Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
File:                     DB4775FF1387265B8F4B430B70351316A66B6D44.cer (raw, json)
Hash identifier:          lz6ePosFpB+m+FXagXa8X+xxHYxF0YJHv1lrnfqnrX4=
Subject key identifier:   DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4833A81C0EEA72C8861BF63155E488FB81955E98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Feb 2024 23:35:51 +0000
Certificate not after:    Fri 21 Feb 2025 23:40:51 +0000
Subordinate resources:    AS: 265485
                          IP: 168.197.156.0/22
                          IP: 2804:34dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:33:a8:1c:0e:ea:72:c8:86:1b:f6:31:55:e4:88:fb:81:95:5e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 23:35:51 2024 GMT
            Not After : Feb 21 23:40:51 2025 GMT
        Subject: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d6:d4:77:73:68:3b:f0:25:7a:c2:c1:92:67:
                    50:be:a9:13:59:66:f6:8d:02:51:32:8a:d9:1d:94:
                    47:b6:a8:40:2a:b7:f2:af:3d:2d:fa:3a:75:46:ca:
                    a7:85:7a:8c:5a:41:ce:d7:d6:da:48:3c:4d:3e:96:
                    ea:25:76:b7:49:38:9c:1d:f9:31:2e:dc:7b:f6:df:
                    64:3b:20:ef:94:1d:c9:63:e1:a5:74:b9:fb:3c:39:
                    4e:ee:c7:76:86:6c:af:c6:56:cf:70:48:2a:75:5c:
                    1e:8f:6b:f8:e7:89:e2:06:11:6a:27:61:78:b7:a5:
                    1b:ab:52:9b:86:0f:e6:67:84:82:c1:ca:dc:f4:00:
                    79:f8:8d:8a:22:92:c1:05:11:83:36:8d:b3:e6:23:
                    40:a6:13:1e:ed:de:2d:56:dc:15:e2:11:2a:d4:74:
                    d4:24:f4:78:bb:1b:a7:d8:b4:a5:82:de:25:5e:fc:
                    a6:66:fd:1d:01:e9:0c:db:97:13:ad:fa:ef:2c:8c:
                    a6:6e:05:a5:0e:21:48:67:65:15:9b:7d:4b:9e:c6:
                    52:1d:40:d2:1b:31:be:ae:e2:5e:a6:5d:e4:63:98:
                    97:08:f8:b0:68:f7:57:3c:9f:f6:76:32:c8:24:08:
                    20:ac:f5:fb:7e:c7:6a:de:f6:1c:d2:17:fa:89:d5:
                    82:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.156.0/22
                IPv6:
                  2804:34dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265485

    Signature Algorithm: sha256WithRSAEncryption
         6e:29:0c:16:46:7f:fb:4a:6d:cf:7c:c2:5b:3e:d8:9c:f8:5f:
         68:ee:6e:6a:9a:87:52:da:ef:9d:64:6d:66:ee:86:c3:28:f7:
         9e:09:d5:1d:a5:76:01:ec:0e:bb:f6:c8:66:44:23:b1:50:7a:
         fb:1d:63:45:8b:b0:d4:2d:7a:9a:f1:84:fc:c3:13:d4:26:b1:
         8b:87:0f:6e:6f:ff:13:24:3e:ea:0e:a2:74:7b:a1:b7:25:81:
         c6:18:42:92:98:2d:09:a9:63:b9:74:e9:12:85:04:d5:f0:23:
         cd:87:f4:c5:66:05:14:2b:08:05:f8:ff:b2:af:5e:2a:59:3c:
         ea:c3:7d:ba:30:e5:93:95:6b:6a:74:86:dc:08:0e:c9:29:be:
         12:fc:05:f7:ea:dc:6a:e6:7b:dc:81:55:60:0a:d7:1d:f6:66:
         d9:3c:31:e5:89:aa:f8:7c:d7:42:9f:a7:aa:41:6a:fd:45:3b:
         e7:32:1f:fd:61:f0:a7:2d:1e:96:f3:91:75:ed:b3:71:6e:2b:
         77:d7:91:6f:82:7d:08:c0:e3:fa:47:54:6a:77:91:11:c2:ab:
         16:55:19:a3:d9:89:95:54:2b:87:3c:be:dc:dd:eb:22:a6:6e:
         0c:a9:1c:a8:68:7d:5b:1a:04:14:b1:84:d9:e7:e0:ab:47:d9:
         54:6b:7a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----