Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
File:                     FF200E4C71F382D87AE431559DD6BD74D192236B.cer (raw, json)
Hash identifier:          TuKX9MrcGzSq2xoVNH5wdQz5F344pAq0W43w+s+j47k=
Subject key identifier:   FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       012E2616BB0EBD7D0F44E4829179CDB81B445222
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 18:53:45 +0000
Certificate not after:    Fri 07 Mar 2025 18:58:45 +0000
Subordinate resources:    AS: 53018
                          IP: 177.72.128.0/20
                          IP: 2804:354c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2e:26:16:bb:0e:bd:7d:0f:44:e4:82:91:79:cd:b8:1b:44:52:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 18:53:45 2024 GMT
            Not After : Mar  7 18:58:45 2025 GMT
        Subject: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:8d:13:5a:3a:d3:d8:6c:5c:81:05:e9:08:
                    4d:09:ad:8f:5b:db:f8:9d:36:0e:44:d7:65:0a:e5:
                    4b:d9:25:b8:61:d0:c3:09:74:a2:59:bf:6c:20:be:
                    e5:18:d8:99:7c:77:17:cb:e4:ba:4a:97:8e:94:4a:
                    fa:f8:97:70:70:7a:83:bb:cb:89:f9:43:5c:77:c7:
                    55:a6:78:e6:a8:62:d1:67:73:c0:21:d5:4d:6b:c2:
                    e5:da:db:bc:8b:c6:25:ae:7d:82:65:e0:55:bd:e6:
                    2f:03:ec:e3:b0:4b:e7:d1:b1:70:14:e3:09:e8:c8:
                    a2:f6:0d:f6:da:b7:07:30:10:fd:bd:0d:c9:dd:fc:
                    4c:97:98:c9:a3:75:85:bf:73:2a:e2:75:38:e9:ec:
                    20:ce:21:33:f7:24:e5:15:93:99:f2:5d:89:3d:3e:
                    c3:f6:ab:8a:5f:a9:6b:b5:c7:3f:4e:fc:69:15:95:
                    86:db:2e:be:ff:b8:62:35:f0:39:f2:dc:54:29:ac:
                    e4:2e:e5:e9:89:82:78:f5:4b:11:45:4b:0c:e2:2a:
                    89:f4:bd:a7:f2:fc:b3:76:2e:38:39:ca:ef:f5:94:
                    47:0c:b6:95:8a:1d:15:24:d4:5d:7d:58:9e:ce:0d:
                    e2:e7:10:74:b6:bf:0f:e8:ab:43:96:37:cb:fb:14:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.128.0/20
                IPv6:
                  2804:354c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53018

    Signature Algorithm: sha256WithRSAEncryption
         6f:60:50:f3:cf:37:54:c5:3b:a1:a0:96:36:25:f8:ee:f2:2d:
         0b:2d:29:32:d4:37:2c:cd:7f:e3:1b:af:6f:e9:fd:c6:be:98:
         e4:4b:d4:a3:30:1c:ae:72:57:35:52:e4:aa:68:d0:f0:d0:d6:
         a2:c1:0f:f6:9f:60:d2:d1:61:34:2d:a7:e4:f5:7c:c7:1c:90:
         b8:ad:21:53:6a:0e:c8:af:ed:29:73:73:13:1e:09:b8:20:74:
         40:e9:c2:b5:10:7f:16:5f:2b:83:6f:93:8b:fd:a6:8b:ae:e4:
         e2:67:fe:1f:ca:e0:8b:c7:1e:19:20:69:0c:99:87:ae:00:e5:
         55:a2:70:8f:d9:6d:84:ce:f7:94:4c:aa:94:52:de:be:4e:30:
         4a:75:12:8f:74:60:79:07:eb:5f:46:98:9b:18:a1:14:38:cf:
         f3:36:15:92:65:f0:0e:56:04:9b:07:69:6e:a5:18:14:5e:d1:
         e3:e2:81:7d:b7:a3:f5:e1:a7:e0:55:da:46:12:c6:6b:1c:ce:
         63:42:60:53:d7:99:c7:d6:c7:d0:15:52:d8:99:9e:33:bc:43:
         6a:26:7d:df:a3:ad:88:e1:23:d8:57:d0:26:b4:ad:82:2b:b5:
         6e:66:b8:a8:16:4c:f6:48:1c:7b:9a:04:65:49:be:2a:6b:d2:
         05:d5:65:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----