Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/323408F4A08085567D2BEEC5D6976D62865EE349.cer
File:                     323408F4A08085567D2BEEC5D6976D62865EE349.cer (raw, json)
Hash identifier:          tllWyytfX4ZTzrxLStugdqKPRZnAQUHfmmupIFD73Lo=
Subject key identifier:   32:34:08:F4:A0:80:85:56:7D:2B:EE:C5:D6:97:6D:62:86:5E:E3:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B7C0EE64834738727FDEA81BA88BD28B5D34A5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323408F4A08085567D2BEEC5D6976D62865EE349.mft
caRepository:             rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 13:55:49 +0000
Certificate not after:    Tue 12 Nov 2024 14:00:49 +0000
Subordinate resources:    AS: 266439
                          IP: 170.81.248.0/22
                          IP: 2804:37d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7c:0e:e6:48:34:73:87:27:fd:ea:81:ba:88:bd:28:b5:d3:4a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 14 13:55:49 2023 GMT
            Not After : Nov 12 14:00:49 2024 GMT
        Subject: CN=323408F4A08085567D2BEEC5D6976D62865EE349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:54:47:1e:1d:a2:f6:4a:db:87:1d:da:45:
                    a7:83:37:6a:1c:8f:f0:50:32:9c:ae:2a:ab:6d:5d:
                    0f:6d:2e:4d:fa:9a:9b:2c:8d:f7:7d:e7:9b:f0:c8:
                    7a:1b:3c:57:c0:8b:37:cd:d1:b0:85:61:1c:52:20:
                    28:85:68:81:4d:a4:c1:6b:4b:ce:72:bb:af:a3:a7:
                    d3:52:2e:0b:df:cd:ca:c5:c4:76:43:49:71:f9:d7:
                    5b:3e:fa:15:f6:de:37:98:2d:cd:4a:01:2c:bc:90:
                    be:b7:0e:13:ca:07:62:bb:e4:93:95:aa:2b:75:ea:
                    c9:a3:70:17:bc:fe:a6:04:e8:ec:38:f1:3a:a2:3b:
                    b6:fc:95:d9:17:84:81:c1:59:7f:07:f7:9b:95:ae:
                    f3:00:a6:48:95:1f:84:08:97:db:37:4d:19:d3:5f:
                    c9:b8:da:ba:03:38:d2:d8:68:ec:df:d2:33:cd:85:
                    5a:40:63:de:2d:07:e7:fb:b5:40:42:18:c2:2f:c8:
                    81:c8:ed:54:ee:fc:dd:69:51:98:e9:c3:fa:ff:db:
                    c6:2c:84:26:11:ca:5d:44:a7:74:04:87:b9:24:5a:
                    63:13:11:1a:8c:62:d4:e8:ed:03:1e:a1:4f:8a:87:
                    3c:c8:42:5a:d6:e8:2b:9a:47:97:e7:a8:a6:19:ec:
                    24:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:34:08:F4:A0:80:85:56:7D:2B:EE:C5:D6:97:6D:62:86:5E:E3:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323408F4A08085567D2BEEC5D6976D62865EE349.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.248.0/22
                IPv6:
                  2804:37d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266439

    Signature Algorithm: sha256WithRSAEncryption
         3d:18:0f:81:d0:1c:99:42:f0:17:0f:38:ae:0d:21:10:e2:74:
         87:14:73:46:24:a7:37:b5:3a:10:2d:51:a4:dd:75:34:41:b9:
         56:f7:33:cf:01:e6:1c:fd:42:ad:2a:de:99:01:c5:5d:69:37:
         d6:d4:62:f9:f9:27:da:f5:75:24:d7:86:b5:a7:1f:04:39:0c:
         ac:e5:c2:44:74:2e:90:84:ef:29:10:44:5f:d8:29:fe:f2:14:
         ef:7c:41:9a:ff:69:44:a0:f0:35:b7:50:72:4e:44:fa:af:f0:
         37:81:68:fb:b9:bc:01:c0:ec:c3:a7:55:df:22:33:87:25:4f:
         3c:b0:93:b7:ff:02:53:35:b6:40:04:b1:8f:78:4a:3d:aa:37:
         8e:f4:c9:45:1a:5a:d8:0d:fb:c1:d4:6f:f9:21:f0:04:27:37:
         24:cc:fd:e2:89:9c:20:3c:66:91:6d:ed:8c:c4:9d:12:06:c4:
         e2:d0:d2:b0:f6:df:91:28:48:81:79:90:04:fd:18:66:5e:14:
         a0:e9:d2:de:ee:14:7c:b4:72:83:0c:b0:79:08:e9:16:71:f6:
         42:2c:31:84:b5:10:1e:8d:32:27:da:56:8c:61:56:43:e2:66:
         e9:66:72:fc:6e:95:c6:93:61:c3:8c:1e:54:15:fe:2b:b3:05:
         2c:a0:fa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----