Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/21D6555DB73DD7006678C48DA584FD15C0A66CFE.cer
File:                     21D6555DB73DD7006678C48DA584FD15C0A66CFE.cer (raw, json)
Hash identifier:          SvyvZrNQGwnb8U+n7asJhYCG0U66eJONtMvMUnuV8ZM=
Subject key identifier:   21:D6:55:5D:B7:3D:D7:00:66:78:C4:8D:A5:84:FD:15:C0:A6:6C:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2EA300F2AA5D2ABD72201407BAC69B2D8C3FA2D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/0/21D6555DB73DD7006678C48DA584FD15C0A66CFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 21:05:17 +0000
Certificate not after:    Tue 08 Oct 2024 21:10:17 +0000
Subordinate resources:    AS: 61855
                          IP: 131.0.4.0/22
                          IP: 2804:1a58::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a3:00:f2:aa:5d:2a:bd:72:20:14:07:ba:c6:9b:2d:8c:3f:a2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 21:05:17 2023 GMT
            Not After : Oct  8 21:10:17 2024 GMT
        Subject: CN=21D6555DB73DD7006678C48DA584FD15C0A66CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c6:8b:47:09:9f:ae:fc:92:58:12:7c:33:2f:
                    71:dd:71:29:12:8b:86:88:e4:2d:9d:f3:3a:02:81:
                    a9:c7:3f:04:5b:5c:c3:ac:41:f8:36:8a:2f:8a:1d:
                    0e:9f:dd:22:01:0d:b3:f0:d4:3b:93:f5:92:3b:df:
                    3d:10:e1:e6:bc:8c:84:23:ad:ff:91:fd:10:8c:83:
                    6f:65:24:98:5a:db:1c:db:4a:13:72:8c:41:f4:b2:
                    e1:0b:6a:a0:93:1a:0b:d0:53:bd:23:ed:f1:3c:c4:
                    fe:6c:7d:e0:30:19:46:2f:9e:64:03:30:5a:72:91:
                    bf:5e:fe:c3:df:57:b0:ed:5b:dc:2c:f4:49:03:11:
                    f8:7c:8d:ae:83:a5:3d:56:21:21:17:1d:06:99:0a:
                    d1:cc:e3:13:03:33:68:a5:ff:de:fc:7d:3b:71:48:
                    de:6a:d3:dc:d6:3d:e5:bb:21:85:b2:38:4e:ac:ec:
                    c6:cf:64:97:e4:3f:0f:d3:a4:ae:43:eb:15:14:47:
                    5b:1f:39:2c:a8:2c:7a:60:7f:a0:1d:33:b3:c0:9b:
                    5f:70:a1:f7:aa:32:c9:a3:35:b9:04:b9:02:d0:dc:
                    61:30:97:b1:c8:3c:62:41:76:f9:99:0e:0d:ff:97:
                    6c:4e:03:db:00:8e:9e:6f:1c:45:88:77:59:27:c1:
                    00:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:D6:55:5D:B7:3D:D7:00:66:78:C4:8D:A5:84:FD:15:C0:A6:6C:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/0/21D6555DB73DD7006678C48DA584FD15C0A66CFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.4.0/22
                IPv6:
                  2804:1a58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61855

    Signature Algorithm: sha256WithRSAEncryption
         4f:22:eb:d1:7a:f6:84:f4:e5:89:ea:00:11:6d:b4:ee:e3:75:
         19:bf:a2:54:a0:1f:dd:b2:79:31:59:9b:0b:be:fc:c2:47:49:
         f7:b5:8d:1d:22:78:9f:41:8a:eb:4b:a6:12:c7:86:db:89:d8:
         c4:a8:33:e1:a2:1d:b2:ff:25:d2:00:de:9e:de:6b:66:a7:09:
         1e:33:1b:34:fa:92:c1:21:21:22:6d:23:8d:05:6c:76:49:5d:
         fc:1a:f7:f3:10:14:0e:79:6b:a7:94:d3:66:82:6e:a1:2b:d7:
         f1:b8:db:a1:24:e9:9b:68:a2:78:ae:32:15:f7:4b:a9:a9:70:
         cc:d8:87:3d:2f:66:7c:02:8d:2f:35:28:5b:93:51:62:21:9f:
         e1:0a:75:04:40:8a:2e:c8:c4:49:dd:11:58:87:c5:25:1d:d6:
         c5:fa:4a:26:aa:53:0e:97:a5:22:7f:3e:ac:05:bd:a9:1f:a5:
         6f:f3:b7:dd:17:ba:5b:66:02:8c:c4:31:ea:34:21:8d:75:a0:
         01:03:96:1c:bf:ad:c5:a9:c4:b7:cf:da:49:23:24:bc:d2:41:
         00:ad:47:1a:b6:53:d8:14:70:06:14:f4:49:cc:05:be:d3:d2:
         27:eb:6b:7d:d8:42:f4:1c:f8:1e:b4:e8:60:75:df:c7:48:66:
         25:87:17:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----