Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C.cer
File:                     FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C.cer (raw, json)
Hash identifier:          NG6BC92NaErPXILj+5g7C8QZUfePJHvGuSaznzx1dDs=
Subject key identifier:   FE:F8:DD:8F:52:EE:F0:3F:F2:CD:9C:97:A8:31:81:30:44:AA:DE:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0C77509BA4D0DBABB26663C76BB248EFC05D53FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 04 Feb 2024 03:09:32 +0000
Certificate not after:    Sun 02 Feb 2025 03:14:32 +0000
Subordinate resources:    AS: 269053
                          IP: 45.179.52.0/23
                          IP: 2804:5ebc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:77:50:9b:a4:d0:db:ab:b2:66:63:c7:6b:b2:48:ef:c0:5d:53:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  4 03:09:32 2024 GMT
            Not After : Feb  2 03:14:32 2025 GMT
        Subject: CN=FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c6:c9:d0:64:b5:1e:56:5f:2c:a6:c7:7f:9a:
                    ba:ef:4b:76:3b:cb:f7:ab:d1:71:e0:96:66:6f:a7:
                    0b:f6:25:9a:1d:34:87:78:a0:d2:8a:8f:a4:41:87:
                    a2:50:a2:c8:ba:de:a6:35:55:d4:1b:5f:1f:f7:a2:
                    68:b8:49:d2:40:3e:47:a0:f5:fc:ab:83:ad:6e:82:
                    2f:c3:90:fe:76:42:50:ef:1b:07:62:06:b1:a7:ef:
                    35:dd:25:76:67:cf:17:91:6d:16:8a:52:f1:31:6b:
                    d8:d9:92:45:96:4e:23:d6:47:99:4b:db:af:5f:4d:
                    9f:ae:86:dc:91:ea:69:3a:f4:05:a0:e1:16:1c:c0:
                    7c:20:13:25:8c:d4:71:cc:29:ac:a4:45:2d:8c:a3:
                    76:7f:d3:08:bf:41:eb:cd:52:d4:bf:6f:77:16:67:
                    11:50:a1:f5:95:ee:f9:6d:48:3b:e0:15:dc:54:ec:
                    5e:de:06:6e:0f:e0:d0:df:43:1a:69:5b:f2:1f:38:
                    11:e9:db:4f:ff:6b:55:8e:cb:37:46:9b:8d:bc:00:
                    3a:8c:8f:27:b5:77:17:a7:c7:ac:18:81:21:7a:ed:
                    58:82:41:1c:7a:ee:c3:8d:76:c4:0e:85:4d:3a:4d:
                    3c:4d:85:83:86:b9:fa:72:86:8f:28:a0:5a:52:52:
                    c7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:F8:DD:8F:52:EE:F0:3F:F2:CD:9C:97:A8:31:81:30:44:AA:DE:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.52.0/23
                IPv6:
                  2804:5ebc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269053

    Signature Algorithm: sha256WithRSAEncryption
         ae:ce:84:3c:dd:35:03:06:00:3c:3a:ae:11:7f:dc:d5:b6:ab:
         4c:55:8a:f3:53:0b:b7:f3:37:fb:a0:8f:b5:f2:2f:a3:e2:6e:
         b8:d5:bf:dd:84:21:4c:22:64:e5:15:a5:7e:dc:72:91:9b:92:
         cd:92:bb:2c:4a:c6:e8:6e:80:f7:1a:c5:f3:d3:67:c5:ac:9b:
         c8:07:38:ba:c9:c9:90:84:26:c9:23:e3:29:30:6a:a9:04:a8:
         e0:04:10:c9:d1:d6:fc:ba:b0:60:4e:6a:0b:06:63:3e:bd:51:
         41:a8:8f:8d:d4:6c:98:b7:32:96:f2:d7:4d:e1:ff:82:97:1f:
         a2:4c:61:75:1e:35:8e:0d:d7:9f:8e:9d:d7:14:65:5f:f6:1a:
         28:1f:3a:bf:c4:1f:ef:24:06:c7:9c:7a:dc:35:56:60:0c:f1:
         31:7e:79:a5:aa:8d:5a:2e:e2:35:3a:fa:6e:6b:fa:35:8b:da:
         78:09:8c:db:33:37:a2:02:80:b2:54:ae:ba:e5:d8:40:a3:ec:
         8f:1c:2e:12:5a:20:6c:8f:cd:20:da:ab:89:27:4c:f0:6a:31:
         36:bd:29:9e:07:f8:8e:a4:cc:18:c9:98:65:e0:4d:2f:04:8b:
         9f:dd:f6:dd:04:05:ff:42:1a:78:ca:0c:8d:e2:8e:e1:d1:e9:
         f4:76:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----