Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B3BF073AB1A2985154054B140C7DB1BF95516900.cer
File:                     B3BF073AB1A2985154054B140C7DB1BF95516900.cer (raw, json)
Hash identifier:          ezdk2BGBd5q1sPQuX5fgwk96+1qsV5Y5tz2yqN1iHUo=
Subject key identifier:   B3:BF:07:3A:B1:A2:98:51:54:05:4B:14:0C:7D:B1:BF:95:51:69:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25B96DE0AB6D90F38419357DF987393E71DE7087
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/B3BF073AB1A2985154054B140C7DB1BF95516900.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 23:13:44 +0000
Certificate not after:    Thu 11 Jul 2024 23:18:44 +0000
Subordinate resources:    AS: 266413
                          IP: 170.81.100.0/22
                          IP: 2804:376c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b9:6d:e0:ab:6d:90:f3:84:19:35:7d:f9:87:39:3e:71:de:70:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 23:13:44 2023 GMT
            Not After : Jul 11 23:18:44 2024 GMT
        Subject: CN=B3BF073AB1A2985154054B140C7DB1BF95516900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:f0:e0:64:bd:02:42:32:18:91:cb:67:b6:
                    54:9a:2f:00:4a:fe:fe:0c:4e:76:e5:77:7d:7b:59:
                    4c:88:ee:9f:0f:32:be:90:cb:f3:20:cd:50:44:9f:
                    a3:33:7e:80:80:4d:91:48:d2:85:45:33:4a:86:5c:
                    9d:da:a4:a4:3f:e8:20:36:97:30:65:4c:42:06:4a:
                    8d:39:7f:1b:2f:e6:ea:ff:57:b2:25:00:29:6f:16:
                    7e:dc:ae:f0:e3:2f:a4:08:ca:6b:79:3b:6e:01:39:
                    f5:dd:9a:63:d1:be:c1:30:89:70:48:0c:ff:b1:c1:
                    27:be:96:b7:9c:8b:49:ad:44:49:93:f1:93:6f:4f:
                    85:7d:d8:9f:95:b3:e0:01:71:a6:4e:14:65:a4:07:
                    98:b4:82:33:17:9c:ad:5c:30:f4:5d:c1:65:3d:ff:
                    8d:93:9b:d5:b7:77:9a:65:d8:c6:13:f8:14:d2:d0:
                    d4:d2:6f:dd:71:fd:f4:67:29:a3:ee:fd:bf:15:98:
                    03:9c:f6:73:28:92:8c:5a:28:cc:5a:ba:c9:49:32:
                    86:57:97:76:ef:2e:ef:75:f3:50:76:21:f5:d7:c9:
                    12:7d:e3:11:c6:50:e8:a7:30:15:3a:00:dc:ae:3d:
                    d0:85:ac:b4:43:5a:55:b9:53:a6:29:d5:3f:e0:9a:
                    ce:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:BF:07:3A:B1:A2:98:51:54:05:4B:14:0C:7D:B1:BF:95:51:69:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/B3BF073AB1A2985154054B140C7DB1BF95516900.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.100.0/22
                IPv6:
                  2804:376c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266413

    Signature Algorithm: sha256WithRSAEncryption
         a4:e8:2f:78:a4:71:b2:71:93:4b:e2:16:e1:7c:5d:ec:b7:4c:
         9d:98:2b:88:00:a5:51:37:2d:49:c7:ea:c3:1f:e8:32:38:1b:
         e3:07:69:49:8a:0d:2f:82:4c:31:ae:15:dc:e0:3b:e3:66:e1:
         f6:a0:d0:a9:22:aa:1f:9c:dd:b8:9a:9f:de:c1:5a:ef:83:b9:
         44:de:c6:ef:b4:56:4a:eb:e5:5a:b3:af:6a:8b:2d:8f:1c:ab:
         eb:ba:cc:fd:cb:a7:f5:8c:03:25:da:a2:68:c9:5f:82:d2:22:
         6d:9a:68:ee:ba:7b:07:6d:3c:e9:c0:03:39:34:eb:88:4d:46:
         5d:b8:7a:ef:9f:1e:d4:02:79:2b:c3:8e:9e:61:ad:64:a3:60:
         ff:6d:f0:80:33:9f:fe:a7:18:14:39:bd:dc:4d:50:9e:7a:ca:
         9b:45:65:f2:0f:3c:a0:34:17:2f:83:78:1f:43:c7:4c:2e:d7:
         25:f6:c2:ad:ec:79:c8:7b:4e:d5:8e:46:73:e9:49:5f:10:c9:
         54:4e:ba:f1:d7:ee:e4:29:c2:1c:02:a2:94:00:02:af:96:11:
         cc:0d:74:5a:03:43:13:1f:23:2b:c2:12:b9:18:86:3e:f0:78:
         3f:db:e7:f5:a7:8d:8a:73:a9:79:37:cd:72:9d:82:98:5f:99:
         6d:af:fe:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----