Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.cer
File:                     B928C789E5CF21532927DA25F3DD79DBEF62E896.cer (raw, json)
Hash identifier:          TBIzcm3z4e6lfBrZzXcwqMdmlQBfiklN4v1X9N+kUFU=
Subject key identifier:   B9:28:C7:89:E5:CF:21:53:29:27:DA:25:F3:DD:79:DB:EF:62:E8:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67F1B691F089F209EDD29850B15B337A4A0CE75D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2024 12:38:20 +0000
Certificate not after:    Fri 24 Jan 2025 12:43:20 +0000
Subordinate resources:    AS: 266360
                          IP: 170.239.252.0/22
                          IP: 2804:36a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f1:b6:91:f0:89:f2:09:ed:d2:98:50:b1:5b:33:7a:4a:0c:e7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 26 12:38:20 2024 GMT
            Not After : Jan 24 12:43:20 2025 GMT
        Subject: CN=B928C789E5CF21532927DA25F3DD79DBEF62E896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:12:ad:df:29:e6:2b:d8:ec:36:87:cb:da:
                    00:3e:ef:b7:11:b5:1c:2e:a7:13:3b:79:02:02:0c:
                    da:32:41:d6:39:c4:80:0c:d5:e5:24:bd:cf:b4:9f:
                    0e:40:2d:79:5e:11:62:6a:ae:a7:cc:ed:50:c2:ae:
                    27:d4:06:a1:50:59:13:1f:33:0e:9e:f9:1e:97:47:
                    dd:42:32:42:0b:a6:9f:58:58:61:56:37:93:86:98:
                    36:a4:65:38:a0:cd:f9:73:7f:14:88:7a:26:36:75:
                    66:23:c2:10:36:7e:92:0a:9c:67:be:34:3c:69:b3:
                    60:d7:e4:40:7a:41:6f:3a:fe:87:10:ca:7c:40:0a:
                    c0:fc:0a:9f:e0:e2:3d:e7:45:63:1d:a9:68:de:3c:
                    80:c8:f8:64:d0:bb:60:7f:56:bb:2e:e9:18:da:ef:
                    72:0e:79:21:19:ec:79:7e:7a:0a:fa:5b:32:b4:4d:
                    0b:1e:c8:61:b9:ac:f4:a6:02:52:e7:10:22:59:ff:
                    1d:39:9c:53:36:53:13:a2:41:b6:4c:3b:ab:0b:37:
                    bb:e4:2e:69:6a:1e:23:4f:85:5b:23:f7:0a:3c:4d:
                    e2:98:35:73:dc:37:c5:ea:50:cf:16:9c:83:65:5e:
                    a1:62:fd:7a:3f:e2:6a:53:63:85:90:40:b7:ae:7c:
                    b5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:28:C7:89:E5:CF:21:53:29:27:DA:25:F3:DD:79:DB:EF:62:E8:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.252.0/22
                IPv6:
                  2804:36a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266360

    Signature Algorithm: sha256WithRSAEncryption
         86:fb:06:fa:54:6d:3d:7e:1c:1f:3c:6b:34:05:30:b7:f3:0c:
         84:03:b8:83:1e:0d:4a:0a:44:b6:30:93:e9:92:89:2b:e3:3c:
         22:74:65:da:4a:d0:6c:46:ad:8a:12:f6:11:e5:85:e7:01:1b:
         5b:a0:f9:e4:c8:9d:c6:96:35:65:ed:6f:f8:81:83:50:bb:71:
         19:4a:9d:e9:79:c5:aa:ab:a4:66:94:85:47:1d:d2:11:af:23:
         bb:e1:bb:7e:ba:7e:75:00:8c:67:a9:25:af:f8:50:fa:6e:cf:
         53:01:fd:39:b5:ed:67:49:1e:de:0a:7b:5f:cd:1d:74:57:b1:
         a9:07:f9:0e:63:38:70:78:b2:cd:ce:55:9b:86:23:b9:ca:30:
         4b:dd:ec:84:cf:4f:df:8d:5a:f3:a5:f1:53:ff:73:76:2d:9d:
         ff:2b:ab:ef:f7:01:00:16:ad:46:14:69:24:c8:3a:93:66:89:
         82:ac:a7:51:cc:f4:fb:0e:6e:6e:dd:fb:37:9d:7c:3f:c7:67:
         dc:59:68:a1:48:cf:76:1f:b8:61:e7:af:f0:4f:9d:c8:5a:a4:
         c2:4c:d6:3d:d2:15:9c:f8:bc:7e:6c:7f:ab:8e:63:c4:3d:af:
         54:cb:05:36:e6:9a:50:7a:3b:72:41:fa:db:d2:49:65:c0:65:
         3c:5b:36:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----