Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C31F93F1F81C9519AD8D88CAF331D474F401D115.cer
File:                     C31F93F1F81C9519AD8D88CAF331D474F401D115.cer (raw, json)
Hash identifier:          tSZ2h/fKmQXt+kAtNkm4lKUjEb2v6u423mPBW4vjI48=
Subject key identifier:   C3:1F:93:F1:F8:1C:95:19:AD:8D:88:CA:F3:31:D4:74:F4:01:D1:15
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       13AEEAB669D4C5148311C9578ED81771BF1F10C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/C31F93F1F81C9519AD8D88CAF331D474F401D115.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2024 19:14:04 +0000
Certificate not after:    Fri 07 Feb 2025 19:19:04 +0000
Subordinate resources:    AS: 264861
                          IP: 168.205.52.0/22
                          IP: 2804:2eec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ae:ea:b6:69:d4:c5:14:83:11:c9:57:8e:d8:17:71:bf:1f:10:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 19:14:04 2024 GMT
            Not After : Feb  7 19:19:04 2025 GMT
        Subject: CN=C31F93F1F81C9519AD8D88CAF331D474F401D115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4a:98:8b:67:4b:60:d4:e1:fa:b9:e9:8b:ec:
                    b2:b1:d9:3c:22:c6:b8:14:ff:08:8c:1f:7b:aa:5c:
                    85:02:40:a0:fa:6b:ae:70:b1:74:6b:42:58:15:79:
                    94:a2:fb:cf:86:9e:ab:01:2e:df:28:98:06:f9:9c:
                    88:ed:48:e7:a7:df:94:20:e2:41:b1:d6:1d:bd:44:
                    3e:a9:8f:c0:8a:39:bf:a4:c1:d4:06:5d:f4:2c:e9:
                    a1:96:b6:69:18:02:14:3b:01:ea:63:c8:93:6f:3b:
                    fc:65:04:0d:bb:ca:5a:c5:22:5e:3a:d1:65:6d:a8:
                    fd:60:00:b7:ad:c9:05:f6:f4:bf:d6:2d:a5:b5:dc:
                    e8:0b:02:e6:91:90:2a:b7:27:47:e2:4d:86:32:95:
                    7f:31:5b:0c:fa:40:3e:25:35:8a:84:0a:be:7e:12:
                    3e:9f:21:3a:b8:08:8c:0a:14:39:f0:88:4e:1b:f4:
                    66:3e:72:cd:3c:76:fb:ba:d3:7d:1f:ee:87:6e:43:
                    60:7c:c6:6a:76:d4:56:f8:bf:b3:5c:24:3a:d5:a7:
                    c0:3a:78:5f:8c:04:88:7c:65:6f:32:b8:c4:97:9b:
                    6d:93:dc:00:65:e3:d9:3f:c1:1b:7f:70:fe:7d:e3:
                    fc:a4:fa:77:4f:83:af:6d:07:33:5d:86:ad:b8:e0:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:1F:93:F1:F8:1C:95:19:AD:8D:88:CA:F3:31:D4:74:F4:01:D1:15
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/C31F93F1F81C9519AD8D88CAF331D474F401D115.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.52.0/22
                IPv6:
                  2804:2eec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264861

    Signature Algorithm: sha256WithRSAEncryption
         5a:0f:67:39:b3:1e:63:48:a9:08:32:05:c9:93:e6:6f:12:95:
         91:bb:f5:b0:05:6d:35:d6:44:c8:7f:18:bb:4c:99:ce:4d:68:
         b4:50:09:b7:93:7a:82:06:01:87:37:5e:93:06:5c:e0:9e:35:
         31:ae:fa:6c:95:71:da:9c:b8:98:14:dc:95:2c:3c:10:04:f8:
         68:0c:04:0f:d1:a5:79:8b:00:ed:8f:1b:d1:1b:c3:e9:8f:54:
         93:6d:f1:1f:6d:e2:11:dd:20:aa:11:96:e4:d1:49:47:96:2c:
         1e:1b:c8:d9:85:71:f8:c1:16:e9:2a:8b:fb:d0:61:b0:27:d3:
         07:07:55:e9:62:72:21:5d:7d:57:0b:1a:4f:e9:32:19:86:0b:
         b6:d3:53:96:a4:7d:88:59:71:b0:0a:c9:ad:eb:c5:e4:ae:e5:
         bc:fa:67:d6:0e:d3:3a:a1:b2:52:b9:7d:84:36:79:95:47:84:
         d3:c9:00:2e:5e:9e:92:68:32:d6:2f:16:70:3e:2f:5b:09:6b:
         09:70:fb:c9:1c:ef:76:dc:61:57:ad:4f:1c:91:55:74:d7:20:
         aa:f7:ef:31:fc:11:9e:fc:a9:f5:a1:f9:30:ec:bd:0b:33:3e:
         ef:01:dc:48:95:46:28:60:6a:3a:f1:32:8d:5f:55:d5:46:42:
         8b:45:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----