Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.cer
File:                     D7EECEBFA6498EC7786E99D794BC594E9420DF2A.cer (raw, json)
Hash identifier:          WflhIZ/NhndrURQIJxd11qD776uWWxIL/ddLrHmNJ/A=
Subject key identifier:   D7:EE:CE:BF:A6:49:8E:C7:78:6E:99:D7:94:BC:59:4E:94:20:DF:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1115DE1E8CA57A0AB4CEA22C281CD8C4ACCFA426
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Mar 2024 18:35:34 +0000
Certificate not after:    Thu 20 Mar 2025 18:40:34 +0000
Subordinate resources:    AS: 52677
                          IP: 177.66.204.0/22
                          IP: 2804:c18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:15:de:1e:8c:a5:7a:0a:b4:ce:a2:2c:28:1c:d8:c4:ac:cf:a4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 18:35:34 2024 GMT
            Not After : Mar 20 18:40:34 2025 GMT
        Subject: CN=D7EECEBFA6498EC7786E99D794BC594E9420DF2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:a1:75:2d:48:f7:f6:3b:d5:5a:c9:b6:a0:
                    ac:c7:cb:a2:62:43:9f:aa:47:7e:2e:22:b2:a4:9d:
                    e8:2a:b3:f7:c6:ff:88:cc:f3:09:88:75:2e:e5:08:
                    d9:2a:c9:fe:a1:a8:5f:72:23:f4:eb:b1:d5:c3:c1:
                    9f:78:7d:b9:eb:81:92:98:55:f3:9c:53:e3:40:c8:
                    65:fa:13:14:ff:75:f4:12:5e:d4:0a:ca:c2:24:1b:
                    c0:ec:8b:74:0e:43:91:54:96:75:b0:d4:b5:fb:26:
                    c9:1a:25:f5:dd:f7:58:9c:da:ac:89:a3:e3:cf:0e:
                    06:a2:00:f8:69:a2:72:e1:47:76:59:cc:1e:14:9f:
                    ae:b0:0e:ff:d7:71:bb:c7:9b:8f:d3:32:84:91:a8:
                    30:ab:ff:4c:52:9b:a8:28:36:ef:c1:9b:47:1d:2a:
                    ed:d8:7e:a3:0b:25:12:bb:b7:c1:5d:91:91:15:15:
                    96:b2:f5:3b:15:c7:1f:61:39:dc:c5:b5:75:09:66:
                    33:2d:33:fb:0d:6d:b6:69:7a:b1:81:04:a9:9f:86:
                    2f:d5:93:23:f5:23:49:13:9d:cf:02:9b:12:5a:4b:
                    90:fe:ef:c9:3c:97:79:90:f0:80:7e:b8:31:55:54:
                    f0:04:6a:46:56:55:4d:8f:d1:c8:ab:d3:63:46:a6:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:EE:CE:BF:A6:49:8E:C7:78:6E:99:D7:94:BC:59:4E:94:20:DF:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.204.0/22
                IPv6:
                  2804:c18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52677

    Signature Algorithm: sha256WithRSAEncryption
         53:73:03:8b:de:6e:a1:0c:10:eb:9d:d9:a4:b2:17:c9:39:61:
         1b:1a:5c:50:3c:66:5a:42:19:a1:72:c9:cd:2e:50:3a:98:8a:
         a4:0f:dd:cf:1a:d7:7b:42:ce:95:9d:a8:7c:8c:7d:a7:51:a2:
         28:f0:f5:42:e7:ea:f6:17:83:e4:c8:af:41:b0:5e:8b:ea:db:
         7f:2f:64:4c:7c:57:bd:4a:58:f8:d1:99:72:42:f5:a8:f3:4a:
         38:28:f4:2f:81:71:8c:6a:60:28:20:68:30:12:82:de:f8:ff:
         e1:b0:51:80:ea:d0:dc:db:26:12:80:d9:6b:6b:ab:c9:dc:e1:
         21:d4:43:fa:a1:42:d7:eb:a8:07:e6:11:a2:ac:31:74:95:af:
         33:1c:2c:75:88:36:2f:50:f9:a2:56:b4:81:22:21:d1:68:a7:
         6b:7d:62:bb:91:fd:b8:ca:f2:f0:b2:40:a2:12:22:d0:8d:38:
         90:8a:43:a0:b0:2a:7b:f3:ad:1d:ae:ec:50:20:a4:32:fb:e2:
         82:21:d9:44:13:79:6d:dd:70:d4:c9:ab:4f:5f:56:d6:db:44:
         c0:26:34:f0:82:7a:bf:fb:03:da:cb:b0:97:d6:7c:23:12:88:
         79:83:8a:65:8a:30:1d:d7:e2:86:64:02:61:d6:fb:eb:56:8b:
         c8:07:c9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----