Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2D076D620A8AE1C7F675770C2C99E419639D3DAE.cer
File:                     2D076D620A8AE1C7F675770C2C99E419639D3DAE.cer (raw, json)
Hash identifier:          1xeulb696tnFS5tG3CoI/otq6nbQwNxq8m3wqfrheYg=
Subject key identifier:   2D:07:6D:62:0A:8A:E1:C7:F6:75:77:0C:2C:99:E4:19:63:9D:3D:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CF81DF91AD6937DAFB5E95D5E36094352ACC6B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/0/2D076D620A8AE1C7F675770C2C99E419639D3DAE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 12:36:46 +0000
Certificate not after:    Mon 02 Sep 2024 12:41:46 +0000
Subordinate resources:    AS: 22148
                          IP: 200.160.16.0/20
                          IP: 2804:948::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f8:1d:f9:1a:d6:93:7d:af:b5:e9:5d:5e:36:09:43:52:ac:c6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  4 12:36:46 2023 GMT
            Not After : Sep  2 12:41:46 2024 GMT
        Subject: CN=2D076D620A8AE1C7F675770C2C99E419639D3DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fe:02:d2:89:f6:fc:42:60:29:1f:57:18:2f:
                    8a:73:43:97:32:1e:26:03:5b:c9:d0:ee:53:9a:7c:
                    93:2e:8c:6c:65:78:ef:c6:3a:2c:b0:1e:c9:af:72:
                    ed:8a:2c:11:3c:c6:2a:14:4f:f4:96:a3:5e:cd:71:
                    0c:54:0a:94:ae:b5:63:b0:6d:c9:79:98:93:87:ce:
                    48:76:33:4f:11:1c:f5:f4:19:e6:2a:ee:86:e3:94:
                    4c:c9:78:56:47:31:91:8b:6d:78:fa:47:c1:f1:f3:
                    cc:1c:5e:74:28:68:2b:48:70:d5:dd:1d:bc:c4:83:
                    ad:09:c0:f2:8e:6c:b5:84:0d:a7:b5:6f:5d:80:11:
                    18:bd:88:89:da:cc:0a:56:07:df:1d:0a:b6:4f:cb:
                    81:f4:e1:1c:7c:78:4e:50:43:19:b9:65:61:70:30:
                    5f:0e:01:5c:a9:8a:fb:5c:1a:91:93:18:a9:8e:f5:
                    a3:7b:03:0e:84:43:9e:0e:f9:31:94:b2:4e:9c:69:
                    61:d4:80:4c:fa:36:e9:bf:53:9b:07:4c:10:78:45:
                    9d:80:eb:64:29:ed:c6:47:1b:1c:cf:2f:8a:dc:02:
                    87:ae:e4:42:9c:9d:97:c6:7c:83:92:4e:5f:07:5e:
                    c3:9a:11:47:03:0e:43:55:2a:db:df:16:0d:ed:1e:
                    a5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:07:6D:62:0A:8A:E1:C7:F6:75:77:0C:2C:99:E4:19:63:9D:3D:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/0/2D076D620A8AE1C7F675770C2C99E419639D3DAE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.16.0/20
                IPv6:
                  2804:948::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22148

    Signature Algorithm: sha256WithRSAEncryption
         85:39:25:f3:f8:79:f9:6c:3d:12:4a:62:da:ea:8c:54:4d:7e:
         7c:fc:0b:ac:5e:fa:ae:59:04:44:12:8f:83:84:65:0c:84:4c:
         c3:a2:15:27:de:b7:2f:f3:2d:ed:86:76:8e:e9:d2:74:4b:dc:
         23:37:02:b4:61:80:08:3e:f9:49:a9:98:a1:d7:c4:17:ee:c9:
         86:d2:da:12:06:35:39:2d:d6:12:4e:d7:a5:ad:14:7e:ab:90:
         f5:b3:1f:62:6b:dc:de:b6:c0:46:9d:3b:55:5b:d0:87:a9:bb:
         30:53:7f:2f:96:58:e1:62:9f:7a:e4:50:58:03:bb:a0:4e:54:
         86:79:6a:9f:e4:c8:cd:de:6a:b3:d0:83:48:02:a7:70:65:dc:
         9f:3c:a7:a7:89:f8:7b:66:9b:5c:43:c6:ea:7e:7a:2a:9e:c5:
         69:99:cb:41:83:21:fc:a4:3e:27:aa:a7:b4:6c:f4:fa:9e:52:
         14:0d:8f:9f:01:c6:35:c4:fa:28:ab:5e:f4:dd:8f:89:70:15:
         0e:2f:02:5d:79:a2:7f:33:4a:bb:7f:ca:0f:6e:57:54:dd:2d:
         08:e0:b0:94:34:a9:5c:50:0b:88:b8:fc:15:83:f6:77:65:c8:
         a8:52:94:ee:ff:88:5f:ce:69:68:0f:9c:9b:25:5c:2c:ab:cb:
         04:30:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----