Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.cer
File:                     CE6673E4E2D92D342F7617B1A3604FBF01849C9D.cer (raw, json)
Hash identifier:          qn8B9O6cBNB0k6D6uZAM7DxPt+USILuY6fxMmxDuoPo=
Subject key identifier:   CE:66:73:E4:E2:D9:2D:34:2F:76:17:B1:A3:60:4F:BF:01:84:9C:9D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       65090D55B5457FF921020F17C78D32B8F7576825
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 17:50:50 +0000
Certificate not after:    Mon 31 Mar 2025 17:55:50 +0000
Subordinate resources:    AS: 273458
                          IP: 2804:8ef4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:09:0d:55:b5:45:7f:f9:21:02:0f:17:c7:8d:32:b8:f7:57:68:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 17:50:50 2024 GMT
            Not After : Mar 31 17:55:50 2025 GMT
        Subject: CN=CE6673E4E2D92D342F7617B1A3604FBF01849C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:b4:3a:cc:b8:df:70:93:f0:9e:5b:26:77:
                    7e:b8:a3:47:f2:3f:32:e4:52:b5:c4:db:55:7b:01:
                    25:c4:25:cd:4a:bf:96:ed:69:be:9c:96:a6:75:38:
                    37:ed:c1:12:ae:75:ff:f6:74:9d:87:2d:13:2c:8b:
                    5b:7d:37:02:23:14:b6:7a:f9:3a:30:f3:cc:7e:83:
                    b2:a8:5a:50:79:b1:64:7e:e8:6e:b6:b8:33:23:81:
                    61:b0:38:33:74:1a:92:47:7b:a0:f4:bb:08:60:5b:
                    34:3d:ae:ec:da:5d:18:f7:20:fc:a3:ee:d1:cf:13:
                    67:85:fd:20:dc:d8:69:29:14:64:8e:a3:33:d0:a3:
                    c1:97:db:3c:91:1c:f1:b1:a9:5b:03:0c:92:7e:ae:
                    e9:ea:7e:de:e2:34:63:86:74:88:d7:1d:0d:0b:19:
                    fd:e4:01:e6:42:85:1a:9b:7f:1c:73:dc:d5:c1:34:
                    c7:68:1a:87:88:c6:87:4e:25:8b:54:4d:74:d2:56:
                    0a:79:71:4b:70:66:43:7b:7a:00:29:23:d4:26:b9:
                    12:78:d3:6a:f2:63:fe:a5:14:ef:43:5d:90:d2:d4:
                    14:00:21:f4:7f:ac:6c:c9:be:b6:f3:a4:67:25:23:
                    2d:31:50:3c:06:15:bf:69:b5:c8:bd:ad:b7:c0:16:
                    74:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:66:73:E4:E2:D9:2D:34:2F:76:17:B1:A3:60:4F:BF:01:84:9C:9D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273458

    Signature Algorithm: sha256WithRSAEncryption
         3c:cd:0e:ea:0c:7b:8b:be:12:77:fa:b9:35:b3:2a:9e:4b:0d:
         0f:2b:00:f1:a4:f1:cd:4a:33:40:53:01:9e:3e:03:7c:9c:cd:
         bd:04:50:10:58:d8:99:19:12:33:82:e2:a5:76:9b:83:98:bb:
         3a:a8:53:22:4a:1c:50:42:fa:00:91:14:75:36:43:e0:8b:40:
         ba:02:65:9b:e9:c7:7b:45:8b:63:ac:52:15:bd:c6:63:97:6e:
         c0:ad:76:9c:72:49:6c:ed:6f:e8:a3:fa:0e:d4:5a:97:53:9c:
         c8:6a:d7:c8:53:85:7d:6a:9c:be:98:c2:db:c7:b1:87:39:36:
         79:b1:cc:a7:96:f8:44:a5:b0:5d:47:d7:2a:cd:31:66:2a:02:
         8a:02:3f:72:00:67:3b:1d:f0:d5:9e:5c:4c:35:31:be:4b:df:
         c8:c4:cf:a5:49:a6:68:be:9c:28:f8:35:f1:a3:78:e3:c1:10:
         43:a5:bf:ab:a8:82:d8:e9:92:d7:f5:0a:37:2b:ca:4c:79:18:
         13:ee:f0:67:f6:60:92:35:7d:b2:d6:74:4d:2c:cf:37:a3:5f:
         79:d2:9b:af:f7:bc:13:9b:13:8b:69:fe:9f:54:91:18:b0:32:
         b1:a6:a2:df:bb:08:a7:51:81:9f:fd:6a:c1:d6:34:13:63:de:
         37:41:76:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----