Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F257D9B509B80BD942D7280B239502CBA4F69E86.cer
File:                     F257D9B509B80BD942D7280B239502CBA4F69E86.cer (raw, json)
Hash identifier:          MXt5HS/y0Xy7vHSIb93Rtm5m1RqkllnnnvYE70TSWoY=
Subject key identifier:   F2:57:D9:B5:09:B8:0B:D9:42:D7:28:0B:23:95:02:CB:A4:F6:9E:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       73E73F346CFB1987C221A7C537A581FFA3AB326E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/0/F257D9B509B80BD942D7280B239502CBA4F69E86.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Dec 2023 00:47:16 +0000
Certificate not after:    Thu 19 Dec 2024 00:52:16 +0000
Subordinate resources:    AS: 272498
                          IP: 2804:8218::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e7:3f:34:6c:fb:19:87:c2:21:a7:c5:37:a5:81:ff:a3:ab:32:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 21 00:47:16 2023 GMT
            Not After : Dec 19 00:52:16 2024 GMT
        Subject: CN=F257D9B509B80BD942D7280B239502CBA4F69E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5e:40:90:62:cc:f0:df:aa:71:a8:63:16:fc:
                    92:e0:29:3b:e3:f2:57:9a:dd:6b:52:ba:4b:81:e8:
                    2c:66:4e:0c:2a:53:c7:6f:1c:86:92:40:25:71:9e:
                    53:ae:d6:cc:5c:61:6c:f6:6d:de:23:f7:d3:c7:d9:
                    cd:3d:6c:55:f4:51:e0:00:66:03:6a:78:3d:58:71:
                    09:41:dd:b2:1e:f3:68:62:bc:de:3e:1e:f5:4b:57:
                    63:5e:8c:f1:fd:64:82:d5:db:95:fa:8c:d1:b9:a1:
                    be:be:0a:b5:32:8a:1f:dd:1f:71:03:58:91:db:a6:
                    fe:6e:2f:51:c4:19:31:49:ab:84:df:25:35:b0:96:
                    b7:eb:2e:17:3a:57:ec:21:d4:3a:a7:c9:73:11:96:
                    ae:62:c7:e1:55:8b:48:20:18:1b:b8:52:97:2a:c2:
                    26:a2:52:58:b3:e7:b7:e3:d7:f7:17:d5:5a:3b:b2:
                    1b:0c:6f:6c:91:b6:19:98:c7:44:14:0a:05:37:bf:
                    9b:fa:38:25:e3:85:92:7c:e8:33:fa:75:91:5a:69:
                    bd:64:0b:ef:5f:18:29:b8:99:cc:98:ba:7f:ec:de:
                    c5:b0:a7:c2:7e:98:09:77:a0:53:fd:5e:03:38:0a:
                    cf:35:db:43:d4:b5:a0:e8:11:f6:0e:e0:0f:a6:01:
                    d1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:57:D9:B5:09:B8:0B:D9:42:D7:28:0B:23:95:02:CB:A4:F6:9E:86
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/0/F257D9B509B80BD942D7280B239502CBA4F69E86.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8218::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272498

    Signature Algorithm: sha256WithRSAEncryption
         46:a6:cb:24:7e:c2:7c:d9:c3:bd:d4:1e:c9:81:b7:09:b0:67:
         2d:fb:8b:ce:fc:c4:72:a2:39:3d:e6:73:96:29:6d:4a:c2:98:
         0a:8e:14:da:db:d4:17:69:fa:24:fc:f9:f8:71:0b:0a:ed:43:
         83:b1:34:aa:0c:b7:64:50:64:21:67:27:0e:0b:cc:cd:5e:f8:
         49:e2:0d:80:fa:63:7c:95:ae:78:fd:3e:93:be:f7:c8:cc:9f:
         57:0e:6a:1a:55:e7:98:9d:e0:22:4d:42:de:09:77:63:88:54:
         f7:a4:6a:17:92:6a:0d:c8:44:08:fa:11:fe:87:00:01:51:c4:
         b5:3b:5e:c1:90:3d:99:a9:80:0a:7b:8b:5a:ec:e4:81:f6:09:
         a4:79:30:71:01:1c:05:33:d6:6f:89:f4:c8:ea:00:b3:72:ee:
         1f:a8:e1:9f:bc:f1:01:a5:fc:ca:d9:30:3f:31:fb:8d:9a:93:
         53:3d:c7:c5:3e:12:cf:cf:62:07:f7:44:62:60:51:16:fc:e5:
         ac:f5:34:20:f0:89:71:75:0d:b4:21:a3:8a:0b:0f:2a:e7:c4:
         e6:30:1b:1d:3b:bf:bf:78:f5:05:03:d5:f4:d4:94:fd:ee:ac:
         6f:37:ee:5f:82:ae:dc:33:a3:91:06:86:10:c8:32:32:3d:0b:
         25:07:3c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----