Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/246240EE97BDDD180E05F94C2857F823EA20229D.cer
File:                     246240EE97BDDD180E05F94C2857F823EA20229D.cer (raw, json)
Hash identifier:          HHqJJXXhYrqCzaeK+YUIfaov/YrLJC7Wzx1VXBcG04Q=
Subject key identifier:   24:62:40:EE:97:BD:DD:18:0E:05:F9:4C:28:57:F8:23:EA:20:22:9D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C4720F2554D647035C2A54943535DD01C7D7DAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/246240EE97BDDD180E05F94C2857F823EA20229D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 15 Aug 2023 13:57:12 +0000
Certificate not after:    Tue 13 Aug 2024 14:02:12 +0000
Subordinate resources:    AS: 269237
                          IP: 45.182.204.0/22
                          IP: 2804:617c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:47:20:f2:55:4d:64:70:35:c2:a5:49:43:53:5d:d0:1c:7d:7d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 15 13:57:12 2023 GMT
            Not After : Aug 13 14:02:12 2024 GMT
        Subject: CN=246240EE97BDDD180E05F94C2857F823EA20229D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:cb:91:f0:c5:33:f7:bd:47:c3:57:0f:1a:
                    bc:d4:28:e8:09:9d:d7:6f:49:8a:69:d0:65:74:8b:
                    d6:92:bc:43:5a:62:1e:29:43:be:38:b0:10:09:be:
                    51:7d:23:b2:fb:10:95:7c:bd:6f:8b:dc:fc:1d:a4:
                    7a:0b:26:d0:f1:26:38:ed:d0:f2:cb:42:fc:1c:2f:
                    e0:76:7b:38:9c:e8:01:ff:56:e6:ae:8e:0e:98:8b:
                    6d:25:d7:3b:04:45:87:c0:c3:63:e2:93:dc:de:79:
                    23:22:eb:34:50:6a:8c:59:e6:8a:fa:2e:81:b2:28:
                    5c:95:3d:80:7a:14:39:6d:22:d7:42:fe:06:63:9a:
                    28:72:92:1c:b4:dd:42:37:5b:6c:1a:94:e8:4b:bc:
                    dc:6e:d4:63:2f:51:8c:a4:bf:6f:6e:8e:6a:72:13:
                    ee:23:dc:fd:b8:e2:4f:9d:cf:83:55:ff:d8:30:9d:
                    10:60:56:75:bb:42:f9:cb:36:3e:6c:35:79:9c:e6:
                    5a:31:42:56:2b:f6:45:25:97:b9:3b:db:47:30:db:
                    0f:4c:53:a4:f3:7c:4c:b6:ce:13:5e:e3:ff:df:e4:
                    cf:6d:8d:76:7e:81:eb:74:a1:68:fc:ce:e5:49:9a:
                    e0:c8:c2:05:48:fa:ff:bd:bb:3a:75:1a:de:7b:22:
                    e3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:62:40:EE:97:BD:DD:18:0E:05:F9:4C:28:57:F8:23:EA:20:22:9D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/246240EE97BDDD180E05F94C2857F823EA20229D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.204.0/22
                IPv6:
                  2804:617c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269237

    Signature Algorithm: sha256WithRSAEncryption
         a0:d3:4d:88:13:5c:ea:c9:aa:e2:2a:e1:fb:96:0f:ed:58:95:
         cc:f7:d5:b7:e3:33:77:54:84:07:3c:05:ac:54:d3:81:40:06:
         26:25:f3:a0:6d:20:49:53:21:23:bd:30:67:04:d0:ef:45:80:
         68:2e:7e:b4:96:de:70:6b:f2:e8:fd:06:72:2c:ee:77:ee:dd:
         63:90:17:86:4c:72:bb:6d:50:11:a7:1b:42:b6:33:cc:12:a7:
         4f:7a:4a:7a:d8:f9:e1:32:7e:86:79:34:66:cd:4a:f0:b3:98:
         78:a4:ea:bd:39:ed:3a:f5:aa:74:14:7e:79:63:b2:51:a6:03:
         fc:3a:c7:10:21:2a:a6:d5:e9:fb:2f:6b:c5:c2:dd:88:e6:36:
         b0:15:84:b8:c5:79:eb:71:55:c2:dc:fc:7b:25:b1:d1:eb:cd:
         2b:f5:e1:27:4c:70:3e:5e:87:b3:54:b1:9f:13:75:f3:8a:f3:
         32:65:f1:a5:e2:65:66:48:9e:20:eb:a3:23:21:d3:50:eb:0d:
         ce:45:aa:97:7a:c9:50:c7:05:e1:fd:f9:62:f6:5b:d4:d9:85:
         c3:88:11:9c:b2:1f:d8:36:08:84:e4:93:84:e8:5b:7e:ab:93:
         fc:82:fc:3a:08:4f:36:55:ea:2e:fb:7e:61:c7:bc:39:68:51:
         0a:90:a2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----