Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
File:                     21A02AA2E829E518343958EE9E7A7D284839B404.cer (raw, json)
Hash identifier:          SZiKyNPc0HQ1XQz/aXzNbjCrJ1UNYu/t61RVDmWAIIo=
Subject key identifier:   21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       024F0B3C4B92BD9E8C358E411BBD70B25EB36235
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 20:05:20 +0000
Certificate not after:    Fri 12 Jul 2024 20:10:20 +0000
Subordinate resources:    AS: 52706
                          IP: 170.233.212.0/22
                          IP: 177.126.16.0/20
                          IP: 2804:c70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4f:0b:3c:4b:92:bd:9e:8c:35:8e:41:1b:bd:70:b2:5e:b3:62:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 20:05:20 2023 GMT
            Not After : Jul 12 20:10:20 2024 GMT
        Subject: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:03:ec:09:a8:96:20:43:d7:72:d8:7e:90:
                    52:32:4e:f3:ca:45:b2:10:eb:ad:01:f8:3f:07:7c:
                    4c:c2:e1:fd:42:81:e1:aa:90:f1:4d:c7:58:07:64:
                    9b:e8:ef:91:00:9e:6e:f1:e3:7d:e6:35:dc:8c:9d:
                    9b:eb:f2:d0:1b:a7:8e:ed:9f:91:ac:73:cb:f1:fa:
                    1e:c6:9a:18:bc:35:f2:af:2a:be:0b:fe:68:41:50:
                    d1:5c:91:3b:93:49:9f:e8:d5:25:35:27:ed:9a:78:
                    70:c5:09:39:ae:8b:b7:3f:02:fb:96:c4:b5:c3:e3:
                    7f:e6:78:3f:e0:ea:b1:e7:f8:23:59:9b:1d:a9:da:
                    41:ea:fb:de:51:03:46:6d:0a:79:66:70:70:f9:21:
                    3c:a5:5c:21:d2:9e:73:26:25:2a:3f:a0:61:61:24:
                    f0:e3:09:4f:30:eb:63:15:07:d0:7f:a3:e7:93:57:
                    04:0f:fc:e6:f8:fe:d9:35:2f:cd:3c:8e:80:64:98:
                    d3:ae:12:53:5c:1a:d4:36:fa:fa:d9:f2:e9:40:fe:
                    52:8c:ce:43:9c:b5:c4:3f:09:11:93:33:62:8c:17:
                    0d:6b:2a:8f:be:3b:dd:4d:2a:7b:81:9d:c0:db:7b:
                    33:db:e2:e8:b1:ec:ca:df:24:da:48:64:d5:99:b1:
                    eb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.212.0/22
                  177.126.16.0/20
                IPv6:
                  2804:c70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52706

    Signature Algorithm: sha256WithRSAEncryption
         33:a3:0a:ab:5c:e5:66:f8:bd:e5:5c:ef:1f:e3:16:57:79:6b:
         fa:6b:3a:32:28:94:e7:2d:55:98:f0:52:64:26:6c:4f:86:26:
         04:79:ec:c6:3f:9e:53:09:e8:ea:69:20:2b:e6:00:b6:d9:94:
         7a:c4:b2:1a:6f:6f:05:57:8e:45:7b:f0:6c:d6:5d:3e:66:f0:
         b4:b4:f2:c2:25:70:f8:0c:68:56:a7:f5:af:e6:1e:20:37:ce:
         47:b8:13:35:f1:62:06:a1:78:8f:35:d1:80:72:f1:22:72:8d:
         3a:ea:14:59:b2:bf:40:f7:16:e0:cf:f8:eb:af:92:e6:ee:66:
         53:ea:51:55:f0:45:79:aa:bc:e4:89:57:c0:e7:bf:65:07:0b:
         31:ba:32:ca:c3:24:8d:34:56:7b:00:e5:e0:c7:9f:a2:67:52:
         cb:0b:08:ab:44:9d:de:9b:2f:41:1c:5f:e4:c2:5d:13:03:bb:
         1d:47:b6:32:4a:31:a1:b2:67:f6:d1:be:e5:26:8e:50:a8:74:
         99:95:3e:82:e7:f6:7b:88:12:72:f3:b4:1b:31:7c:92:68:8c:
         09:3a:aa:d7:e6:b4:be:95:0e:1d:5c:44:fb:a4:11:13:69:6a:
         6a:60:e9:a1:35:c7:db:b3:59:0f:cd:ad:5e:32:48:3e:f1:4c:
         39:c5:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----