Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0BE63AC889C355E150DB71F2874FAD6A623AC0D9.cer
File:                     0BE63AC889C355E150DB71F2874FAD6A623AC0D9.cer (raw, json)
Hash identifier:          7PtdI6Af9gZB3MyjmOhantOsxrvVuGraHES0JyM91GY=
Subject key identifier:   0B:E6:3A:C8:89:C3:55:E1:50:DB:71:F2:87:4F:AD:6A:62:3A:C0:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2FAFCC3862F2CF91C12176413E36AF85F95F2AF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/0BE63AC889C355E150DB71F2874FAD6A623AC0D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 20:53:59 +0000
Certificate not after:    Thu 12 Sep 2024 20:58:59 +0000
Subordinate resources:    AS: 266583
                          IP: 45.7.100.0/22
                          IP: 2804:3e40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:af:cc:38:62:f2:cf:91:c1:21:76:41:3e:36:af:85:f9:5f:2a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 20:53:59 2023 GMT
            Not After : Sep 12 20:58:59 2024 GMT
        Subject: CN=0BE63AC889C355E150DB71F2874FAD6A623AC0D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:91:98:68:1b:86:49:b8:e5:98:e5:73:d6:97:
                    5c:52:dd:2d:fc:4e:21:05:b7:de:f3:70:b3:0f:34:
                    1f:1a:7d:93:0e:3e:ff:73:84:c1:5f:df:d8:1c:f1:
                    43:a2:a6:6d:43:24:78:5e:38:e3:4d:a9:5a:fc:0d:
                    57:1e:33:da:a0:45:57:fa:7a:af:5f:26:d5:35:ad:
                    19:1a:89:ee:75:4f:f0:21:e0:19:84:2f:39:e4:1d:
                    41:3c:f9:2f:97:e7:ab:5c:33:d0:55:28:11:b5:f9:
                    3e:c4:42:50:79:f7:92:80:f5:6e:57:7c:4a:0a:93:
                    c3:41:88:f7:e1:b7:42:49:a9:7c:88:cf:5a:dd:0e:
                    4d:57:ec:d8:1f:aa:53:2a:e3:ed:48:75:bd:cc:c1:
                    c3:a6:8b:38:9f:18:1f:21:9b:79:e1:e3:b8:cf:bd:
                    d9:20:aa:0d:60:08:35:07:35:be:a6:50:aa:ab:83:
                    f6:39:c0:ed:33:d2:a0:75:3c:02:cc:d5:a5:ae:e1:
                    8f:1f:64:91:4c:ea:b4:6c:95:61:8f:45:ae:51:73:
                    f2:c7:5e:54:45:e0:e8:b8:77:5e:77:cc:d7:c4:fc:
                    01:3d:e0:0c:77:0c:ec:9c:b2:5d:9f:68:63:f9:05:
                    0c:ff:7c:fb:01:2b:6d:55:96:13:1e:4a:28:99:0a:
                    fd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:E6:3A:C8:89:C3:55:E1:50:DB:71:F2:87:4F:AD:6A:62:3A:C0:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/0BE63AC889C355E150DB71F2874FAD6A623AC0D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.100.0/22
                IPv6:
                  2804:3e40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266583

    Signature Algorithm: sha256WithRSAEncryption
         01:6f:39:56:a9:ce:ac:da:f7:b5:98:79:db:fc:e6:43:43:b8:
         e7:b2:df:28:7b:71:53:6c:76:8e:eb:b5:99:c3:b2:3a:ef:30:
         37:a0:ef:f9:79:e5:39:b5:c7:5f:d7:62:d4:28:38:8d:53:99:
         05:7c:70:fb:8b:c5:43:84:77:be:23:f2:0f:f0:40:43:fb:de:
         7c:b9:82:74:a8:6e:94:94:6b:ab:ae:2a:d1:18:85:27:11:e8:
         1e:97:6a:f5:51:89:ea:9f:bd:84:59:d3:b0:c3:84:2e:6f:6c:
         1c:48:d9:80:9d:9f:6d:c8:a5:24:34:f7:31:59:7d:48:f2:ae:
         74:ce:a6:97:46:5b:f2:3f:af:e4:dc:d4:88:a4:3e:e7:3b:05:
         86:f6:37:7a:12:8b:c1:65:02:a4:78:81:a0:ba:db:2f:2d:f3:
         f1:22:24:f8:1e:83:0e:b9:2d:5b:6f:b7:13:87:18:ec:96:86:
         a6:cb:4f:4f:e2:dd:0c:3b:31:9e:07:8d:60:81:dc:78:ea:eb:
         61:d6:90:51:84:87:b8:b4:5d:37:ec:d5:40:08:35:d2:9e:8e:
         c4:7e:61:ab:a3:82:8c:34:99:dd:52:b8:ac:2f:1d:9e:c9:d0:
         14:f6:a9:f2:6c:fc:30:f7:02:35:69:cc:f1:60:ca:a7:38:6f:
         2e:03:d4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----