Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F62CADCD970D895C2B4D0ED12085ED68CB251904.cer
File:                     F62CADCD970D895C2B4D0ED12085ED68CB251904.cer (raw, json)
Hash identifier:          kucgYSXI7fHt6894VaIhQ40YttE+aMWusUivxOu50JE=
Subject key identifier:   F6:2C:AD:CD:97:0D:89:5C:2B:4D:0E:D1:20:85:ED:68:CB:25:19:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5FDF9C34CA66F56EA6D3FF760FB0BF8DC0441AC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/1/F62CADCD970D895C2B4D0ED12085ED68CB251904.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Oct 2023 17:09:50 +0000
Certificate not after:    Fri 18 Oct 2024 17:14:50 +0000
Subordinate resources:    AS: 269130
                          IP: 45.180.40.0/22
                          IP: 2804:5fe4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:df:9c:34:ca:66:f5:6e:a6:d3:ff:76:0f:b0:bf:8d:c0:44:1a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 20 17:09:50 2023 GMT
            Not After : Oct 18 17:14:50 2024 GMT
        Subject: CN=F62CADCD970D895C2B4D0ED12085ED68CB251904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:dd:c8:df:fd:62:3f:38:6c:64:d9:c9:ed:
                    5e:6c:51:0b:11:2a:85:5b:1f:19:4f:a8:5d:25:73:
                    fd:30:3f:a6:d3:26:6a:52:e4:46:75:08:b5:80:7d:
                    3f:ce:e3:01:79:ab:50:e3:c2:25:46:1a:ad:fc:8d:
                    9e:53:c6:3f:9a:44:5a:d8:94:ce:1f:22:b3:1d:67:
                    06:bc:ea:58:ba:d5:38:70:1f:13:42:e7:bb:05:3e:
                    f1:b0:5b:17:28:b9:67:4d:d1:11:20:b3:a4:dc:ad:
                    15:43:9c:52:0f:00:c8:e8:35:45:13:d5:0d:50:f1:
                    9e:72:c0:ed:2a:a6:f2:8f:ae:97:db:47:21:e6:97:
                    66:5e:0b:d8:ae:1a:95:c3:f9:a5:bf:85:f9:de:df:
                    10:34:7a:a4:e3:89:83:26:c8:74:1c:13:b0:2f:a1:
                    e4:44:de:9b:d6:42:87:ac:c6:37:eb:2d:b2:a8:75:
                    70:b7:04:cf:35:00:7c:a9:e3:06:c8:9a:91:6d:4c:
                    cf:a6:d2:5b:cb:b8:5c:97:3a:4f:22:7a:a4:f4:ad:
                    cc:23:d1:bb:42:1c:9b:99:33:94:cc:2b:ee:49:16:
                    23:19:e0:77:0b:cd:5a:96:e0:0c:8b:7f:0f:e4:0a:
                    d2:49:94:fd:14:19:e4:74:00:dd:6b:d4:18:8a:2c:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:2C:AD:CD:97:0D:89:5C:2B:4D:0E:D1:20:85:ED:68:CB:25:19:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/1/F62CADCD970D895C2B4D0ED12085ED68CB251904.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.40.0/22
                IPv6:
                  2804:5fe4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269130

    Signature Algorithm: sha256WithRSAEncryption
         60:9a:21:fa:24:9f:19:f8:f4:3c:5d:4c:ea:e6:16:62:dd:03:
         02:fb:96:a3:ff:e1:b5:a1:de:f1:20:4c:45:61:32:03:af:41:
         fb:01:57:37:52:7f:e3:a0:9f:63:b2:b8:32:9c:ac:8c:d7:bd:
         43:37:21:7a:d4:5e:0e:96:da:95:21:99:55:08:de:b3:05:85:
         cd:cf:58:1b:db:75:71:ee:34:4a:3d:e3:38:ef:50:2a:6b:60:
         48:49:80:d1:20:d8:ae:af:a3:da:12:a0:e2:3b:28:53:53:aa:
         56:51:7c:65:15:b3:86:7c:bb:a8:12:b7:ab:82:31:8e:83:1f:
         4d:80:ce:42:a9:29:20:ce:aa:90:ca:d1:fb:5e:6a:40:48:e2:
         65:e4:52:94:53:22:66:1e:21:22:fb:01:4a:81:cc:e0:21:8f:
         ea:2e:93:73:95:c2:62:df:21:75:f3:e1:ed:dc:8e:6d:50:d3:
         d8:7f:72:9c:e2:00:99:7b:e7:15:44:75:d9:c8:08:9a:f9:66:
         9b:74:de:28:57:91:77:2a:04:80:e2:36:bc:27:4e:0a:2f:28:
         69:6d:12:e6:62:f1:95:7e:fb:e3:30:d3:2f:28:a3:f5:24:40:
         1e:5d:d1:8b:4f:6f:20:6c:ad:50:dd:3d:09:3f:f2:17:63:38:
         46:4d:ee:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----