Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.cer
File:                     F398A83D78DD12A3CD95E521760F978E1F2B8819.cer (raw, json)
Hash identifier:          fea1PQBSBR2lKdrs1jMmgVHHKbtpkFewsDcbkNbaFlg=
Subject key identifier:   F3:98:A8:3D:78:DD:12:A3:CD:95:E5:21:76:0F:97:8E:1F:2B:88:19
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10DC415EAF352EBE6679138928B75DCB420E1FDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 21:44:40 +0000
Certificate not after:    Thu 13 Feb 2025 21:49:40 +0000
Subordinate resources:    AS: 269002
                          IP: 45.176.160.0/22
                          IP: 2804:5df0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:dc:41:5e:af:35:2e:be:66:79:13:89:28:b7:5d:cb:42:0e:1f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 21:44:40 2024 GMT
            Not After : Feb 13 21:49:40 2025 GMT
        Subject: CN=F398A83D78DD12A3CD95E521760F978E1F2B8819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:10:88:b2:fc:8d:7b:72:19:5e:c3:ba:31:
                    95:0b:30:a6:07:78:29:24:ce:ae:f1:cf:ba:66:e0:
                    16:49:65:86:c4:5a:d1:fa:b2:68:8b:82:21:0f:e7:
                    5d:5d:bb:c3:3d:eb:40:1c:0b:a7:00:b3:51:b7:41:
                    2e:37:23:12:cc:07:94:f4:ee:7a:b7:68:30:a2:d4:
                    52:40:62:0a:2f:21:15:58:dd:d4:bc:69:29:d9:09:
                    39:25:9a:84:2d:03:45:31:f6:50:cd:fc:7c:34:a7:
                    a8:ab:d6:e9:88:45:23:38:c4:b4:7d:ac:93:eb:0b:
                    9a:4e:1b:f1:4a:f9:98:1f:43:7d:de:10:d3:33:b9:
                    9f:f4:a5:18:f7:f3:ef:b0:3f:12:f2:32:19:2d:50:
                    a2:97:02:f9:d3:66:fd:a3:02:2a:1d:00:dd:a6:00:
                    71:b9:ba:55:b8:54:7c:a2:29:6f:ec:ed:16:f6:d5:
                    22:6b:bc:d1:83:e0:7b:21:5a:a2:cc:31:e3:18:89:
                    2a:7f:61:25:95:aa:09:7c:19:80:af:24:6e:41:46:
                    cb:e1:97:25:cd:81:a3:97:f6:32:0e:a3:78:2a:a5:
                    4f:d6:cb:b2:cf:30:8f:54:24:73:5a:3d:ff:4b:78:
                    48:3c:e6:53:2b:92:37:b3:d9:eb:4f:a0:63:72:ed:
                    a6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:98:A8:3D:78:DD:12:A3:CD:95:E5:21:76:0F:97:8E:1F:2B:88:19
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.160.0/22
                IPv6:
                  2804:5df0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269002

    Signature Algorithm: sha256WithRSAEncryption
         72:e1:04:8a:23:33:5a:78:ce:43:ec:bd:0f:21:b8:72:2e:86:
         53:95:0d:5e:14:dd:79:5d:5f:b0:4e:ac:61:c8:6f:6c:67:c1:
         ae:e8:38:37:87:61:37:30:35:35:82:59:04:c9:69:06:bb:bc:
         b8:a8:d5:bf:05:5a:a4:32:75:6c:c2:1e:57:5d:9a:28:70:43:
         81:5e:02:47:00:dc:26:22:89:b4:42:5c:f2:58:83:b9:a5:7a:
         89:0b:ed:e5:7f:7e:89:57:cc:fa:27:38:cc:47:15:94:fa:42:
         ae:9a:8f:14:26:8f:2c:d3:84:99:32:45:3f:e5:80:14:39:d5:
         f3:7c:ba:9e:03:64:f7:7c:5a:d0:b6:24:45:48:96:4f:1f:c2:
         d6:0d:cc:af:f3:e6:7d:40:29:3a:ce:b1:17:ad:3c:21:e3:98:
         7b:c7:67:17:a6:3c:2f:33:88:b1:c2:51:9b:7a:94:2a:b1:39:
         0a:bd:f2:3e:02:67:77:46:59:f0:6b:84:6b:1c:e7:35:2c:f8:
         94:1d:b7:e9:fd:05:90:8e:4f:e2:04:30:5e:00:9f:48:2f:42:
         90:3f:40:e0:6d:52:48:a3:94:d7:f9:1c:8d:e9:9c:6f:bb:44:
         61:cd:14:48:5f:7d:24:5f:85:dc:14:18:86:a8:24:b1:4f:c1:
         0d:9c:87:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----