Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.cer
File:                     861431B4FBAA21381E37B3A294DF68C5F828ED6F.cer (raw, json)
Hash identifier:          ugOyK0gLWNI9ZzMaYxCjTLa3qUS3JKGRdrfHOfnA/pc=
Subject key identifier:   86:14:31:B4:FB:AA:21:38:1E:37:B3:A2:94:DF:68:C5:F8:28:ED:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C5B8C8545D40978A00EFC554C0BFE90351B8FE8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Feb 2024 17:56:17 +0000
Certificate not after:    Thu 06 Feb 2025 18:01:17 +0000
Subordinate resources:    AS: 271357
                          IP: 177.124.108.0/23
                          IP: 2804:7a3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5b:8c:85:45:d4:09:78:a0:0e:fc:55:4c:0b:fe:90:35:1b:8f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  8 17:56:17 2024 GMT
            Not After : Feb  6 18:01:17 2025 GMT
        Subject: CN=861431B4FBAA21381E37B3A294DF68C5F828ED6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:12:f3:c6:a9:1f:85:2a:fd:fa:11:2c:f6:
                    d0:a6:fe:bb:89:10:d0:39:59:f2:27:c4:d4:03:11:
                    64:8c:86:cc:71:d9:51:81:18:d3:49:28:05:6d:73:
                    5f:43:04:cb:bf:14:7f:4e:7c:49:70:cc:b6:fa:14:
                    2f:0d:8d:9a:e1:f1:b9:e7:8c:83:79:21:af:f7:60:
                    01:be:8f:6c:fc:ef:8f:86:3a:73:5e:34:d8:8c:b9:
                    a7:f7:4c:fe:c6:b0:d2:2e:0a:ca:f7:8e:81:62:c8:
                    bf:f9:cc:ea:6c:ab:d3:af:7b:69:6b:76:db:dd:be:
                    70:43:87:12:94:61:6c:99:3c:be:36:4f:72:a8:67:
                    53:53:2f:a5:9d:30:11:f2:18:a8:ee:72:67:08:02:
                    f7:5a:f1:db:63:80:3a:6e:eb:1b:da:80:c3:3f:e3:
                    d7:e0:3e:84:04:48:96:ea:f6:d2:08:17:c7:4a:ce:
                    45:ea:a1:40:d9:1a:6f:f7:3f:57:4c:a5:c2:07:32:
                    6f:2e:8b:4b:a4:1f:50:1e:8c:a5:7d:d0:38:31:bc:
                    8d:cc:3f:cf:8d:6a:b3:61:4c:e9:85:b9:6f:9a:6f:
                    df:7e:ac:15:78:ca:85:a8:32:77:da:48:54:54:35:
                    f4:ea:26:8b:b1:a3:a9:1a:90:df:ad:09:4c:28:94:
                    28:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:14:31:B4:FB:AA:21:38:1E:37:B3:A2:94:DF:68:C5:F8:28:ED:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.108.0/23
                IPv6:
                  2804:7a3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271357

    Signature Algorithm: sha256WithRSAEncryption
         b3:fe:2a:47:6f:f9:71:c3:81:44:7d:9c:46:1b:ee:da:0a:b5:
         4a:8b:5e:ed:6e:19:fb:82:c1:0b:1a:7a:d5:43:9f:18:c9:77:
         1b:45:3b:87:0d:48:c0:cd:85:0e:dc:c8:26:41:35:07:d9:47:
         b5:ea:74:8f:45:94:33:be:d6:b0:bc:95:0c:c0:30:4f:0b:23:
         15:8c:c9:3b:f6:c3:e7:12:ae:d9:05:6f:e1:59:5c:af:b9:c5:
         2b:f4:2d:e4:1b:a2:76:ae:73:60:7e:8d:7d:ed:b9:1c:b1:56:
         1b:ee:ba:8d:89:c5:a1:9d:6f:c4:49:75:1e:d7:93:82:f9:7b:
         83:db:f5:4a:86:9f:3a:48:33:6e:5b:2a:af:29:2c:f5:ad:ba:
         26:c5:3c:e4:f8:96:eb:3b:4a:aa:8d:01:7e:d6:64:13:ff:07:
         40:e0:de:5d:29:27:50:5c:7d:1d:74:d2:a6:68:7e:2e:f4:69:
         af:73:d8:cf:13:1e:a4:08:e4:36:e6:79:cb:28:31:3f:f7:3e:
         61:38:e7:ee:6b:79:ac:87:13:7c:fd:c2:40:bb:7e:5c:60:40:
         27:82:19:1a:d3:27:a8:1e:e8:cf:3a:29:a3:71:d4:a0:02:a2:
         c0:de:36:ed:cf:51:24:cb:a1:00:4b:e3:5c:3b:13:85:50:b5:
         fb:df:c9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----