Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.cer
File:                     CF765AF73EDCA320D37792FD19B73025D1DBDDE3.cer (raw, json)
Hash identifier:          LxTEae7UVrFPF1lwUCrvMdAk8CEKoXZciGbMTPg7DPQ=
Subject key identifier:   CF:76:5A:F7:3E:DC:A3:20:D3:77:92:FD:19:B7:30:25:D1:DB:DD:E3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7FDD5C10999E11D8DD6E628C72DCDD7404600A46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:25 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:25 +0000
Subordinate resources:    AS: 271091
                          IP: 179.48.160.0/22
                          IP: 2804:7620::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:dd:5c:10:99:9e:11:d8:dd:6e:62:8c:72:dc:dd:74:04:60:0a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:25 2024 GMT
            Not After : Mar 31 11:03:25 2025 GMT
        Subject: CN=CF765AF73EDCA320D37792FD19B73025D1DBDDE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:ba:0b:f6:e0:a4:b8:09:1c:60:0b:3d:62:
                    a9:45:93:6b:0c:dc:61:ae:38:60:6b:d2:8a:9e:e9:
                    c5:74:22:f4:a9:0a:2e:83:56:6f:34:24:5b:ab:8c:
                    d3:05:9d:29:14:f1:16:91:85:eb:81:c1:9e:82:2f:
                    31:87:c3:66:21:ca:3b:ad:df:50:94:57:47:05:4e:
                    f8:50:1d:03:b6:4c:b2:b7:99:13:d3:a7:14:f7:7f:
                    60:78:60:4f:c2:f2:76:ce:dc:bd:56:e5:85:a1:d2:
                    2f:81:07:58:48:0b:bd:30:5f:37:e8:1f:dd:ab:b8:
                    2a:03:a5:cf:a6:f0:34:f5:25:a3:61:34:3e:27:d7:
                    42:a0:02:60:9f:4a:93:21:6f:02:b8:a7:eb:86:09:
                    28:37:51:48:8f:d2:ba:b8:84:36:19:dd:d6:b1:ba:
                    e8:48:78:ff:3c:13:f5:d5:80:56:ab:42:c4:b4:d0:
                    d3:a2:55:a2:8e:ea:97:12:cf:b7:5d:94:2a:23:bf:
                    18:f7:d4:43:78:3b:b4:59:2c:b5:93:ca:8d:09:b5:
                    3d:0b:2a:be:dc:4e:62:d3:9e:ee:fd:04:d2:ad:8e:
                    b8:72:70:74:4b:09:00:5c:60:f3:9d:a3:32:ae:7d:
                    7c:6b:68:83:9f:23:2f:82:c5:df:5c:d2:0b:2b:48:
                    a7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:76:5A:F7:3E:DC:A3:20:D3:77:92:FD:19:B7:30:25:D1:DB:DD:E3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.160.0/22
                IPv6:
                  2804:7620::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271091

    Signature Algorithm: sha256WithRSAEncryption
         5e:5b:87:42:ec:ae:8e:d6:1a:75:88:34:f2:45:84:d7:00:63:
         31:9a:b7:1a:ea:67:50:b6:25:a0:14:e0:ae:26:34:d6:0d:bf:
         a4:99:72:79:27:9d:66:de:b4:3d:1b:2f:f8:af:2e:75:fb:4e:
         03:d5:0b:97:27:06:0a:59:c5:fb:99:6e:a4:79:3f:f0:aa:a3:
         43:41:d9:05:5e:42:77:58:0a:91:b0:8a:53:d2:e6:2d:f6:1f:
         1e:ee:86:1d:08:02:35:0a:90:22:b3:74:49:08:c3:7c:23:bf:
         3f:3b:46:82:59:32:b4:91:6e:65:c3:e0:6f:ba:a8:bd:b3:4a:
         ac:82:b3:a5:1e:69:53:0a:4c:66:32:2e:10:68:ab:f6:0f:f5:
         6a:2d:6e:38:9f:f9:82:26:a4:97:5e:04:0e:9b:33:73:af:3c:
         05:30:09:1c:5a:d3:22:9d:04:e8:f2:73:1b:5c:b6:10:53:c7:
         d4:e6:40:21:5e:86:31:2a:4c:62:4e:5b:d5:d1:ba:f8:c8:79:
         84:f5:77:11:ef:5a:39:85:29:7c:85:c6:6b:0c:92:92:b3:85:
         11:67:55:64:25:29:8f:82:1c:f8:5d:59:29:ac:39:0c:9e:6e:
         a5:db:73:da:09:e8:16:b0:39:0d:6f:1f:4c:77:ad:67:4b:50:
         52:1c:ff:20
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUf91cEJmeEdjdbmKMctzddARgCkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDExMDU4MjVaFw0yNTAzMzExMTAzMjVaMDMxMTAvBgNV
BAMTKENGNzY1QUY3M0VEQ0EzMjBEMzc3OTJGRDE5QjczMDI1RDFEQkRERTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OLoL9uCkuAkcYAs9YqlFk2sM
3GGuOGBr0oqe6cV0IvSpCi6DVm80JFurjNMFnSkU8RaRheuBwZ6CLzGHw2Yhyjut
31CUV0cFTvhQHQO2TLK3mRPTpxT3f2B4YE/C8nbO3L1W5YWh0i+BB1hIC70wXzfo
H92ruCoDpc+m8DT1JaNhND4n10KgAmCfSpMhbwK4p+uGCSg3UUiP0rq4hDYZ3dax
uuhIeP88E/XVgFarQsS00NOiVaKO6pcSz7ddlCojvxj31EN4O7RZLLWTyo0JtT0L
Kr7cTmLTnu79BNKtjrhycHRLCQBcYPOdozKufXxraIOfIy+Cxd9c0gsrSKfNAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPdlr3PtyjINN3
kv0ZtzAl0dvd4zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82ZEdtTnNoc2kxNHM4U255UVdRaGNmRzVSaVlkZmNCVGt3
RE1ZeGlRZFZEOS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNmRHbU5zaHNpMTRzOFNueVFXUWhjZkc1UmlZZGZjQlRr
d0RNWXhpUWRWRDkvMC9DRjc2NUFGNzNFRENBMzIwRDM3NzkyRkQxOUI3MzAyNUQx
REJEREUzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKzMKAwDQQCAAIwBwMF
ACgEdiAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCLzMA0GCSqGSIb3DQEBCwUA
A4IBAQBeW4dC7K6O1hp1iDTyRYTXAGMxmrca6mdQtiWgFOCuJjTWDb+kmXJ5J51m
3rQ9Gy/4ry51+04D1QuXJwYKWcX7mW6keT/wqqNDQdkFXkJ3WAqRsIpT0uYt9h8e
7oYdCAI1CpAis3RJCMN8I78/O0aCWTK0kW5lw+Bvuqi9s0qsgrOlHmlTCkxmMi4Q
aKv2D/VqLW44n/mCJqSXXgQOmzNzrzwFMAkcWtMinQTo8nMbXLYQU8fU5kAhXoYx
KkxiTlvV0br4yHmE9XcR71o5hSl8hcZrDJKSs4URZ1VkJSmPghz4XVkprDkMnm6l
23PaCegWsDkNbx9Md61nS1BSHP8g
-----END CERTIFICATE-----