Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F24D082C82FF9E11E84C687D8D35F1210230FA8D.cer
File:                     F24D082C82FF9E11E84C687D8D35F1210230FA8D.cer (raw, json)
Hash identifier:          vmvkpBAvVUtoQxcy+kT9K2NFTW+oYDpFjuSslibNDE0=
Subject key identifier:   F2:4D:08:2C:82:FF:9E:11:E8:4C:68:7D:8D:35:F1:21:02:30:FA:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18263277DA074BEB5ED03A6BFB3F406869F07E06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/F24D082C82FF9E11E84C687D8D35F1210230FA8D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 11:15:09 +0000
Certificate not after:    Mon 21 Oct 2024 11:20:09 +0000
Subordinate resources:    AS: 268869
                          IP: 45.174.220.0/22
                          IP: 2804:5bc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:26:32:77:da:07:4b:eb:5e:d0:3a:6b:fb:3f:40:68:69:f0:7e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 11:15:09 2023 GMT
            Not After : Oct 21 11:20:09 2024 GMT
        Subject: CN=F24D082C82FF9E11E84C687D8D35F1210230FA8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:3b:49:44:4b:f0:bf:41:ef:e5:66:41:a4:
                    29:f1:bd:88:58:54:bc:3d:1b:77:97:0f:4f:23:bd:
                    72:af:ec:ef:87:41:ae:62:46:00:5f:6f:03:df:31:
                    1d:12:e6:07:b6:f1:b5:29:17:db:79:a6:ac:d6:03:
                    7a:46:11:c2:71:27:25:8d:3a:4e:7b:34:f2:61:87:
                    f8:e9:a1:30:cf:07:b7:c8:dc:4e:18:7a:1e:45:3d:
                    3e:8a:d8:c0:37:c0:bc:15:db:f9:a9:34:70:cf:4f:
                    ea:f1:f2:23:83:c5:93:d0:c3:73:75:6c:b3:4d:09:
                    ef:af:06:4e:21:d7:4d:72:70:1e:22:07:7a:d4:9c:
                    77:9a:2d:69:c6:c2:a8:ad:f6:38:c3:ca:52:d0:57:
                    75:95:25:78:3b:92:0c:93:e1:8d:42:10:72:70:8a:
                    01:00:23:dc:77:5e:93:6e:42:de:cc:fb:5a:cb:37:
                    0c:65:94:1c:dc:e8:1f:97:28:2d:23:2e:e9:f5:46:
                    95:ba:de:c2:38:7a:b0:f6:ff:4e:7e:13:8c:6a:70:
                    8e:04:20:be:47:5b:bd:f3:aa:7d:33:af:47:52:48:
                    63:62:3d:13:82:bd:5c:4f:7a:5d:a2:93:f2:a1:fd:
                    7e:da:5b:6a:b1:6d:6b:72:ad:96:7d:ce:ac:8a:64:
                    0a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:4D:08:2C:82:FF:9E:11:E8:4C:68:7D:8D:35:F1:21:02:30:FA:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/F24D082C82FF9E11E84C687D8D35F1210230FA8D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.220.0/22
                IPv6:
                  2804:5bc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268869

    Signature Algorithm: sha256WithRSAEncryption
         80:cd:f1:fc:9d:07:58:29:db:28:5a:d5:72:51:12:d2:3c:e9:
         f1:02:7d:be:c1:da:5b:a2:dc:73:b4:39:86:97:7b:06:f2:b7:
         69:c2:43:c5:af:bd:f2:b8:5f:40:9c:5a:ca:2a:cc:d1:78:92:
         0a:9f:7e:60:42:50:5e:fc:1f:75:6c:b2:fd:06:68:90:63:bc:
         2c:be:68:51:31:97:16:e7:a0:1d:b7:be:bc:f6:47:5f:00:6c:
         08:3b:dc:69:5b:27:f2:79:72:0a:77:cc:b3:70:e2:19:8a:40:
         0c:3c:86:d9:06:ae:10:d3:ae:23:d4:41:c1:fd:ac:6c:85:51:
         b9:aa:65:9c:f4:44:97:f4:73:f0:9b:81:e4:5c:38:5d:92:53:
         98:3e:eb:9e:06:87:ca:b2:03:06:f6:5a:5b:ba:30:5c:d8:db:
         6e:3e:18:21:dd:1f:1c:17:39:35:e0:02:92:7b:75:8f:89:f8:
         56:80:7a:ef:12:dc:ca:8f:b9:8d:b2:b3:f4:51:6b:13:2a:07:
         5a:fe:9b:95:aa:67:99:04:2b:28:89:d0:e9:81:6d:c3:ef:fd:
         37:5e:f3:fe:a9:73:b2:76:73:f9:6c:a8:ce:f3:64:a9:72:6c:
         59:37:07:a4:0b:c2:f3:45:81:e6:01:d8:d8:c0:8c:3c:77:f1:
         c9:ae:1e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----