Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer
File:                     F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer (raw, json)
Hash identifier:          R73SIkg5e/aFsUtGv9D14P1uCzoDpF6uVoELwmqJ3SY=
Subject key identifier:   F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53B28E274212B7B1A3947715DF1BC1E23C5B859E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 13:49:20 +0000
Certificate not after:    Thu 06 Mar 2025 13:54:20 +0000
Subordinate resources:    AS: 271380
                          IP: 181.189.8.0/22
                          IP: 2804:7a94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b2:8e:27:42:12:b7:b1:a3:94:77:15:df:1b:c1:e2:3c:5b:85:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 13:49:20 2024 GMT
            Not After : Mar  6 13:54:20 2025 GMT
        Subject: CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3d:c0:31:b3:3d:2f:7a:41:aa:c4:58:ea:0c:
                    05:61:07:19:c1:e4:fb:8c:6f:79:1f:43:46:0f:4b:
                    29:48:8d:52:5c:b7:15:3c:48:4c:1e:96:36:5a:b4:
                    dc:4f:c8:a1:ff:d9:e3:e0:4f:da:6a:23:60:c9:a0:
                    c8:7e:58:8a:4a:c9:26:8a:a8:c7:1e:9f:ac:00:e9:
                    b6:8b:a8:6b:a8:d5:62:aa:b4:d8:8e:fd:aa:c3:18:
                    ec:91:e1:4a:44:d8:90:3c:e8:2d:9e:0d:01:e0:63:
                    4b:f5:ff:5f:3a:d9:d7:51:a5:18:56:57:e6:74:ea:
                    93:58:35:b2:9d:8b:0f:86:45:45:20:61:7b:c9:a3:
                    dd:25:a8:4f:c4:34:2f:b9:58:e2:0f:36:8f:f0:3d:
                    01:f9:cb:41:cb:bc:bb:b2:b0:09:28:d6:67:6f:48:
                    b7:81:5d:ba:5c:dc:27:85:9a:e6:52:36:40:69:cf:
                    c4:79:b1:6d:24:6e:86:5f:c7:43:17:b1:f3:88:9b:
                    fc:35:50:a6:3b:2e:78:01:9f:53:1d:13:78:4b:00:
                    03:de:c2:86:bd:b9:f7:a3:ba:95:08:8c:05:c5:47:
                    d5:f6:4e:2b:c6:bb:2e:ce:9c:d5:b3:36:24:a0:0a:
                    c3:ce:93:fb:aa:6a:eb:3d:90:e0:c9:b1:41:f6:f6:
                    38:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.8.0/22
                IPv6:
                  2804:7a94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271380

    Signature Algorithm: sha256WithRSAEncryption
         24:7c:06:fc:b6:99:10:65:5d:71:46:47:ee:d6:cd:d2:7f:65:
         18:26:f3:bc:a9:bd:06:c8:86:50:75:a3:63:11:88:7c:08:49:
         db:62:09:be:e5:93:81:76:3a:93:5e:56:d0:f0:f7:7a:6c:71:
         81:88:20:6c:df:ed:79:c3:9a:62:11:51:a2:d7:f1:65:67:ee:
         7b:a4:4e:ee:9d:5e:d5:ed:5d:c8:3d:8c:16:9a:02:94:14:f8:
         34:4b:f7:1e:0d:66:97:13:7f:ad:c3:16:7c:47:ce:a5:9a:f1:
         71:de:de:8c:0f:5d:c4:f8:4e:92:0b:c0:39:3f:83:a2:c1:30:
         4b:f0:af:e7:c6:9c:92:f2:c2:bd:4b:15:f5:4d:34:09:91:93:
         4d:39:d8:a5:22:ae:77:6a:6d:31:f2:b0:91:ad:94:73:0a:00:
         a7:26:2b:0a:51:64:4e:03:51:00:4f:c4:d2:c5:29:67:3b:ad:
         51:1a:d4:40:49:f7:97:45:bc:cd:cc:cf:fb:65:05:bb:10:76:
         1d:1d:6d:8f:08:c0:18:e4:79:5a:94:ca:38:8a:ac:49:61:ab:
         17:33:06:0f:96:d7:ce:c2:be:0f:17:89:c4:f6:9f:af:51:68:
         b1:d7:74:2e:7f:7d:77:8f:fb:e6:13:8b:d2:ca:26:36:70:6a:
         24:e8:d1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----