Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.cer
File:                     D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.cer (raw, json)
Hash identifier:          DNeWoR2S6XoEfSHijrkmQUrXIJDytDZkk2tav/8V8Ns=
Subject key identifier:   D3:3C:E6:A3:00:3B:1C:66:B7:E4:52:9F:D0:F8:AB:30:18:88:58:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E176BC617606B623AA6A08C4E3CC9614CC5A106
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Apr 2024 02:06:19 +0000
Certificate not after:    Tue 01 Apr 2025 02:11:19 +0000
Subordinate resources:    AS: 264211
                          IP: 138.99.164.0/22
                          IP: 2804:2444::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:17:6b:c6:17:60:6b:62:3a:a6:a0:8c:4e:3c:c9:61:4c:c5:a1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  2 02:06:19 2024 GMT
            Not After : Apr  1 02:11:19 2025 GMT
        Subject: CN=D33CE6A3003B1C66B7E4529FD0F8AB30188858BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:87:f0:3b:74:28:a1:4a:7f:9d:c8:79:b8:7b:
                    b5:4b:d0:4c:b1:ed:14:63:9d:b6:86:a2:99:72:89:
                    73:94:cb:5a:09:6f:1d:04:ed:8d:7f:61:75:56:02:
                    e0:a7:68:98:55:3f:fa:50:a8:22:e3:b9:5e:15:85:
                    42:a5:7e:23:5b:1c:d3:f6:a3:9f:42:da:f2:58:75:
                    58:84:5f:ae:7a:2d:73:a5:32:23:be:6f:22:8e:36:
                    fd:ba:ba:8c:57:70:7b:a7:91:df:f6:0f:fc:a8:ee:
                    4f:64:38:8d:82:7c:f8:b4:17:4a:5c:61:e6:23:f1:
                    fb:c3:4a:58:4b:1e:e3:f8:16:7b:11:2b:20:fb:82:
                    64:45:a4:f3:41:33:5e:78:ee:92:33:14:6a:b0:00:
                    32:e4:11:3c:a2:70:b3:0b:dc:6a:88:7d:fe:1c:13:
                    a3:84:92:fd:da:52:07:66:49:63:e2:3f:66:7d:53:
                    22:aa:b1:af:43:07:3e:ef:d9:66:d5:9a:a2:56:71:
                    ef:a0:48:ab:20:45:55:aa:50:7d:64:bb:3b:56:7a:
                    12:d9:ca:4e:53:44:1c:35:ee:1e:df:a8:ed:b8:46:
                    69:a3:4a:8f:76:dd:18:d2:1b:55:67:19:46:a3:66:
                    12:84:ef:b5:ad:ec:e3:6a:54:23:64:9e:ee:e5:ea:
                    8b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:3C:E6:A3:00:3B:1C:66:B7:E4:52:9F:D0:F8:AB:30:18:88:58:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.164.0/22
                IPv6:
                  2804:2444::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264211

    Signature Algorithm: sha256WithRSAEncryption
         7d:89:05:92:9f:ef:94:c8:fd:24:16:25:5b:65:28:01:f7:01:
         1e:f4:1a:6b:ae:ec:7b:3f:08:40:3d:ff:0b:83:1e:3d:f4:bb:
         b4:6c:b5:5e:78:56:16:2e:a0:00:d2:cb:73:a9:db:a6:65:3f:
         ac:ad:80:19:27:59:52:a7:8b:f8:ec:66:79:ae:3e:8c:ef:c1:
         e1:43:99:78:96:e2:f8:c6:fe:3f:f2:97:69:3b:07:2e:db:11:
         9f:d8:c2:eb:32:f7:ef:ef:53:e0:1c:80:8c:06:30:0b:51:bf:
         a0:e8:4f:bc:da:4b:ba:dd:df:8c:3c:18:53:f9:12:b5:16:e7:
         e5:83:70:18:2a:2d:5b:36:50:03:fc:8a:85:aa:fc:9a:d7:d1:
         60:c4:a2:e6:03:ca:8f:91:6f:05:a8:9e:07:ac:cd:43:f4:be:
         3b:21:82:0c:41:c6:6b:97:ec:db:56:a9:76:67:49:0e:27:c7:
         78:a2:b2:c6:9c:18:98:cb:8c:ea:ab:aa:8a:71:12:f7:d6:65:
         5b:9a:18:74:f3:98:26:ea:ab:c6:53:06:c6:82:08:83:6a:ed:
         d2:a9:64:c7:07:c1:57:9a:11:24:ac:5b:77:f0:65:ff:be:ab:
         8f:e8:9a:17:9d:a1:15:29:ac:9d:4c:db:d6:a5:a9:c2:d9:3d:
         c7:ab:07:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----