Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.cer
File:                     844070BFA170F9C3D85A72401D93A864B2E4ACF0.cer (raw, json)
Hash identifier:          ThBVjIZlb2M4xPkR7nBCrevZz6RppIIm4BOKXpisxLw=
Subject key identifier:   84:40:70:BF:A1:70:F9:C3:D8:5A:72:40:1D:93:A8:64:B2:E4:AC:F0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D95C8574524DD93F1CC15E844B22F3BA409ADD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 23:34:50 +0000
Certificate not after:    Thu 13 Feb 2025 23:39:50 +0000
Subordinate resources:    AS: 268939
                          IP: 45.176.24.0/22
                          IP: 2804:5cec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:95:c8:57:45:24:dd:93:f1:cc:15:e8:44:b2:2f:3b:a4:09:ad:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 23:34:50 2024 GMT
            Not After : Feb 13 23:39:50 2025 GMT
        Subject: CN=844070BFA170F9C3D85A72401D93A864B2E4ACF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:0e:2d:12:dc:0a:70:aa:f5:ee:22:6f:ac:
                    16:35:31:01:77:80:2c:00:f5:87:75:77:fa:53:7f:
                    fb:f1:06:40:36:18:8c:58:d2:cd:ac:1c:ae:2a:4e:
                    59:60:ed:58:ed:e6:ff:ce:30:76:87:ca:8d:3c:72:
                    c3:83:fa:74:80:b7:d1:54:75:21:11:6d:35:f6:16:
                    29:47:b2:e5:9e:51:18:e9:33:f3:d9:62:6f:0c:28:
                    78:ba:33:20:48:8f:44:97:89:35:b8:5c:d3:a3:b5:
                    1a:2f:5d:86:58:16:ae:0d:0f:bc:fe:3f:9e:9c:36:
                    83:b1:6e:fb:6f:ed:bf:07:77:15:d4:95:5a:4b:7b:
                    92:e0:fb:b1:cc:f5:f0:a2:52:3d:fc:d3:8a:88:15:
                    ca:4d:fb:36:12:99:82:08:62:03:31:42:51:17:d1:
                    90:19:dc:0d:2b:0b:10:5b:7b:48:c3:d0:09:d7:41:
                    ae:1b:7b:d0:a8:33:f1:36:57:6e:a8:ac:47:4b:69:
                    97:f4:76:73:7a:44:30:1e:2f:ab:e5:e8:b0:86:37:
                    96:85:7c:d5:32:9c:c7:63:c0:34:b7:0c:b1:33:c1:
                    87:f7:e2:97:bd:53:b4:a2:e1:80:a1:76:58:0c:40:
                    92:87:5f:f8:5d:76:9a:8b:13:c3:b2:b0:d8:ab:52:
                    71:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:40:70:BF:A1:70:F9:C3:D8:5A:72:40:1D:93:A8:64:B2:E4:AC:F0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.24.0/22
                IPv6:
                  2804:5cec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268939

    Signature Algorithm: sha256WithRSAEncryption
         2e:39:da:e4:ae:98:fc:92:44:58:7e:62:2f:b6:97:00:c4:fd:
         bd:9f:55:55:bb:67:91:d9:cf:1e:f7:80:59:a6:c0:f4:5e:2b:
         8c:2e:40:a7:4c:84:6d:81:67:ff:eb:e0:44:b0:6f:51:c3:8c:
         0d:a7:91:90:80:6e:2a:0a:1a:16:03:20:e2:d5:a6:9b:7c:82:
         be:37:48:fd:f5:83:31:59:87:92:63:a2:98:ae:53:c0:b1:ab:
         fc:60:45:ec:f8:f5:38:95:a5:98:25:7a:93:95:86:02:3a:4a:
         3a:16:d3:3c:9d:f9:01:31:29:53:ef:a5:c8:a6:dd:a7:10:06:
         da:df:e1:c2:95:a1:22:72:86:f8:d8:e2:3b:80:d2:69:e2:df:
         3b:76:1e:b1:fc:91:c5:7f:4e:b7:39:8c:42:75:04:5f:7f:ac:
         39:3f:33:dd:91:4f:07:fe:53:02:e8:79:23:0f:c3:16:24:a4:
         13:b6:e2:b5:58:d0:d7:08:89:f2:fc:2b:ba:23:22:04:a3:eb:
         76:08:d8:6a:d2:3c:f9:21:d3:95:81:84:59:98:c5:45:d7:5b:
         cd:ef:05:bf:d7:b7:95:a3:de:58:4d:0c:2f:74:2e:bf:50:89:
         ed:74:83:7f:56:fc:3e:67:8a:fc:3a:b0:8e:df:8e:3a:ce:8a:
         2d:1e:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----