9b:23:77:
         95:c1:3a:18:2f:dd:64:99:c0:8f:8a:7e:0b:ea:11:0c:66:d9:
         6d:6c:34:f3:01:55:f3:5a:00:f0:75:e4:48:a5:e9:a6:da:28:
         5e:97:c4:5e:50:4d:2e:f4:eb:a9:ec:7d:9a:6e:55:d7:92:6e:
         d7:55:3b:c8:54:52:f8:25:2d:2d:d6:88:8e:52:d8:a9:58:f6:
         5d:c4:3a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----