Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F8CD8F0474D30C184CB2C850D383396854E57CAA.cer
File:                     F8CD8F0474D30C184CB2C850D383396854E57CAA.cer (raw, json)
Hash identifier:          /yQUsDXhNbBLm8AogjEc3B+34/eXPfROjTsX7w1/K+Q=
Subject key identifier:   F8:CD:8F:04:74:D3:0C:18:4C:B2:C8:50:D3:83:39:68:54:E5:7C:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       45750CDEAC4AB3ACBF0D6295998CB944102D9126
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/F8CD8F0474D30C184CB2C850D383396854E57CAA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 14:17:39 +0000
Certificate not after:    Mon 10 Mar 2025 14:22:39 +0000
Subordinate resources:    AS: 269422
                          IP: 45.186.100.0/22
                          IP: 2804:6458::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:75:0c:de:ac:4a:b3:ac:bf:0d:62:95:99:8c:b9:44:10:2d:91:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 14:17:39 2024 GMT
            Not After : Mar 10 14:22:39 2025 GMT
        Subject: CN=F8CD8F0474D30C184CB2C850D383396854E57CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:f4:ae:8a:a0:75:98:94:a9:16:e2:2d:c0:
                    76:8b:8f:5d:09:99:43:f0:d4:6b:e9:8f:d5:2e:8d:
                    90:7d:cc:d6:e4:09:b1:5c:d5:9d:eb:fa:b0:a2:63:
                    1b:cf:c7:13:16:f8:19:1d:f9:1e:46:3c:21:78:f5:
                    3d:5a:6e:92:89:57:a1:9c:af:ba:2c:b2:48:54:46:
                    92:54:13:f5:80:42:ab:69:98:fd:25:81:11:12:da:
                    ae:6d:51:45:59:ba:b5:0c:65:85:da:8d:9d:94:70:
                    f5:11:92:4f:49:e7:cc:f1:b3:36:6b:5e:e0:7a:d1:
                    f6:74:18:7c:96:cc:45:cf:47:d3:c5:1e:b8:0f:1e:
                    b6:02:8a:78:3d:77:22:70:fd:ca:3f:56:89:7f:c0:
                    76:1f:cc:27:38:76:43:89:99:2d:98:ab:fe:46:fc:
                    06:c7:4c:ba:be:f0:6b:16:28:9f:74:ec:cf:b9:25:
                    c3:36:75:bb:cf:2b:de:a3:78:99:3a:49:e5:88:05:
                    1b:7e:6e:9a:bf:d4:49:f8:67:ea:0c:48:63:17:00:
                    b8:21:b8:1f:ce:68:c8:60:0c:8a:d7:c1:3c:39:90:
                    f9:86:01:28:e8:bb:7c:f9:16:7f:13:2a:e7:36:fa:
                    12:ad:78:71:4e:49:1c:d1:9b:9c:8f:a5:53:e0:3e:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:CD:8F:04:74:D3:0C:18:4C:B2:C8:50:D3:83:39:68:54:E5:7C:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/F8CD8F0474D30C184CB2C850D383396854E57CAA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.100.0/22
                IPv6:
                  2804:6458::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269422

    Signature Algorithm: sha256WithRSAEncryption
         20:ec:45:43:42:a6:b2:3d:c4:7d:98:52:94:33:8c:5b:5c:68:
         a9:5d:94:fa:de:b3:20:8c:42:35:68:60:11:15:be:e2:1e:05:
         05:f6:b2:50:d4:0d:44:b5:9b:ee:02:c7:be:12:9a:be:e7:ab:
         c3:a7:dc:e7:d5:f3:57:04:65:c6:27:bb:c0:97:05:4e:b7:2b:
         57:12:4b:88:83:52:05:4d:7a:ad:84:88:f8:31:7d:90:42:e6:
         45:0e:d6:a0:28:7b:51:a0:99:ec:cd:2b:27:15:84:44:f9:fe:
         ef:6b:e5:b9:d8:d0:89:95:53:df:75:d4:55:c5:48:10:ac:ca:
         07:d0:8e:87:1c:56:a2:8d:21:99:e1:30:e6:cc:a6:28:2c:13:
         ef:ae:03:3a:4f:9d:45:c4:5a:48:9e:f4:fc:a5:fd:18:a6:cb:
         d2:6e:cb:ae:d7:26:76:c3:98:35:78:28:e3:7a:13:0b:95:14:
         92:4a:b0:a3:19:c8:49:ad:e2:e4:79:a1:4a:81:7f:83:e8:6a:
         ee:c2:7c:e5:f5:03:4c:6a:3d:25:ed:5d:ac:aa:8d:91:4f:77:
         f6:40:d1:86:d4:8e:f0:09:97:b0:84:32:ba:ea:f1:9f:8d:46:
         68:c7:ba:3c:df:27:52:05:12:a8:8d:43:85:e8:93:aa:18:58:
         bd:c4:72:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----