Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9447D2427FA197D3E45945D47D680D6B09428530.cer
File:                     9447D2427FA197D3E45945D47D680D6B09428530.cer (raw, json)
Hash identifier:          wAxnbORoi49AszveM70+pCYvjledQc5YgL7REyvOGZM=
Subject key identifier:   94:47:D2:42:7F:A1:97:D3:E4:59:45:D4:7D:68:0D:6B:09:42:85:30
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4FE0F2C0215E7B3F6E21F055748B55E37CE1C527
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/9447D2427FA197D3E45945D47D680D6B09428530.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Feb 2024 20:13:30 +0000
Certificate not after:    Thu 06 Feb 2025 20:18:30 +0000
Subordinate resources:    AS: 268295
                          IP: 45.237.236.0/22
                          IP: 2804:4ef8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e0:f2:c0:21:5e:7b:3f:6e:21:f0:55:74:8b:55:e3:7c:e1:c5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  8 20:13:30 2024 GMT
            Not After : Feb  6 20:18:30 2025 GMT
        Subject: CN=9447D2427FA197D3E45945D47D680D6B09428530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:23:df:5d:07:77:f0:f3:42:f7:a2:89:80:
                    86:36:82:74:d8:fe:49:01:5a:31:ab:81:2e:b6:9a:
                    1d:a2:31:42:0d:df:2b:7b:c6:07:d9:df:47:6f:f5:
                    a7:a7:7b:a4:23:81:27:12:69:2e:3a:67:cb:e7:ff:
                    5f:0c:f7:04:5c:ee:01:3b:89:db:69:ef:eb:a6:19:
                    4c:b0:1b:93:dc:ea:e8:02:57:2b:bb:4e:7a:8c:c4:
                    9d:d3:d4:e3:f7:6d:3e:70:c9:90:47:32:d8:cd:60:
                    15:aa:af:17:ad:86:1d:eb:5c:7b:43:ff:bc:81:f4:
                    ae:cc:5c:9a:d4:b1:1f:8f:c8:d8:18:a5:21:1f:ca:
                    bb:55:bd:e4:dc:67:48:ba:43:56:d6:ad:77:25:8a:
                    40:78:c9:e4:8e:e9:a4:87:ec:3c:98:95:fa:7d:ba:
                    64:07:d7:f0:cc:a4:10:71:c0:72:1a:7a:f6:32:96:
                    02:45:8b:06:b0:9f:4c:ab:86:95:7d:d7:7f:11:40:
                    21:37:92:6c:0e:65:b4:77:5d:02:d9:e8:60:eb:48:
                    74:84:7a:3b:cb:a1:13:58:20:d1:0a:5d:d5:cb:03:
                    28:e7:e4:d4:0a:2b:44:d3:21:0b:9c:a8:90:b7:b9:
                    43:8c:22:b3:b0:fa:00:0e:c9:9e:34:85:19:ce:05:
                    4d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:47:D2:42:7F:A1:97:D3:E4:59:45:D4:7D:68:0D:6B:09:42:85:30
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/9447D2427FA197D3E45945D47D680D6B09428530.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.236.0/22
                IPv6:
                  2804:4ef8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268295

    Signature Algorithm: sha256WithRSAEncryption
         65:81:5c:68:8e:a7:5b:ab:80:80:df:5c:7e:62:f2:94:02:e6:
         e9:d9:6a:7c:21:e7:40:05:65:5a:05:52:c8:a4:d1:b4:94:d8:
         fd:cb:2d:2d:db:39:f9:81:45:8c:fc:de:ad:d7:77:72:d6:3d:
         3d:42:69:6e:bf:41:8e:39:53:de:f7:a5:a1:41:73:2c:19:7a:
         1b:2f:c8:81:e9:e9:2c:fd:f6:af:1f:20:47:6c:0e:81:47:20:
         3f:d4:92:c8:b7:7f:e3:5b:c6:52:aa:08:43:b7:e7:aa:e3:1f:
         17:b3:85:b4:ab:4b:c0:b9:31:9b:49:63:c8:d3:93:24:f5:f8:
         3f:38:2b:0d:c5:fe:ff:70:11:ce:88:6e:ee:1d:45:0b:ea:b0:
         80:b2:67:9c:cd:8c:57:17:2d:34:8d:53:66:49:e6:fb:bd:ca:
         94:e5:32:e4:09:9f:96:c3:79:a7:3a:8e:be:c0:93:e4:fa:56:
         82:6a:54:ab:87:0a:5f:d7:5d:0f:70:3a:97:1b:b1:3a:f8:33:
         18:13:83:60:a8:3b:3d:3b:3b:ac:53:7a:04:04:ff:a9:c2:15:
         c2:66:00:65:b2:e8:d0:bd:c5:d8:64:dc:29:21:ae:28:8c:d0:
         78:5f:18:8e:d0:65:c1:f3:e3:43:ce:7d:48:69:99:b4:44:fe:
         ad:3e:9d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----