Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E8D05050BBB8CB1F6EE0DF46DAB34D5FD81FD439.cer
File:                     E8D05050BBB8CB1F6EE0DF46DAB34D5FD81FD439.cer (raw, json)
Hash identifier:          3ksm7o40gvByx01NbezoFYjKf/1r3l9FkrLHMolDvzs=
Subject key identifier:   E8:D0:50:50:BB:B8:CB:1F:6E:E0:DF:46:DA:B3:4D:5F:D8:1F:D4:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B39DC5940090C1A59923C76A3A52E96B28707CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/E8D05050BBB8CB1F6EE0DF46DAB34D5FD81FD439.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 18:32:32 +0000
Certificate not after:    Mon 17 Mar 2025 18:37:32 +0000
Subordinate resources:    AS: 267940
                          IP: 45.165.216.0/22
                          IP: 2804:5588::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:39:dc:59:40:09:0c:1a:59:92:3c:76:a3:a5:2e:96:b2:87:07:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 18:32:32 2024 GMT
            Not After : Mar 17 18:37:32 2025 GMT
        Subject: CN=E8D05050BBB8CB1F6EE0DF46DAB34D5FD81FD439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:96:f5:93:95:50:fe:7a:ee:d7:ce:72:41:
                    5c:79:e8:02:90:b7:d9:b4:d0:83:81:6f:51:79:fc:
                    ce:af:18:4b:b8:0a:b2:b1:ec:dd:b3:e2:6c:bd:9a:
                    02:86:3a:6d:a1:fb:2f:aa:61:ea:00:16:8f:93:5d:
                    3e:aa:94:fb:8c:34:87:55:db:75:a9:7e:72:3f:28:
                    a7:36:fb:35:27:b5:2f:a5:cd:24:28:4b:af:3e:f9:
                    5b:bb:bb:d4:53:d5:80:d5:35:c7:d6:c7:62:7f:b5:
                    38:ec:ba:b8:f6:c9:d7:ea:9a:08:f2:40:13:08:32:
                    29:63:29:9e:06:a2:38:69:4b:f2:71:00:6d:76:36:
                    06:4d:90:60:eb:e4:9c:25:cf:80:26:4c:77:19:44:
                    31:b9:2a:89:14:09:09:c5:38:c7:7e:1f:1b:29:dd:
                    0d:53:f9:00:ba:cf:ce:0c:de:c7:13:fd:2c:5d:ec:
                    d3:0f:7d:4b:27:aa:61:97:b8:dd:2f:27:90:07:a1:
                    41:33:8c:ef:f9:20:14:73:59:7c:f7:18:58:64:ef:
                    51:34:d0:a4:88:2a:29:88:50:39:74:c2:39:0b:90:
                    32:85:17:d2:19:ea:f5:ee:48:0e:14:c1:80:3c:ec:
                    a1:00:c2:9e:8c:71:92:17:7a:05:79:02:a9:22:ef:
                    a9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:D0:50:50:BB:B8:CB:1F:6E:E0:DF:46:DA:B3:4D:5F:D8:1F:D4:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/E8D05050BBB8CB1F6EE0DF46DAB34D5FD81FD439.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.216.0/22
                IPv6:
                  2804:5588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267940

    Signature Algorithm: sha256WithRSAEncryption
         1c:78:8e:2a:80:bf:4b:38:1a:7f:08:e5:a2:0a:f4:3e:86:25:
         f6:03:5c:94:89:8e:d7:cb:18:e1:88:6c:98:68:95:e2:8d:ab:
         32:3e:86:b5:aa:68:9c:ff:14:2d:95:c6:6a:5e:3f:17:6f:6e:
         2d:48:d2:99:84:14:b3:24:60:24:68:b9:dd:2f:40:51:4e:d8:
         0b:5b:36:7d:27:a3:b6:b2:da:53:68:63:19:25:2c:d0:32:e2:
         05:af:d6:ac:9f:b1:26:5d:1c:7c:e1:f9:99:53:f5:df:40:f1:
         a0:2b:8a:89:d2:fc:94:03:3b:60:a0:b9:97:2d:7a:d2:cd:76:
         38:dc:4c:4e:b7:cb:42:bf:ec:9f:8b:b6:d3:9f:5f:ac:a7:f4:
         31:d1:ad:1a:bc:bf:c2:1c:05:2c:7a:6b:1d:07:ea:9e:15:59:
         13:da:a9:50:a5:93:d1:9c:86:46:a9:f1:7a:95:20:8a:0e:e1:
         df:79:44:c5:ce:bb:d0:d4:c5:bf:96:f4:a6:d8:e4:44:40:08:
         91:82:34:2c:43:95:d5:94:c2:51:6e:67:83:3a:9d:90:52:e9:
         43:30:e3:f6:df:66:64:e5:10:1b:a0:e5:b6:46:fa:ad:f2:e8:
         86:38:4c:a8:82:50:93:e0:89:9f:8a:cb:23:84:1a:65:08:97:
         db:db:4a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----