Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F34FF7B3E81F1E395562D0D772890DC9D4690410.cer
File:                     F34FF7B3E81F1E395562D0D772890DC9D4690410.cer (raw, json)
Hash identifier:          ek0pPEgQhtifadpJ9plIFfAk+oeHv5o6VmzWoWkzPH8=
Subject key identifier:   F3:4F:F7:B3:E8:1F:1E:39:55:62:D0:D7:72:89:0D:C9:D4:69:04:10
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D54024611C2283FFBCA87D87B5B7250C9823E65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/F34FF7B3E81F1E395562D0D772890DC9D4690410.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Jan 2024 22:35:10 +0000
Certificate not after:    Fri 17 Jan 2025 22:40:10 +0000
Subordinate resources:    AS: 61948
                          IP: 143.255.120.0/22
                          IP: 201.150.12.0/22
                          IP: 2804:18b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:54:02:46:11:c2:28:3f:fb:ca:87:d8:7b:5b:72:50:c9:82:3e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 19 22:35:10 2024 GMT
            Not After : Jan 17 22:40:10 2025 GMT
        Subject: CN=F34FF7B3E81F1E395562D0D772890DC9D4690410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d7:98:28:61:8f:aa:25:f3:41:8a:6a:80:4f:
                    92:1b:44:8d:3e:0c:46:8f:c9:72:ff:93:dd:3f:3b:
                    8e:d5:38:a3:33:7d:1f:c8:37:08:b7:cb:2a:12:47:
                    f4:e9:e3:b3:52:8a:fb:6d:32:94:3c:a8:51:99:de:
                    d2:44:99:46:c3:a6:34:f5:c3:35:31:b6:2c:f1:09:
                    2b:2e:bd:2d:fd:03:fe:85:7a:1a:d2:77:33:85:40:
                    93:47:9e:3b:26:72:9b:e7:ba:1d:f2:27:7a:ee:ec:
                    6d:d8:97:3c:be:62:ed:4c:39:43:8c:9e:ab:2e:69:
                    42:a6:cd:96:92:3b:e1:46:70:86:96:85:06:d9:6a:
                    66:6f:c0:9b:bd:43:c3:27:71:6e:86:d9:8e:10:d9:
                    fb:97:8a:c7:43:e7:5f:6a:f9:cb:d4:dd:de:52:e6:
                    7c:d3:7f:9c:b9:2c:89:f6:36:00:f0:aa:21:7d:36:
                    3a:50:03:21:cc:22:b0:32:18:a9:1f:a3:0a:c4:27:
                    73:63:00:d9:a9:6d:65:49:1f:f5:75:65:ba:66:f0:
                    de:20:3b:1e:9e:ce:0f:46:82:77:be:e0:36:ca:2c:
                    ea:ef:1b:8e:4f:04:de:f7:dc:60:c8:ab:60:8b:b7:
                    eb:6c:86:91:18:2d:55:18:94:6e:00:8c:fb:d5:ff:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:4F:F7:B3:E8:1F:1E:39:55:62:D0:D7:72:89:0D:C9:D4:69:04:10
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/F34FF7B3E81F1E395562D0D772890DC9D4690410.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.120.0/22
                  201.150.12.0/22
                IPv6:
                  2804:18b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61948

    Signature Algorithm: sha256WithRSAEncryption
         2a:3a:49:af:40:bc:f0:93:71:fb:07:f1:f9:67:e3:36:05:08:
         8d:19:fa:b8:27:86:70:6c:d1:b2:f9:c1:d5:c7:8e:54:ad:6c:
         a0:47:b3:be:f1:6a:46:63:0a:06:23:6e:3e:11:60:33:f1:22:
         1a:f4:79:9d:c6:32:42:ff:ae:31:c0:44:bd:fa:a5:66:4e:1b:
         bc:31:46:3d:b9:af:c2:86:a7:4b:4c:39:95:29:5f:fb:f0:db:
         02:06:fa:56:0c:78:fd:ac:c2:d6:c1:87:31:01:a4:22:e4:4e:
         fd:a7:c0:18:09:70:60:c2:a6:de:f2:72:ad:46:36:66:53:1d:
         6b:95:0f:ed:92:17:5c:d1:af:06:da:a9:40:6a:9d:d7:d4:96:
         17:a2:9f:cb:b6:ca:15:ce:8e:9e:43:df:e7:fb:a0:f1:67:d8:
         0c:63:a4:77:0e:c1:8c:c5:32:24:70:cb:40:38:51:37:81:6d:
         63:03:3a:39:45:e4:53:8b:cf:8a:86:a7:7a:6d:83:ef:8a:4c:
         52:bb:cf:38:45:5b:27:0a:b4:b2:54:12:b4:27:d7:ae:c9:7f:
         ef:f1:59:d3:c8:2c:a3:f3:d4:6c:99:40:aa:f7:2a:2a:ec:d9:
         e5:b6:c5:41:a3:aa:c8:3d:51:73:7f:d8:85:22:f3:15:e7:d7:
         d5:10:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----