Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer
File:                     EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer (raw, json)
Hash identifier:          CQz7z23Os80HOmd8rk+g1Z8fO+DtU1uMkGdfDFpcgrY=
Subject key identifier:   EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5458CDADEFF5E99C4E0BBE35A65295B6A4DC363F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 06:05:09 +0000
Certificate not after:    Tue 11 Feb 2025 06:10:09 +0000
Subordinate resources:    AS: 270765
                          IP: 186.194.164.0/22
                          IP: 2804:7114::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:58:cd:ad:ef:f5:e9:9c:4e:0b:be:35:a6:52:95:b6:a4:dc:36:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 06:05:09 2024 GMT
            Not After : Feb 11 06:10:09 2025 GMT
        Subject: CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:35:d3:b7:2f:48:b2:1c:a2:c3:e8:e4:c3:
                    46:cc:c1:4f:4f:bc:6a:c2:9f:20:78:aa:32:74:54:
                    70:e3:8d:3d:a4:c6:fb:57:56:bb:4e:a3:bc:76:e4:
                    22:a1:ab:0b:6a:f9:2d:04:85:4a:de:88:2b:be:02:
                    69:6d:e4:34:2b:99:6a:bd:69:d7:5f:d1:61:24:65:
                    82:4a:7f:6b:be:78:3b:d0:58:5d:c6:c7:91:75:16:
                    24:f3:a9:5d:59:e0:aa:dd:38:ea:6f:b4:df:e8:4c:
                    06:11:92:1b:f5:87:75:16:89:ae:67:77:b7:f7:c3:
                    97:cc:b3:74:70:e7:d1:5b:98:64:a6:4d:31:ad:f6:
                    b9:d1:4c:0f:f6:6c:57:51:64:f5:ab:63:db:aa:3f:
                    34:44:c9:22:4d:ec:a3:ec:bf:dd:e8:9e:7d:a4:29:
                    0f:c6:02:e7:b3:cd:51:fd:d8:be:cc:91:1c:bf:9f:
                    08:c1:99:4a:7d:22:a3:19:55:82:ba:53:60:70:b8:
                    42:da:6f:f4:c3:1e:17:d9:ce:18:8e:64:c8:4a:2c:
                    02:e1:db:c0:51:54:54:97:cd:5e:46:48:e4:5a:b8:
                    e5:80:03:de:8d:75:fa:4f:38:a7:d5:29:5b:9a:b1:
                    4f:2c:f5:67:8e:d6:d2:3a:34:35:f7:52:8f:f7:ce:
                    59:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.164.0/22
                IPv6:
                  2804:7114::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270765

    Signature Algorithm: sha256WithRSAEncryption
         8d:b7:c6:9a:31:94:1a:4d:76:98:b9:b1:ac:62:10:7c:63:06:
         83:74:48:73:fa:99:0a:94:bb:57:b6:10:3c:31:a8:3e:55:0d:
         99:14:0a:c6:b2:04:02:21:0f:93:14:e8:7a:62:55:8d:3a:b1:
         f7:56:dd:3b:bb:dd:c4:dd:c7:6d:2e:1a:02:50:20:e7:94:56:
         b0:92:7a:59:1a:07:6a:49:98:7b:10:20:2e:a4:5a:61:be:86:
         99:c7:03:9c:ad:99:16:01:3c:87:e8:98:1a:76:83:7f:7d:64:
         e6:15:6f:be:2b:01:09:15:7c:56:5e:35:2c:cb:b8:f8:dc:c2:
         d1:24:67:ed:46:7b:e4:35:be:21:34:7b:04:1b:78:22:1e:bb:
         96:47:8a:ab:1c:4f:19:3a:81:50:34:c3:99:ba:df:e7:45:28:
         21:e3:f6:15:95:51:10:30:6d:ff:ea:32:63:a1:81:e3:22:29:
         22:a5:8f:2e:35:70:8b:1c:da:f1:00:45:00:66:e4:79:94:62:
         b8:4b:4b:f2:c1:d7:c6:e9:4e:57:eb:83:e8:6f:fe:fb:97:47:
         f6:12:d1:c7:59:2c:1b:17:81:cd:74:27:5b:b3:42:eb:6e:4d:
         f7:fd:82:d2:36:21:c5:20:93:31:47:21:5f:f9:ce:a3:e3:47:
         fc:69:cc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----