Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.cer
File:                     FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.cer (raw, json)
Hash identifier:          oQh2zctEaBp9gKc2AOj9nmt0uxRpb0WwYu7G/aWuUOc=
Subject key identifier:   FA:14:32:20:D3:E1:BA:51:4C:D2:CB:C4:E5:78:6E:02:66:B8:BE:0F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       26C103493685351716746CED39C6BBFEB343503B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Apr 2024 20:34:29 +0000
Certificate not after:    Thu 10 Apr 2025 20:39:29 +0000
Subordinate resources:    AS: 269497
                          IP: 45.187.204.0/22
                          IP: 2804:6588::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c1:03:49:36:85:35:17:16:74:6c:ed:39:c6:bb:fe:b3:43:50:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 20:34:29 2024 GMT
            Not After : Apr 10 20:39:29 2025 GMT
        Subject: CN=FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:10:46:c3:c7:ae:96:4e:e7:dc:90:13:94:
                    86:0d:b8:09:1d:e5:72:55:2b:3e:9a:0f:14:0e:6a:
                    8d:39:38:ee:ef:8f:a2:55:ce:3e:be:ad:7c:3f:c9:
                    c8:33:54:d7:d0:19:6e:30:73:3c:85:43:51:e7:ea:
                    9b:ff:61:67:19:6f:f6:45:3f:0a:21:34:93:50:01:
                    f6:9a:68:5c:33:d8:35:59:ed:a1:7d:aa:58:c5:9b:
                    33:67:ed:2f:ce:1c:0b:53:d5:d6:4d:8e:44:10:0e:
                    f9:be:ba:de:50:a5:f0:a1:b8:97:5f:6c:c6:4d:5a:
                    cf:f7:43:67:86:cf:4b:44:e1:20:84:bc:f9:93:ed:
                    7b:17:98:26:48:bc:74:2e:97:86:60:4f:ef:b5:27:
                    82:d3:57:f9:b1:cc:1c:d7:a9:75:60:dc:d8:54:3f:
                    fa:d4:1a:eb:88:43:9b:8f:87:03:7d:44:b9:f7:25:
                    8f:c3:50:7f:66:78:66:36:cf:5c:eb:ff:df:03:1a:
                    01:a9:b0:e4:4e:0f:0d:3a:b1:d0:76:95:84:16:09:
                    b4:9f:e7:45:3e:c5:72:ef:5a:51:c2:10:b9:41:c0:
                    1e:1e:2f:97:87:6c:d9:9f:a8:07:2b:9f:f4:fb:65:
                    74:11:25:28:f0:72:a9:c1:df:ad:93:eb:3f:30:da:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:14:32:20:D3:E1:BA:51:4C:D2:CB:C4:E5:78:6E:02:66:B8:BE:0F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.204.0/22
                IPv6:
                  2804:6588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269497

    Signature Algorithm: sha256WithRSAEncryption
         3f:37:31:e0:5a:2d:16:65:e1:eb:ea:d1:a1:fe:0a:bf:bc:b3:
         59:fe:de:c6:eb:b1:7e:ff:3f:c5:49:92:59:e2:23:11:b9:a3:
         2a:3f:2b:75:1c:30:e5:9a:6c:da:12:3b:e7:41:05:c8:61:ff:
         b7:ba:6e:40:e2:52:2d:9a:31:f6:53:e2:28:7d:60:c3:01:ed:
         45:ea:64:36:47:65:63:c9:e5:8b:bc:3e:8c:cd:ba:f2:87:5e:
         32:db:cd:01:75:c4:82:bd:e9:0c:f2:6c:68:ef:7b:82:e7:bd:
         82:db:33:64:5e:30:c5:86:76:90:2b:ee:61:7c:ef:4a:21:d9:
         fe:6d:11:6b:9f:e0:e3:bf:d7:3c:12:28:f4:6c:91:7e:58:aa:
         0b:ff:7c:cb:b0:99:13:91:1b:b8:00:82:1d:b2:5a:26:5b:ab:
         b2:58:a4:44:38:68:e5:b8:9f:07:24:fd:c0:ee:8a:c2:98:c0:
         0e:08:61:03:e4:f6:61:44:84:36:c2:17:48:c2:44:a0:d2:9f:
         e3:b4:89:e8:d7:c4:5a:48:32:21:d6:a9:66:32:c5:7f:42:2b:
         73:39:6c:8d:a5:40:f9:31:ed:34:cd:6c:41:51:de:0b:8c:f0:
         77:dc:32:01:37:1f:3e:67:02:b1:71:54:45:2f:46:f8:6a:d2:
         93:56:da:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----