Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.cer
File:                     F2AF358E38DAD66120C87DB6C1201E9E226E2647.cer (raw, json)
Hash identifier:          MiskpgaQpANQoPKUt/ioYusUGbNhC+HUuiYW5inwIgc=
Subject key identifier:   F2:AF:35:8E:38:DA:D6:61:20:C8:7D:B6:C1:20:1E:9E:22:6E:26:47
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       643979A39D569CBFDEB7DA91873319788D38113C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 11:42:12 +0000
Certificate not after:    Thu 13 Feb 2025 11:47:12 +0000
Subordinate resources:    AS: 273316
                          IP: 45.71.42.0/23
                          IP: 2804:8cd4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:39:79:a3:9d:56:9c:bf:de:b7:da:91:87:33:19:78:8d:38:11:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 11:42:12 2024 GMT
            Not After : Feb 13 11:47:12 2025 GMT
        Subject: CN=F2AF358E38DAD66120C87DB6C1201E9E226E2647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d6:0d:64:08:11:7c:3a:02:b7:c3:8d:ae:a0:
                    8c:83:60:a9:c2:1a:64:5b:72:08:2f:1b:f0:87:6a:
                    f6:74:27:f8:ff:e4:03:f8:66:01:3f:96:a8:a6:ab:
                    97:b9:56:31:82:66:1c:3e:8f:90:5a:39:c1:8c:49:
                    1e:1e:ba:f0:54:68:df:58:88:7e:67:bc:23:49:fb:
                    9c:e6:65:b2:0c:4d:95:c1:ae:55:89:e0:fd:8e:bb:
                    58:21:77:8c:21:28:50:d4:9a:b7:61:ea:af:6f:c7:
                    43:4f:f9:16:0a:59:d3:78:03:47:02:3f:fa:3e:83:
                    6b:6c:e7:7c:80:b4:b2:6e:2e:e3:9b:48:5b:36:18:
                    6c:9f:30:d3:ae:76:99:31:79:76:b5:be:1b:e7:3f:
                    73:d5:01:9b:bd:2c:ef:1d:71:2c:e8:76:b9:d4:d3:
                    d1:f3:93:11:7e:91:b9:d0:f0:94:7a:fe:2c:54:e0:
                    93:5d:35:fa:56:c4:0b:36:b8:a6:f6:6f:2b:b0:4d:
                    cc:79:64:d5:74:0c:26:1c:90:8b:b4:e1:c7:0a:a2:
                    46:33:c1:9e:68:bc:75:29:75:37:86:67:4a:94:c6:
                    8f:a0:be:74:3a:33:cd:fe:a2:d8:47:f5:fe:32:72:
                    2c:9a:a5:d0:3f:fe:76:64:ff:f9:bd:ea:48:78:09:
                    cd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:AF:35:8E:38:DA:D6:61:20:C8:7D:B6:C1:20:1E:9E:22:6E:26:47
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.42.0/23
                IPv6:
                  2804:8cd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273316

    Signature Algorithm: sha256WithRSAEncryption
         24:42:3c:88:8a:82:cb:dd:ed:02:92:1f:57:b3:2b:8a:ae:56:
         3b:96:e8:54:a4:dc:27:b2:ef:e3:cf:a2:3a:bf:4b:23:e1:0d:
         07:38:97:7c:5a:5e:f2:f8:d3:d3:15:d0:77:a8:8f:11:91:99:
         5e:e0:52:ce:0f:27:a1:b7:65:49:23:65:b9:68:4b:89:5b:44:
         fe:24:a7:3d:d6:08:d8:ea:30:86:14:41:1d:8b:7a:7f:7b:76:
         24:5d:34:3c:67:85:7d:c4:9e:aa:93:5f:23:28:a6:91:b3:75:
         ef:a8:3f:ed:3e:0b:a3:54:e3:9d:5a:5a:02:2e:e7:62:c0:0b:
         44:24:fa:0f:21:ab:13:5c:7c:e6:32:46:55:89:bc:55:15:68:
         81:5a:04:02:c2:76:f7:1c:7e:b0:8b:f8:d8:bc:4c:99:81:e6:
         bb:95:64:81:7c:ee:46:1b:3d:5c:08:91:6d:38:d2:31:49:82:
         f3:6f:a2:85:a9:4f:d5:7a:43:a7:ef:ac:25:b5:59:82:04:4b:
         9b:52:3c:3a:b0:d7:26:78:ac:5d:04:e3:2b:97:9c:45:2e:5a:
         4b:d9:a9:bd:18:ee:ca:59:c5:d7:d4:1c:87:bd:09:5e:e1:1a:
         ab:26:9d:4f:ba:52:9a:9a:c4:b2:02:94:3c:d6:47:e6:dc:27:
         b1:8a:97:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----