Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.cer
File:                     A1245EC98762AD84913719A50BE145ED5A82ADF1.cer (raw, json)
Hash identifier:          k/mHRFApHpB+EX68/P762Bo5is7Uhgyv9EvMqfgdGb8=
Subject key identifier:   A1:24:5E:C9:87:62:AD:84:91:37:19:A5:0B:E1:45:ED:5A:82:AD:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       241DCBE2E2074609898B42362010509882EEF3A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 19:23:36 +0000
Certificate not after:    Mon 27 Jan 2025 19:28:36 +0000
Subordinate resources:    AS: 27656
                          IP: 201.76.144.0/20
                          IP: 2804:9ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1d:cb:e2:e2:07:46:09:89:8b:42:36:20:10:50:98:82:ee:f3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 29 19:23:36 2024 GMT
            Not After : Jan 27 19:28:36 2025 GMT
        Subject: CN=A1245EC98762AD84913719A50BE145ED5A82ADF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b3:2d:a9:68:35:4a:4e:5d:77:0b:29:b6:5e:
                    29:b0:cd:b5:0d:68:7e:9e:4d:9d:c9:92:69:20:81:
                    5f:e4:94:de:0e:5b:8c:5e:9f:d8:38:2c:c9:3c:84:
                    dd:f3:c1:97:f1:81:51:de:47:51:89:1a:1c:ae:57:
                    5c:4c:c2:1e:fe:f4:93:39:1f:b0:bc:07:f6:db:69:
                    d1:ca:58:04:3d:75:3a:8a:63:02:f4:7f:96:03:6d:
                    8e:54:56:7e:e6:27:3d:d1:54:e9:21:77:b7:57:04:
                    38:ee:27:b7:c3:be:29:82:f2:56:34:48:21:36:16:
                    af:d1:cb:85:17:cb:36:87:fa:7b:06:dc:8f:21:b5:
                    55:e5:75:f8:1a:ac:55:de:ff:24:59:bf:14:40:72:
                    20:e2:74:ea:b6:4e:d6:80:d0:8a:e5:1e:37:c0:4a:
                    aa:81:f6:de:b8:9f:7d:7a:8d:22:f1:9b:db:f6:e4:
                    33:2e:16:e0:61:f9:b7:9e:8e:0f:bb:9b:f9:60:21:
                    57:dc:57:43:e2:a5:a5:22:03:04:4e:e2:5c:5c:31:
                    fc:b8:03:5d:0a:6c:0d:a7:b6:3c:d5:83:93:11:fd:
                    e1:08:5d:31:85:8d:1c:97:1f:78:57:2d:37:56:d5:
                    7e:b8:b1:2f:d2:19:c8:db:8c:4d:55:f6:26:54:6b:
                    ec:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:24:5E:C9:87:62:AD:84:91:37:19:A5:0B:E1:45:ED:5A:82:AD:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.144.0/20
                IPv6:
                  2804:9ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27656

    Signature Algorithm: sha256WithRSAEncryption
         6b:ac:2d:f2:07:af:d2:f8:3a:5a:f9:93:79:7c:b0:4a:2f:ea:
         87:1d:fa:d9:b7:a8:7e:48:23:f3:46:44:cb:dc:4d:24:97:84:
         34:0a:d2:2b:93:ce:b4:f4:f1:bf:ed:c2:1b:6c:8b:bc:2a:5f:
         6b:d1:8e:21:4b:88:cb:5d:36:51:d1:cf:69:69:a2:57:02:9c:
         c9:1c:3e:77:ba:e1:d8:63:35:57:15:2c:73:a6:58:e9:a7:0b:
         77:67:1f:fa:80:a1:8c:16:a2:11:df:3b:95:81:31:9a:79:36:
         49:0e:3c:5c:14:6f:84:b6:f1:fe:e8:2e:52:7a:77:92:05:5e:
         d1:65:37:35:3e:45:84:c6:dd:94:2e:e4:4f:0e:11:de:03:34:
         97:8e:0a:6a:db:a9:e8:b7:5c:55:77:bf:95:a6:c8:6c:5c:56:
         8e:c4:0d:c9:23:f8:20:89:8c:59:b7:d8:c0:10:ca:76:db:82:
         94:2e:c2:9e:d2:d1:f8:8d:a1:82:6e:34:fa:4e:9c:70:65:de:
         95:9c:bf:fd:33:54:df:26:ca:8d:62:a7:9e:48:98:df:5c:a6:
         98:8f:f6:8f:f2:2d:d2:9d:63:38:49:5c:eb:f1:f0:46:ac:a7:
         24:9b:78:dd:a9:52:8f:3c:9e:0d:2d:db:e7:4b:ea:3f:78:f2:
         88:5e:0a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----