Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FD4D89D5A7810B37AF10382AA7E13032E2ABD8CB.cer
File:                     FD4D89D5A7810B37AF10382AA7E13032E2ABD8CB.cer (raw, json)
Hash identifier:          9zHES60NP10MtcmMtI90LvRxU7d+tWZXfHTzpg52JF8=
Subject key identifier:   FD:4D:89:D5:A7:81:0B:37:AF:10:38:2A:A7:E1:30:32:E2:AB:D8:CB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BA8596B92FDEA9ABF00B88DA5C033EEBB3389D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0/FD4D89D5A7810B37AF10382AA7E13032E2ABD8CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:43 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:43 +0000
Subordinate resources:    AS: 61951
                          IP: 201.219.248.0/22
                          IP: 2804:18c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a8:59:6b:92:fd:ea:9a:bf:00:b8:8d:a5:c0:33:ee:bb:33:89:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:43 2024 GMT
            Not After : Mar 31 11:03:43 2025 GMT
        Subject: CN=FD4D89D5A7810B37AF10382AA7E13032E2ABD8CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:f6:37:15:41:a2:a5:51:c2:68:f2:ad:c1:
                    a6:5a:37:88:18:e4:6e:f9:d1:1c:50:55:db:2f:8b:
                    98:97:5b:c3:46:6e:ba:1f:7a:26:fa:b8:05:35:c5:
                    86:b4:7f:05:0f:2c:da:fe:5a:0f:48:74:f1:c3:f6:
                    88:b1:f9:7f:07:17:ee:7f:44:55:69:3a:75:fc:79:
                    8d:7f:ea:7b:63:ce:aa:4c:70:71:c1:5f:3c:59:1e:
                    e5:37:b3:7c:a4:6f:a1:f0:cd:c5:b8:ec:70:af:41:
                    cf:d3:e9:9c:68:81:b8:b8:09:52:6e:7f:4d:d6:60:
                    2b:c1:aa:30:f5:9d:3e:8e:8c:e5:29:77:f7:b2:6a:
                    93:c0:d3:bf:b6:5e:ca:0b:bd:42:ff:23:8e:91:65:
                    09:c3:30:92:67:cb:eb:6e:9c:ed:85:52:0b:30:0a:
                    06:bc:47:81:25:6e:39:2b:97:ef:3a:e8:1a:f2:c6:
                    3b:71:3f:95:75:81:34:b1:4c:35:05:6f:7d:20:a9:
                    d4:a3:2d:01:53:9e:07:3a:47:e9:18:66:15:c6:ef:
                    f8:f0:46:47:59:f7:1b:70:7f:44:05:a7:12:56:49:
                    ba:0b:14:e5:15:a9:4b:02:5e:a6:73:04:43:6f:01:
                    f5:98:00:5d:7d:ca:75:8d:4b:ef:70:31:f8:3c:85:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:4D:89:D5:A7:81:0B:37:AF:10:38:2A:A7:E1:30:32:E2:AB:D8:CB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0/FD4D89D5A7810B37AF10382AA7E13032E2ABD8CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.248.0/22
                IPv6:
                  2804:18c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61951

    Signature Algorithm: sha256WithRSAEncryption
         6b:68:04:f6:68:69:4c:3c:e6:47:d8:3a:04:98:6f:ca:43:f4:
         ce:c8:9e:0c:71:57:b1:22:32:e1:d2:fd:69:47:a6:b3:7e:5d:
         a6:df:a8:8b:c5:da:f4:c9:26:23:6f:ca:6f:b4:9b:b2:5c:4d:
         ed:fd:25:21:53:91:55:c8:9a:23:3d:09:a1:ac:20:82:a7:82:
         08:d3:24:23:1e:6e:89:67:a6:7b:e5:04:80:65:ed:28:be:ec:
         1f:99:c1:2e:8c:f5:56:8b:34:05:8e:66:b5:98:cf:8a:e2:d9:
         01:5d:66:65:88:84:75:41:5d:5a:a1:c6:9f:a9:a2:93:6f:55:
         72:a4:2b:8d:19:5f:39:d1:a6:74:d9:b5:50:f3:a5:cb:f0:3b:
         f2:c1:92:34:d8:f9:ea:1e:2d:59:d9:72:66:30:af:7e:91:9f:
         0f:23:92:b5:be:70:72:a0:43:01:46:24:0e:1b:9b:5e:f5:c7:
         76:cd:64:ac:95:13:5e:75:67:9d:4b:ba:af:52:2d:80:58:bc:
         5b:9b:c5:a8:eb:07:c2:fa:d3:6f:bb:0e:e0:15:60:81:4e:fb:
         8f:37:06:94:4a:19:f9:a0:09:e3:03:9a:5e:35:94:4c:bf:59:
         41:c4:bd:de:f5:b3:fa:a2:a7:66:7e:2e:a6:25:e8:b8:dc:43:
         b7:2e:59:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----