Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.cer
File:                     135AE876E6C6DE65386EB266C9EEC0A2E23574DE.cer (raw, json)
Hash identifier:          X35MIjf/GO0+e0eYcjGpD/wNiPTJKpsezHOiOVTQJPA=
Subject key identifier:   13:5A:E8:76:E6:C6:DE:65:38:6E:B2:66:C9:EE:C0:A2:E2:35:74:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       026AB3C41841BCAABB84110E3BFE5EB4E6D138CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 01:26:04 +0000
Certificate not after:    Wed 10 Jul 2024 01:31:04 +0000
Subordinate resources:    AS: 270868
                          IP: 177.23.48.0/22
                          IP: 2804:72ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6a:b3:c4:18:41:bc:aa:bb:84:11:0e:3b:fe:5e:b4:e6:d1:38:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 01:26:04 2023 GMT
            Not After : Jul 10 01:31:04 2024 GMT
        Subject: CN=135AE876E6C6DE65386EB266C9EEC0A2E23574DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:9c:da:85:51:b3:0e:04:71:f5:6b:55:1d:
                    5f:87:ba:9c:9e:44:85:22:72:12:41:c6:c4:09:52:
                    aa:6f:43:0f:8f:44:25:7e:47:2a:b3:54:40:d3:3a:
                    0f:02:68:22:0e:14:9c:d6:c0:84:3b:03:57:4e:ab:
                    46:9f:56:77:27:13:44:d1:3c:21:37:4d:8f:d3:79:
                    f8:08:a3:49:30:01:a2:2f:9e:35:46:3d:36:c9:9e:
                    dc:a6:5d:eb:f9:f5:fe:0d:77:b4:7f:0e:2a:c6:ce:
                    5c:08:f8:9a:2c:f5:4f:6e:43:b0:6e:06:ff:e0:ca:
                    d5:79:ef:1e:68:9c:32:b5:83:84:bc:aa:bf:bc:21:
                    79:59:7f:c9:99:fd:81:85:05:51:e4:a9:c8:d1:d2:
                    fd:bb:1f:82:54:f2:9e:83:1c:ce:6d:75:3a:c1:b0:
                    f5:f3:cb:33:cf:6c:49:58:48:bb:4c:ba:10:dd:f3:
                    23:45:97:f4:32:04:7a:96:9f:e2:27:64:f9:6d:ee:
                    a6:9a:02:e4:c4:87:6e:42:e1:e2:0a:d6:32:9e:a8:
                    c7:70:44:37:56:95:b6:31:25:10:0f:69:48:ab:9a:
                    b8:7a:75:2b:53:25:f6:12:df:34:d4:fb:b1:0e:0f:
                    37:70:ed:24:41:dd:0c:1a:60:08:7d:6b:0f:b7:d9:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:5A:E8:76:E6:C6:DE:65:38:6E:B2:66:C9:EE:C0:A2:E2:35:74:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.48.0/22
                IPv6:
                  2804:72ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270868

    Signature Algorithm: sha256WithRSAEncryption
         79:20:1f:47:bf:db:64:05:00:1d:1b:f1:12:1b:f7:d8:ef:ff:
         6f:75:5e:ed:d8:b2:fc:67:3c:00:0a:9f:c8:e6:40:6e:63:9f:
         9d:19:b7:81:9c:ea:38:f6:f5:ca:ef:8b:61:76:13:e8:dc:17:
         05:22:6d:4d:79:c7:6b:86:63:a8:c7:31:0a:e1:7d:1e:0f:e4:
         5b:87:29:7d:28:28:d5:87:5d:c3:f7:5b:55:fc:08:18:19:01:
         c4:af:c9:08:05:4c:ff:cb:54:be:ae:71:0c:c5:03:95:da:15:
         55:c9:4f:fc:b9:cb:24:67:3f:d7:cc:f9:a3:0c:13:b5:d3:e9:
         ec:42:15:63:93:33:cf:2a:38:d8:2f:22:f8:f3:76:68:76:c1:
         4b:a8:78:b9:23:d9:9d:8d:20:60:57:02:6f:42:b9:a5:a8:c6:
         c4:a5:47:0c:9c:27:bf:e7:7b:cf:ca:0e:b3:9b:70:fc:79:7f:
         e9:b7:f5:f7:82:8e:04:06:6d:c7:70:a6:23:44:52:6d:6e:b8:
         68:74:38:55:0b:83:03:d0:d6:cf:19:a4:41:20:dd:a2:2d:38:
         72:47:46:81:80:73:62:59:cc:65:61:b3:e7:41:92:32:6d:da:
         72:da:c6:c9:9e:f5:78:b4:72:68:33:e2:69:5c:96:bb:78:33:
         f6:22:ff:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----