Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer
File:                     F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer (raw, json)
Hash identifier:          J066MXu88omwkt7s9a0LlB3DXkjP0Pv5mYHtGlDWALQ=
Subject key identifier:   F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       54853FCF7AF887AE3CC9E6F3E5D1ED60FF337EEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 18:42:05 +0000
Certificate not after:    Fri 07 Mar 2025 18:47:05 +0000
Subordinate resources:    AS: 28160
                          IP: 187.62.144.0/20
                          IP: 2804:3e00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:85:3f:cf:7a:f8:87:ae:3c:c9:e6:f3:e5:d1:ed:60:ff:33:7e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 18:42:05 2024 GMT
            Not After : Mar  7 18:47:05 2025 GMT
        Subject: CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c1:20:8c:a3:0c:8e:08:12:30:16:7e:27:ab:
                    a9:c5:89:68:52:7d:18:45:b6:78:c2:a4:e8:42:51:
                    53:1b:60:64:7c:96:62:50:52:ee:16:60:64:13:af:
                    6e:5a:75:e3:7e:a0:2d:93:f5:49:1e:41:e1:55:e7:
                    47:fb:5e:8d:d5:09:4b:5e:0e:f0:1b:77:e6:13:de:
                    d4:12:48:a5:9b:38:88:51:6a:25:3f:70:a1:3b:91:
                    13:0c:b6:37:8a:e5:e5:62:2e:a4:29:70:af:be:79:
                    3c:4d:38:3f:d3:e8:39:30:2f:72:bb:9b:28:b6:06:
                    30:53:38:53:2f:da:09:78:30:c5:51:cc:7d:a7:5f:
                    65:b5:63:b8:bd:94:06:4e:a7:1c:01:6d:fe:c9:7a:
                    40:3f:b1:7a:a1:a5:1f:e7:a5:fe:c9:f9:c1:64:0f:
                    6d:4c:49:a0:e6:9d:03:79:89:91:8e:f3:a6:9b:2c:
                    3a:51:a8:c0:42:19:86:39:e0:25:48:cb:9a:0a:34:
                    30:8e:8f:b7:37:46:56:ba:6e:5e:79:e9:6d:7f:67:
                    58:31:0c:d4:ad:b0:92:24:dd:8a:7f:f2:43:89:71:
                    9b:16:1a:d6:85:3c:b3:ea:fb:62:ad:33:43:e5:8f:
                    72:09:a7:c8:81:aa:1a:b8:47:34:af:2f:f6:4c:2a:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.144.0/20
                IPv6:
                  2804:3e00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28160

    Signature Algorithm: sha256WithRSAEncryption
         66:17:7a:1b:08:e7:a1:c6:fb:95:8f:d0:f5:9f:cb:55:ef:f2:
         c5:20:66:ee:c1:94:20:16:b7:3a:0b:e8:15:19:04:b8:bc:39:
         b5:6c:08:05:5f:8a:c5:10:a1:48:33:c8:7a:f4:27:7e:c5:86:
         07:f2:d1:9e:31:81:ee:b5:0e:7d:3c:76:fe:b6:71:16:c0:89:
         8c:f1:0d:20:70:b0:70:d6:53:7d:59:df:3f:42:7f:15:04:a7:
         97:31:f6:58:2b:db:ce:d2:12:02:c7:c7:69:af:f8:2a:f9:69:
         b6:6d:71:84:6f:ab:ef:f7:f9:d7:64:35:ff:b0:43:d9:35:f9:
         6f:22:9c:c3:1f:e6:5c:d3:bc:ba:a0:c8:73:f0:93:96:38:4e:
         96:c9:cd:19:d1:12:be:04:54:16:7d:e2:56:65:d0:6d:f8:1f:
         ed:21:2e:53:a2:52:58:ad:cc:98:8a:f3:dd:bf:03:b1:d8:81:
         1c:ef:b5:05:f2:c6:a3:dd:d4:e4:8d:9e:04:92:c3:8f:95:6a:
         84:17:d6:cb:e7:26:53:2c:3d:e0:ee:ab:15:c8:3c:08:60:f9:
         3f:4c:61:e4:53:82:ae:ea:da:9f:73:96:ae:d4:3e:30:d8:79:
         f4:bf:1b:2c:8e:93:48:c5:27:72:6f:37:9a:a9:35:c6:f7:e3:
         bf:8a:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----