Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F26AACE425E02C1FFCC4E56C1962D229F58287E6.cer
File:                     F26AACE425E02C1FFCC4E56C1962D229F58287E6.cer (raw, json)
Hash identifier:          +t3E994tU7FK3xE0GhKhwUs1349niOT7rulS39D+klI=
Subject key identifier:   F2:6A:AC:E4:25:E0:2C:1F:FC:C4:E5:6C:19:62:D2:29:F5:82:87:E6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0B342A753600FB0CC70B3FC0DB37165933575287
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/0/F26AACE425E02C1FFCC4E56C1962D229F58287E6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Mar 2024 18:58:36 +0000
Certificate not after:    Fri 14 Mar 2025 19:03:36 +0000
Subordinate resources:    AS: 267070
                          IP: 45.227.80.0/22
                          IP: 2804:47ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:34:2a:75:36:00:fb:0c:c7:0b:3f:c0:db:37:16:59:33:57:52:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 15 18:58:36 2024 GMT
            Not After : Mar 14 19:03:36 2025 GMT
        Subject: CN=F26AACE425E02C1FFCC4E56C1962D229F58287E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:15:cb:81:44:f6:13:bf:e6:0c:21:17:10:38:
                    a7:2f:47:da:1f:84:8c:5e:60:85:15:d2:bb:30:5c:
                    3d:06:58:af:cc:b8:6d:13:ee:21:bc:6f:cf:fc:f8:
                    3a:33:4d:be:8e:7e:54:c5:c5:b4:34:a8:15:21:81:
                    d1:b5:73:ff:0c:35:29:99:de:0b:20:89:7c:55:5b:
                    b8:fb:25:7a:6a:23:85:b4:e1:14:4e:c9:24:6a:19:
                    70:9f:c4:ce:09:2e:ce:6b:d6:b0:a8:a8:64:ed:73:
                    59:d4:fa:95:65:7e:64:10:73:69:31:c7:69:55:2b:
                    37:9e:9b:a1:ac:7d:6d:dd:77:d0:85:08:c0:9f:f3:
                    40:af:ef:42:d1:e1:f2:14:a4:70:93:e0:66:6c:a2:
                    f5:63:c9:b6:58:6e:45:45:c8:e6:97:47:ad:4b:a5:
                    5e:e0:a3:50:3b:35:02:2f:7b:f6:70:a3:57:1b:74:
                    0f:33:f6:43:05:06:61:14:f5:7e:5c:43:c0:60:14:
                    f6:d1:ae:3a:a1:41:34:fc:f7:46:7c:8c:e1:13:bd:
                    1d:97:6e:c3:99:e3:79:8c:63:d4:cd:94:06:c7:5f:
                    b6:5a:d3:1d:ca:92:8a:43:08:5e:3b:76:5b:b3:ea:
                    fb:78:41:57:28:f3:dd:20:3d:88:5a:79:57:bc:22:
                    64:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:6A:AC:E4:25:E0:2C:1F:FC:C4:E5:6C:19:62:D2:29:F5:82:87:E6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/0/F26AACE425E02C1FFCC4E56C1962D229F58287E6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.80.0/22
                IPv6:
                  2804:47ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267070

    Signature Algorithm: sha256WithRSAEncryption
         5d:c7:8e:8c:26:1b:ce:88:4a:b4:22:b3:28:f0:eb:fb:22:e4:
         c0:76:76:4c:c8:2d:14:e4:5f:80:d0:89:cf:de:ce:ba:f3:f0:
         d3:38:56:99:d4:5a:d7:0f:a2:39:a1:23:5a:f3:4d:a4:85:0c:
         cf:9a:9b:c5:88:a8:35:6f:52:9b:6a:bb:09:a6:2c:74:fe:c3:
         31:47:e2:ab:8e:d2:5b:50:73:0d:9a:84:a0:14:57:31:c1:1a:
         ff:53:57:f5:be:46:ba:d7:db:18:37:1a:f7:1c:33:52:8f:6b:
         30:5a:32:f6:5f:aa:50:c6:2c:d8:bd:8a:d9:3c:ed:e0:2f:40:
         74:19:59:90:c5:d6:5a:61:5a:fc:c6:38:b3:1c:b4:ae:27:1c:
         c1:19:95:39:47:f9:de:bd:a5:30:c0:80:f4:57:42:34:dc:38:
         6a:a7:77:3d:ad:37:82:97:11:d6:19:92:10:19:2e:91:03:c8:
         8d:88:23:1f:73:af:d4:56:a0:cf:cc:ca:b7:31:d0:b5:59:80:
         df:32:99:5e:d0:8b:0c:42:c1:e8:d8:94:d4:d0:0e:01:b8:f8:
         0d:b1:54:b8:ef:4a:d8:19:ef:8f:2f:d5:56:54:e1:41:b4:79:
         e3:96:2c:64:79:52:db:0d:4d:85:a0:df:99:9a:6c:bb:02:d2:
         56:9f:bd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----