Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.cer
File:                     AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.cer (raw, json)
Hash identifier:          xIh2a0IM3GiTWp8RZr8jtUE6PMYd/4fgftOmGHhncVg=
Subject key identifier:   AB:8E:82:1D:6B:CE:52:5A:F5:AF:6C:1E:FD:73:0A:56:9B:1D:D9:FF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       426BA1337A2C7F1BBEA1E588807D70EFC250FB77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Mar 2024 20:28:11 +0000
Certificate not after:    Fri 21 Mar 2025 20:33:11 +0000
Subordinate resources:    AS: 268944
                          IP: 45.176.140.0/22
                          IP: 2804:5cfc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6b:a1:33:7a:2c:7f:1b:be:a1:e5:88:80:7d:70:ef:c2:50:fb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 20:28:11 2024 GMT
            Not After : Mar 21 20:33:11 2025 GMT
        Subject: CN=AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:81:40:00:a8:a4:2a:49:ad:a8:56:97:6d:
                    de:54:95:a5:86:c6:77:ff:52:9b:81:d2:05:f4:44:
                    e2:d4:bb:ad:3b:d4:cc:2a:8b:c3:d0:5b:6c:ec:6f:
                    c9:15:de:90:74:4f:08:97:35:41:c8:71:4f:01:c7:
                    25:ff:2d:d2:fc:be:da:35:98:58:0d:4c:ba:9d:e6:
                    5e:c2:87:37:58:08:fb:c5:14:61:72:22:c0:81:fd:
                    98:71:f5:33:c0:6d:e1:e6:b3:7e:82:2f:ac:08:80:
                    9b:f6:ef:e1:f3:28:50:91:69:c7:b7:19:4b:29:07:
                    32:c4:91:bf:78:86:a1:72:28:2a:c2:03:46:f2:03:
                    2d:54:30:ae:09:43:5b:6a:4f:58:49:df:ad:93:e6:
                    d2:4d:52:99:60:8f:42:da:4b:58:d3:9e:c0:76:64:
                    e3:3b:95:7f:2e:66:20:b7:02:2b:50:b6:01:41:56:
                    55:93:a4:93:dd:84:00:7a:b8:11:dd:e2:03:23:5c:
                    fc:3e:e0:e6:bb:e7:25:f1:41:d5:22:e8:ef:6e:e4:
                    db:38:92:83:bd:93:62:d7:30:48:6e:80:22:62:30:
                    3a:e9:6b:75:0c:78:14:e2:20:ba:11:6f:91:6e:ac:
                    93:91:a6:0d:0e:41:b1:bc:30:09:4b:bf:5e:de:db:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:8E:82:1D:6B:CE:52:5A:F5:AF:6C:1E:FD:73:0A:56:9B:1D:D9:FF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.140.0/22
                IPv6:
                  2804:5cfc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268944

    Signature Algorithm: sha256WithRSAEncryption
         50:cf:2e:47:f9:7f:b4:32:db:14:c9:34:0b:3c:06:e9:bb:e5:
         03:86:07:88:68:ff:ce:77:04:9e:41:5f:c9:0a:dc:42:a9:34:
         14:50:5f:7a:cc:4f:eb:dd:f4:c9:cd:11:e5:19:e8:5d:55:0a:
         03:e1:80:9a:29:03:70:72:a7:cc:69:6e:4b:46:69:9e:79:4b:
         8e:81:50:ad:41:fb:fd:f4:25:99:da:b8:8b:e1:d6:16:8c:c7:
         ae:50:ef:29:f3:47:16:fd:91:79:bd:5f:ca:fe:a2:4e:d4:47:
         26:40:95:f7:ac:9d:3a:45:94:2f:e3:2c:89:de:10:64:72:ae:
         b0:0a:f1:bf:75:25:8e:c4:11:92:0f:90:16:d4:c3:f5:3e:56:
         64:69:76:f4:e2:fd:8a:25:fb:b6:d2:0d:67:c7:67:e3:13:a0:
         c4:97:0e:8c:19:01:cc:b1:26:bc:4b:21:82:d7:48:64:ed:d8:
         63:73:89:d7:0c:95:86:bb:a9:2d:4f:1f:e8:ec:2a:21:d6:0d:
         25:e3:9c:8f:ab:76:12:c2:9a:d3:26:21:8a:77:91:eb:a6:be:
         86:e2:85:00:e5:02:74:28:28:6e:f7:f7:9c:3d:90:5a:9e:13:
         5f:a4:70:dc:91:dd:57:12:a2:de:e6:5e:29:b9:fa:26:96:08:
         d8:46:95:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----