Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer
File:                     F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer (raw, json)
Hash identifier:          ReLf1GsjkXt6JHmHwr4zV6LnWZ3ysDsh1gUw81WSdB0=
Subject key identifier:   F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D253A71C076651C23953DF1A3C350152AE5B473
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Jan 2024 20:47:42 +0000
Certificate not after:    Fri 10 Jan 2025 20:52:42 +0000
Subordinate resources:    AS: 271193
                          IP: 179.49.144.0/22
                          IP: 2804:77b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:25:3a:71:c0:76:65:1c:23:95:3d:f1:a3:c3:50:15:2a:e5:b4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 12 20:47:42 2024 GMT
            Not After : Jan 10 20:52:42 2025 GMT
        Subject: CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:20:16:cc:65:42:31:79:e6:90:eb:94:b2:
                    cf:b3:2a:ba:1e:0e:f2:7c:7f:d4:da:aa:d3:2b:bd:
                    56:f4:21:77:be:8a:d9:10:81:3d:b9:fa:cb:4c:e5:
                    ed:1b:82:bb:90:48:67:af:92:2e:b3:e6:09:86:09:
                    77:f1:c4:86:74:90:7c:ee:29:38:16:ce:7e:85:5d:
                    fe:8e:3d:89:f5:af:7c:1c:f2:12:8c:51:ee:cd:3e:
                    96:8b:f2:ce:04:cc:0e:6a:1d:49:b1:61:67:3f:5e:
                    54:a4:15:30:c0:e6:8b:ed:ce:a4:b2:3d:35:b7:db:
                    98:53:98:2f:af:15:10:ad:98:92:9a:da:87:00:d3:
                    f5:9a:92:e8:53:2b:fa:71:52:36:e7:a2:34:b7:81:
                    bc:2c:d6:76:cf:a0:6f:7f:20:61:75:af:47:5b:e1:
                    99:1c:4d:85:65:aa:75:82:39:7f:78:c0:d6:af:4b:
                    0e:06:15:2f:ba:f9:89:a8:f3:83:75:00:b1:9d:f5:
                    a3:72:0b:0f:00:fd:aa:2a:6a:f3:2a:a9:bd:c0:5f:
                    fd:9d:0a:9d:90:39:60:ae:a5:2a:09:3a:0e:fc:89:
                    8f:81:fc:3a:f8:af:c1:f5:c2:ce:54:a6:21:97:e5:
                    ec:e2:94:68:95:7d:c4:1c:a3:16:42:f0:7e:7a:75:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22
                IPv6:
                  2804:77b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271193

    Signature Algorithm: sha256WithRSAEncryption
         22:7c:d5:5e:62:f1:1a:be:e6:9a:a6:cb:e4:f7:ab:a8:7c:ec:
         d5:c8:a3:94:dc:ac:a0:e7:f0:de:33:81:bf:ea:2a:af:98:ec:
         5c:fe:13:fb:e6:da:97:47:8f:9d:d3:7c:8d:14:2b:1c:a4:51:
         50:88:df:22:2d:00:e0:7f:09:c2:97:2f:45:26:d0:39:1d:cd:
         1f:9a:a5:ea:41:96:b9:36:44:9d:6a:a3:a4:30:60:32:42:f7:
         e4:8b:8e:59:bd:ba:6e:ab:0b:58:08:34:f9:c6:2a:06:a4:a9:
         72:e2:cc:2b:ba:07:bb:95:a6:de:4c:69:de:4b:c7:1a:ab:e9:
         23:c2:d2:19:b2:f8:42:e0:a4:b4:63:c2:b5:25:21:a2:4e:a7:
         93:03:b2:2b:c2:d1:0d:3a:92:67:ce:29:ca:22:f0:ce:fd:42:
         b2:95:29:72:00:86:6d:72:98:28:05:8c:e6:41:41:ea:95:b1:
         9f:8b:c4:b2:63:d9:9e:19:c6:8f:62:b0:87:77:b1:63:72:ab:
         db:50:bd:11:3e:fd:d6:f6:5a:dc:0a:fa:19:7b:b8:ee:38:40:
         91:6d:03:43:7a:77:43:67:61:59:1d:b0:3b:2b:fd:2b:11:7d:
         8e:47:bb:d8:ec:3a:af:ef:a2:1c:4a:4c:d5:be:4a:ce:e7:ca:
         d3:19:bc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----