Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.cer
File:                     F3D1F1F17A045541F859EF9EE3C95D32E062C66E.cer (raw, json)
Hash identifier:          e/wu+4RtrBgiCBQT8x0OcMdlZHf8WcIc3pwkaS0FtzQ=
Subject key identifier:   F3:D1:F1:F1:7A:04:55:41:F8:59:EF:9E:E3:C9:5D:32:E0:62:C6:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58D75D7FD8B5CCF0790CD8636D194C6A93DC1518
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 14:16:35 +0000
Certificate not after:    Wed 26 Feb 2025 14:21:35 +0000
Subordinate resources:    AS: 264205
                          IP: 138.99.152.0/22
                          IP: 2804:2428::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d7:5d:7f:d8:b5:cc:f0:79:0c:d8:63:6d:19:4c:6a:93:dc:15:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 14:16:35 2024 GMT
            Not After : Feb 26 14:21:35 2025 GMT
        Subject: CN=F3D1F1F17A045541F859EF9EE3C95D32E062C66E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0d:7e:9e:22:bb:28:b9:d7:dc:5e:3d:9c:bf:
                    95:11:72:ec:93:7c:8c:42:db:49:a2:c7:5a:47:81:
                    15:fd:7d:77:c3:b7:fd:7d:c0:17:0d:d2:f7:ae:76:
                    48:e3:08:61:1b:45:48:ed:34:02:39:fb:5d:ae:d5:
                    1a:e9:0e:66:51:1b:a2:a1:8d:59:e7:2b:ad:46:79:
                    6e:bf:a6:b9:f8:4e:57:c0:23:47:a7:44:24:e8:7f:
                    6f:9c:95:67:1c:60:74:b4:cd:9e:50:22:cd:9d:4a:
                    b0:dc:89:0e:59:dd:df:ec:ef:a3:5c:97:da:4b:04:
                    4c:79:e4:f8:3b:23:fb:f2:80:d5:26:b3:ff:a5:4d:
                    f1:81:2f:57:c5:55:19:63:da:f0:70:45:82:bd:71:
                    dd:b6:80:19:bf:5e:1f:9c:10:10:24:55:1b:3f:b3:
                    bd:e6:ca:4a:59:2f:d7:61:62:57:72:c8:57:f9:03:
                    9a:23:ae:e9:b1:38:0c:88:df:b2:ba:e0:ef:1b:2d:
                    27:07:38:77:ca:63:fc:d3:95:d9:58:11:2a:2d:4a:
                    ae:da:28:f2:ac:08:af:68:92:7f:98:36:89:da:ac:
                    0f:8d:5e:e0:46:fc:1c:cb:ed:c4:18:d9:f8:76:78:
                    04:45:6a:26:e2:25:38:1d:84:1a:39:77:f3:3d:76:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:D1:F1:F1:7A:04:55:41:F8:59:EF:9E:E3:C9:5D:32:E0:62:C6:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.152.0/22
                IPv6:
                  2804:2428::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264205

    Signature Algorithm: sha256WithRSAEncryption
         2b:5a:0a:40:27:9e:1b:13:02:eb:1e:76:a6:84:e6:4f:c6:f3:
         81:97:ac:c6:56:37:35:5d:99:6c:dd:ef:e2:c3:92:df:bc:fa:
         86:6c:03:a4:31:48:f5:d0:f9:94:7a:e3:d4:00:72:f9:ca:ad:
         aa:5b:91:b5:d8:87:9d:6f:4b:89:7e:57:40:7d:82:be:06:15:
         1e:81:14:24:fd:3f:6f:77:87:d4:40:e3:3b:d1:8e:64:9f:dd:
         38:98:ee:aa:0a:1d:82:13:d3:22:f0:bb:6f:ec:10:11:76:bb:
         d9:d7:22:3d:08:0f:fc:5d:ce:16:2f:1d:dd:5b:51:96:49:0d:
         10:81:f2:82:fa:cb:0a:3c:07:32:9d:f0:ba:bc:3a:bd:96:b3:
         00:70:28:33:bf:4e:73:3b:71:b1:9a:c9:cb:38:da:b4:89:d9:
         2e:3d:0f:7c:46:ae:38:52:cb:8d:60:5c:fb:e6:1e:e5:5f:be:
         47:c7:fb:ae:95:13:fa:f3:14:61:bf:e6:49:69:dd:27:2c:98:
         01:0f:ee:52:70:fe:fe:84:13:11:8d:b7:f8:16:cd:38:18:2a:
         9b:d0:a7:68:f1:ad:39:c2:c5:84:59:6c:b9:2d:21:c3:1e:01:
         22:66:3c:5e:68:f6:1a:da:15:c7:34:7c:7e:52:2c:78:fe:55:
         8c:2d:44:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----