Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C6F39CB66CAAB1ECFAB7A983842DBC75FA9B9828.cer
File:                     C6F39CB66CAAB1ECFAB7A983842DBC75FA9B9828.cer (raw, json)
Hash identifier:          t86g9pUHpedx/XstCmz9S1J27c+KtNKvNMWHIyCPa0w=
Subject key identifier:   C6:F3:9C:B6:6C:AA:B1:EC:FA:B7:A9:83:84:2D:BC:75:FA:9B:98:28
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4026C669C021A5D9EC1C164E20DAF8314F7CB383
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/C6F39CB66CAAB1ECFAB7A983842DBC75FA9B9828.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Mar 2024 13:02:22 +0000
Certificate not after:    Fri 14 Mar 2025 13:07:22 +0000
Subordinate resources:    AS: 268726
                          IP: 45.171.184.0/22
                          IP: 2804:59cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:26:c6:69:c0:21:a5:d9:ec:1c:16:4e:20:da:f8:31:4f:7c:b3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 15 13:02:22 2024 GMT
            Not After : Mar 14 13:07:22 2025 GMT
        Subject: CN=C6F39CB66CAAB1ECFAB7A983842DBC75FA9B9828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dd:a3:21:61:95:b8:95:2d:ad:ce:bf:8e:c9:
                    47:a7:ad:f1:66:bd:e7:59:67:07:97:be:5d:a2:da:
                    9e:93:c0:30:32:1b:70:03:c1:a5:f7:b6:23:ac:fb:
                    fa:29:02:1d:a7:20:38:24:d0:f1:e2:6d:82:1f:cd:
                    41:0d:ce:6e:ed:06:82:e9:eb:4c:46:bc:c1:e7:e8:
                    6d:e9:46:5c:2d:80:ad:7c:8c:b0:f4:2b:3b:d1:63:
                    77:ef:38:5d:25:2f:55:81:ea:70:60:f3:7a:60:0b:
                    49:d1:92:9f:3b:04:7e:b9:f1:9a:dc:b8:46:8d:43:
                    df:69:47:f1:52:40:5c:b3:86:ac:c8:55:0c:ee:c3:
                    c2:d0:da:48:1f:94:9a:5e:2e:54:50:bd:21:e6:62:
                    63:1b:d9:9a:77:ea:77:e9:97:70:bf:b2:75:37:81:
                    56:37:d6:51:2b:c1:8c:3b:97:07:0e:72:9c:c4:5b:
                    da:a6:63:c1:9a:c0:46:76:82:2a:09:70:38:46:98:
                    29:cc:06:dc:12:c3:be:33:55:2f:b6:52:b1:19:d1:
                    db:11:99:de:38:0c:70:bd:8b:72:9a:ae:76:9d:94:
                    46:f4:37:bc:d7:7d:80:76:b7:19:80:a6:43:9f:40:
                    ce:e8:66:f7:e6:7a:5b:32:8b:ac:a6:c8:cf:45:a9:
                    5e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:F3:9C:B6:6C:AA:B1:EC:FA:B7:A9:83:84:2D:BC:75:FA:9B:98:28
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/C6F39CB66CAAB1ECFAB7A983842DBC75FA9B9828.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.184.0/22
                IPv6:
                  2804:59cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268726

    Signature Algorithm: sha256WithRSAEncryption
         3c:ae:8b:6c:dd:1c:33:02:59:b1:8c:00:8a:7a:a5:52:0e:90:
         9d:c9:9a:7c:7b:8f:1b:8b:07:e0:6c:a6:b3:a4:04:d2:2f:1a:
         fd:9b:f4:ff:57:25:2e:0c:26:62:1c:dd:48:f7:96:95:7a:84:
         33:38:64:db:e7:d3:f6:4e:36:b3:ab:78:49:09:d9:36:ad:89:
         0f:6e:7a:66:e7:be:b1:0b:c5:fc:1f:4f:4d:38:03:39:5f:02:
         eb:5d:ee:4a:60:4c:cb:25:a4:05:13:22:53:09:3a:5f:7c:f8:
         c1:ea:65:5e:a3:87:e2:e3:11:00:36:3f:99:e4:75:da:58:99:
         c5:68:f8:5a:92:cd:52:6b:19:24:19:78:62:b8:f3:2d:69:ef:
         23:9a:fb:28:02:82:b9:57:55:2a:a2:c7:4b:90:08:81:2b:ab:
         c5:1f:71:11:2b:70:24:8d:7d:1f:9d:94:67:33:01:3e:46:d1:
         52:2b:b4:d4:4e:3e:91:4f:21:d6:27:7d:45:64:cb:68:dc:66:
         d4:e6:f4:d4:1f:b6:91:78:d7:99:32:e2:0a:71:0c:38:f6:55:
         f7:86:45:2e:93:20:fe:26:3b:11:13:aa:d1:83:ad:96:f4:62:
         59:6f:8c:53:5b:db:93:0a:f1:dd:82:a8:ac:18:7a:14:8a:69:
         9b:ad:74:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----