Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FB525337D26D99E0349C464F7EFB30E81515732D.cer
File:                     FB525337D26D99E0349C464F7EFB30E81515732D.cer (raw, json)
Hash identifier:          InhZCAR4TuTgi1U/pwK7ka4qXFqX9NGpetb360G8erc=
Subject key identifier:   FB:52:53:37:D2:6D:99:E0:34:9C:46:4F:7E:FB:30:E8:15:15:73:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       466089B5FD691CB2948807140719E97D0F39D60B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/FB525337D26D99E0349C464F7EFB30E81515732D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Mar 2024 12:34:30 +0000
Certificate not after:    Wed 12 Mar 2025 12:39:30 +0000
Subordinate resources:    AS: 52765
                          IP: 170.239.72.0/22
                          IP: 177.39.120.0/21
                          IP: 2804:b54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:60:89:b5:fd:69:1c:b2:94:88:07:14:07:19:e9:7d:0f:39:d6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 13 12:34:30 2024 GMT
            Not After : Mar 12 12:39:30 2025 GMT
        Subject: CN=FB525337D26D99E0349C464F7EFB30E81515732D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e3:a5:fc:9a:23:fc:e1:dc:ec:5a:73:0e:a6:
                    d2:04:35:01:b4:82:ae:1a:ec:d0:2c:0c:fd:5f:96:
                    38:34:c1:10:23:44:74:d4:83:58:20:5c:15:bc:fb:
                    37:e1:02:62:9e:72:27:7e:ec:12:90:7b:de:25:7f:
                    d7:f1:75:7a:67:74:28:85:ba:bc:cc:d4:c3:ce:5b:
                    6e:e9:52:16:47:23:bd:00:0a:40:c0:a5:e4:22:dd:
                    2c:8e:55:46:a9:4a:69:4b:3e:08:ba:da:d1:37:fb:
                    2f:53:fe:c9:3b:29:0b:66:15:4b:2a:db:cc:76:26:
                    f9:09:a1:f1:b0:5d:35:fd:eb:b3:bd:6f:05:bd:91:
                    8a:3d:1b:2c:88:29:94:23:b2:30:00:fd:60:3e:7e:
                    9f:a9:0c:e6:03:94:38:fc:8c:70:03:8f:14:00:15:
                    82:b7:55:80:7a:d8:b4:1d:6f:37:02:e9:29:48:7c:
                    c1:ba:ab:09:4b:d6:70:27:d0:0a:34:24:e6:94:23:
                    36:01:63:bd:89:d4:b5:55:b6:26:f1:b3:68:38:7b:
                    1c:bf:aa:08:05:62:ce:e5:c8:b6:48:ff:b9:bc:3b:
                    5e:3f:53:7d:71:84:7e:38:16:da:e7:7a:d9:15:d4:
                    6f:e9:fb:cb:ce:6d:00:db:0b:c6:58:39:24:ea:4a:
                    a0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:52:53:37:D2:6D:99:E0:34:9C:46:4F:7E:FB:30:E8:15:15:73:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/FB525337D26D99E0349C464F7EFB30E81515732D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.72.0/22
                  177.39.120.0/21
                IPv6:
                  2804:b54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52765

    Signature Algorithm: sha256WithRSAEncryption
         24:64:94:9c:a4:fa:c8:28:9b:13:46:aa:e5:ac:26:d5:ce:db:
         dc:44:9a:81:3e:a3:04:ae:07:ba:fb:5f:5c:e4:57:1f:39:0b:
         34:68:20:9d:02:3b:d5:6e:b5:99:86:73:9c:da:1d:f5:22:4a:
         79:73:f2:ff:91:ca:cd:14:36:3f:38:9f:23:0e:27:a3:a0:37:
         f1:f5:6a:50:5b:b0:7c:5d:5f:67:20:d1:9b:a6:22:fd:c9:9c:
         84:52:e4:3a:e0:e7:c0:37:c8:a8:f7:27:b3:5c:d2:12:0a:ea:
         81:78:ca:61:c9:8a:73:ed:dc:56:55:8e:a8:2e:5e:f6:cd:f9:
         67:83:9b:ed:ba:78:5f:c5:75:62:a8:83:86:58:e3:d3:50:10:
         23:e7:81:78:66:c7:53:96:25:1c:04:01:b6:2b:c1:02:ce:fa:
         1f:47:65:90:7d:d1:b4:12:3a:23:c7:33:86:67:bd:59:6e:04:
         7a:87:3f:ea:3f:c6:bb:ae:b9:a1:dd:8a:7a:b1:22:f7:43:10:
         df:72:cd:6e:20:27:9c:5e:af:24:81:3e:de:2b:0b:ff:f2:d5:
         64:78:bf:74:a5:58:b5:84:39:00:fe:70:25:65:03:12:f2:b3:
         a4:d8:fe:61:f9:55:05:20:ee:1b:2b:8e:db:c7:39:91:ec:e6:
         22:5b:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----