Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.cer
File:                     D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.cer (raw, json)
Hash identifier:          f1R3ruvNAN89xBUGZIOg/hfLdr8aHM10LHT8vi2CQNg=
Subject key identifier:   D2:84:56:6F:CD:D2:FF:AA:4E:66:CF:4D:07:47:C8:DC:08:2D:8C:A6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       02DDDE222D0B05689582DDDC63507571518088FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0/D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2024 15:04:58 +0000
Certificate not after:    Thu 13 Mar 2025 15:09:58 +0000
Subordinate resources:    AS: 266222
                          IP: 192.140.24.0/22
                          IP: 2804:3c94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:dd:de:22:2d:0b:05:68:95:82:dd:dc:63:50:75:71:51:80:88:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 15:04:58 2024 GMT
            Not After : Mar 13 15:09:58 2025 GMT
        Subject: CN=D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cc:59:de:e1:71:53:20:20:ab:f3:60:b4:f9:
                    84:b3:41:ee:96:cc:75:db:a8:3d:4c:19:b1:77:3e:
                    6b:f5:bd:5a:b6:24:32:03:73:9a:01:fd:df:e7:0e:
                    f0:45:be:46:ec:8d:48:69:02:2d:a0:a2:0c:de:25:
                    a3:13:d3:b2:ff:2b:4e:d9:95:58:a4:eb:ce:19:86:
                    57:da:fa:da:ee:bc:17:41:77:b3:1c:99:3e:0f:7f:
                    1c:7c:58:1e:fe:30:1b:86:99:9b:e1:45:c1:8a:c0:
                    bf:a7:74:2a:f7:bc:23:7a:87:ab:96:45:7f:9e:de:
                    89:0c:d8:cd:35:f2:9b:c3:07:03:fa:64:5a:db:98:
                    14:b2:55:72:97:9f:bc:ec:e8:d8:93:ba:aa:e9:c8:
                    86:b4:f4:cd:37:32:e8:98:c3:e6:0a:40:21:c4:1f:
                    65:78:fd:64:73:b9:dd:d8:71:24:01:29:98:fa:60:
                    c0:a4:2c:97:f0:f4:a6:52:78:18:53:75:1c:e4:ca:
                    99:7e:e2:a1:45:87:70:39:ef:d9:b3:53:1e:e6:4d:
                    29:52:79:3e:1a:12:e0:aa:1c:b6:2e:70:97:8a:d8:
                    14:74:78:49:1a:c3:c5:dc:ea:44:26:82:3b:ab:75:
                    5f:a6:96:be:32:68:27:81:3e:f7:c2:30:e6:08:ed:
                    ef:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:84:56:6F:CD:D2:FF:AA:4E:66:CF:4D:07:47:C8:DC:08:2D:8C:A6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0/D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.24.0/22
                IPv6:
                  2804:3c94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266222

    Signature Algorithm: sha256WithRSAEncryption
         35:e2:15:b7:19:cb:f7:77:62:7a:14:db:a3:e0:5e:ff:13:c3:
         09:94:0e:40:9e:f6:d2:94:43:32:da:b3:0d:a0:87:af:c1:f7:
         fe:54:3b:90:1e:60:a2:e7:a3:bf:23:05:03:24:d8:c7:c6:39:
         f6:79:48:fd:a0:d9:73:b0:bb:3a:96:3b:28:a0:48:b4:41:8d:
         12:66:68:23:14:40:df:5c:dc:43:79:e0:33:ce:f7:60:98:ab:
         d9:ea:01:cb:0f:b2:d4:c9:8d:21:f6:f3:23:b4:14:55:ed:00:
         2f:1d:f7:88:2f:6a:69:e9:f9:b7:38:39:27:06:c2:b3:ed:14:
         93:bd:a4:d9:38:2f:f9:58:ab:b7:4d:87:82:b5:c7:a0:81:a0:
         cf:b4:23:15:0e:e5:33:ec:ad:ca:5b:1a:95:0c:3a:a7:c3:e9:
         1d:94:79:4a:aa:2a:da:5d:53:35:57:46:03:f2:93:9d:98:0d:
         7d:3d:6b:53:09:6e:cc:38:9d:3f:77:65:79:af:43:ec:c0:2d:
         5c:8f:9a:f9:65:be:e3:0e:4a:99:48:cb:c7:95:d7:5c:34:39:
         e4:f4:96:a4:60:4b:03:a7:19:3f:f0:bc:e3:13:83:c3:ed:51:
         a0:47:8c:c1:38:00:bb:2d:86:9a:94:3a:96:46:a9:d4:91:34:
         bb:57:94:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----