Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/54E1A721A2A2D3AB874E1E6DE191640E9F76D6EE.cer
File:                     54E1A721A2A2D3AB874E1E6DE191640E9F76D6EE.cer (raw, json)
Hash identifier:          1kKnI4VsnphEXMS1RPqKrWXQjAm3eglg3HizPxv/mas=
Subject key identifier:   54:E1:A7:21:A2:A2:D3:AB:87:4E:1E:6D:E1:91:64:0E:9F:76:D6:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       36EC212792E829F2ACB221A2A633651CCF56D550
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/0/54E1A721A2A2D3AB874E1E6DE191640E9F76D6EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Dec 2023 15:25:30 +0000
Certificate not after:    Fri 27 Dec 2024 15:30:30 +0000
Subordinate resources:    AS: 271450
                          IP: 181.233.68.0/22
                          IP: 2804:7bb8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ec:21:27:92:e8:29:f2:ac:b2:21:a2:a6:33:65:1c:cf:56:d5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 29 15:25:30 2023 GMT
            Not After : Dec 27 15:30:30 2024 GMT
        Subject: CN=54E1A721A2A2D3AB874E1E6DE191640E9F76D6EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:08:a8:19:31:37:5c:74:39:2e:bc:6e:87:
                    8d:d8:e0:7f:90:a5:0e:86:22:e3:5d:b0:75:f3:35:
                    f1:62:90:ed:fb:12:8b:b8:99:65:8f:9f:c4:d4:78:
                    73:10:1b:25:0a:10:cb:10:fd:65:4a:9a:b1:f3:46:
                    ba:4f:08:93:d5:1b:ef:f6:a3:c9:89:2a:35:4f:8d:
                    c9:d1:56:80:90:9a:3e:4b:52:05:f3:0e:e9:03:f5:
                    9a:28:18:2b:91:df:9d:11:9a:3c:59:7a:31:1d:33:
                    9f:86:ab:3c:71:4a:6f:7c:8f:8a:a0:ca:66:b2:65:
                    eb:9b:44:ab:6d:e3:61:7a:ce:70:82:db:fa:37:7e:
                    d0:57:74:35:5c:75:41:73:0f:0f:34:c6:f2:ab:fb:
                    71:ca:16:71:23:33:a8:6e:52:fa:b0:d8:ae:37:b9:
                    e4:35:0d:30:f6:93:e6:55:25:27:ab:35:02:2c:16:
                    d3:c0:98:46:a2:72:cb:e1:17:ac:e6:92:d1:b9:34:
                    ee:2d:76:bd:a3:c3:34:b2:ea:af:48:9e:17:7d:67:
                    ab:48:53:2b:a8:c9:e5:19:23:3e:93:db:df:70:c1:
                    0f:43:53:9d:05:6d:41:8c:ac:8f:02:90:fd:52:11:
                    6e:91:de:68:af:fd:2c:c7:46:66:83:d9:36:9e:c3:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:E1:A7:21:A2:A2:D3:AB:87:4E:1E:6D:E1:91:64:0E:9F:76:D6:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/0/54E1A721A2A2D3AB874E1E6DE191640E9F76D6EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.68.0/22
                IPv6:
                  2804:7bb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271450

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:5b:b2:c4:70:c0:e1:83:99:24:81:bc:ab:a5:ce:7c:da:
         62:60:bd:c6:63:5b:b5:93:43:a6:93:53:b4:3b:6c:6f:fa:5b:
         06:60:92:cc:32:0e:7a:21:7a:47:fa:a2:5d:3d:81:ad:6f:91:
         e5:66:c9:27:30:be:9e:90:cb:0a:c3:e3:03:32:3f:cb:19:4d:
         1a:6b:16:41:ab:9f:30:09:54:9b:29:d3:08:75:4b:5a:89:b4:
         21:0f:6e:df:14:d5:4e:fd:5f:78:e6:6f:21:dd:5a:62:b5:cb:
         be:a3:33:60:08:ec:c2:1c:fa:18:37:d1:6a:ba:7e:e8:c7:df:
         51:32:34:e4:ac:3e:7c:94:b3:b9:61:b9:d9:ab:0c:97:41:d5:
         fc:0c:dd:09:a1:67:f9:7a:05:e4:65:20:50:7e:00:22:b6:5e:
         af:ad:32:e6:88:22:51:6a:40:3d:44:9a:86:c0:bd:e5:34:c2:
         0a:20:cc:8f:a1:f7:06:8d:fe:28:8e:2a:c0:db:ec:5a:f9:62:
         36:98:9e:8c:18:f8:42:ec:d8:29:cc:72:31:a9:74:2b:9f:49:
         70:6e:c2:f3:97:24:95:a6:d1:09:90:3a:fb:22:29:83:62:07:
         f1:70:c3:c0:f9:4d:7b:d4:54:7e:24:13:c5:88:56:c8:f8:c9:
         fd:a1:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----