Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.cer
File:                     6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.cer (raw, json)
Hash identifier:          aKqD4G4n/AIldIzQgDS0j1j5iLnYOz1DyszCUfcf/bg=
Subject key identifier:   62:65:00:9F:93:CC:6C:26:C0:0F:D1:D6:FE:FE:B8:01:0A:0B:DF:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58C604F0E9F1E79F83C63DE4A3C7B59A0E375780
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 12:06:37 +0000
Certificate not after:    Wed 12 Feb 2025 12:11:37 +0000
Subordinate resources:    AS: 262978
                          IP: 143.0.120.0/22
                          IP: 186.250.184.0/22
                          IP: 2804:4d44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c6:04:f0:e9:f1:e7:9f:83:c6:3d:e4:a3:c7:b5:9a:0e:37:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 12:06:37 2024 GMT
            Not After : Feb 12 12:11:37 2025 GMT
        Subject: CN=6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:9d:ac:fa:db:5a:9e:d3:52:3a:88:23:d3:
                    85:7f:f1:26:3c:4d:f5:5b:37:12:81:ea:cb:ff:2b:
                    e2:22:b4:e3:94:c5:26:01:93:9f:c8:47:9d:13:ee:
                    fc:22:60:e5:3d:e0:75:e3:68:2b:c6:49:cb:d5:87:
                    e7:d3:17:42:4d:d8:dd:e6:c4:d7:fc:09:d2:2c:29:
                    eb:ea:b0:c8:76:f2:cf:a2:69:d6:a1:1c:82:cc:59:
                    82:af:ad:0d:fb:6c:19:49:33:7a:83:3b:ec:24:c4:
                    1e:8f:fa:83:ba:50:4a:7d:86:ed:d5:0d:38:82:2c:
                    58:75:27:db:a4:8c:a2:ca:88:3d:19:bc:97:ab:e7:
                    80:1b:13:76:61:0f:91:22:53:6c:34:ac:1f:d3:17:
                    dd:38:57:fe:88:e1:37:75:1e:87:29:04:95:7b:9a:
                    4e:1d:76:ab:39:7b:d4:da:1b:8a:03:49:d8:7d:f3:
                    88:1d:53:89:40:0f:e5:b0:0e:af:8f:d3:22:51:19:
                    a7:a9:59:f4:6a:16:89:15:f8:37:f2:66:b6:24:4d:
                    fb:44:5e:0a:77:e7:4f:21:d9:d2:f4:7f:2d:f9:19:
                    b7:e7:a5:f4:4f:06:54:ef:14:79:7e:cf:32:ea:22:
                    52:bf:c7:40:0b:24:f2:24:9a:0e:1c:5f:03:ff:a0:
                    7d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:65:00:9F:93:CC:6C:26:C0:0F:D1:D6:FE:FE:B8:01:0A:0B:DF:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.120.0/22
                  186.250.184.0/22
                IPv6:
                  2804:4d44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262978

    Signature Algorithm: sha256WithRSAEncryption
         a3:58:7a:6a:b9:0d:e9:f5:88:b5:20:4e:13:a8:c9:48:59:2c:
         90:5e:64:fe:04:68:56:76:ea:ed:76:f6:64:8c:41:d8:da:33:
         93:f8:7c:a7:31:eb:1b:75:c3:68:69:6c:10:9a:91:b6:15:b4:
         3c:52:40:cf:f0:f8:50:ec:d3:3b:9a:bb:0f:9d:26:bc:ac:ef:
         39:c6:82:9d:2d:93:7a:71:e9:9d:62:fe:44:56:25:16:dd:51:
         4b:c3:fc:2a:3c:89:0b:f2:61:0e:fb:ee:a7:ae:4a:45:07:9e:
         85:b8:52:14:f8:fc:d0:94:a0:7e:6a:59:30:a6:8a:1c:2d:d5:
         05:c8:b1:5a:94:c1:ca:d7:32:26:69:c7:66:b5:cb:c6:d8:5e:
         ad:3e:48:e6:ed:13:ae:f3:08:fe:cf:c6:19:00:37:bf:20:a7:
         15:4d:cb:b4:bd:a3:ab:5a:fb:46:f7:7c:f2:c3:fc:cc:38:84:
         d5:fd:df:42:34:3f:f5:55:cd:14:90:de:fb:a4:90:d9:ef:cb:
         9f:15:f0:7f:13:58:9c:04:1d:ce:b5:e7:4d:87:3d:48:c4:45:
         e0:2b:57:26:36:c6:16:2d:17:a2:c1:c0:48:91:f6:c1:3f:d6:
         60:c2:db:9b:2d:d6:2e:a1:31:43:09:01:72:58:67:39:82:3d:
         9d:01:79:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----