Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2E6A513ED4E24CB11D0D621BDB94CDA5F25365CB.cer
File:                     2E6A513ED4E24CB11D0D621BDB94CDA5F25365CB.cer (raw, json)
Hash identifier:          hWaIP0ta2uYtV2Emxg25SMasI/xjzULNFq026jhxEaE=
Subject key identifier:   2E:6A:51:3E:D4:E2:4C:B1:1D:0D:62:1B:DB:94:CD:A5:F2:53:65:CB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       57339E81CC64A4202149E6819CD4540FA41A7182
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/1/2E6A513ED4E24CB11D0D621BDB94CDA5F25365CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 19:28:19 +0000
Certificate not after:    Wed 04 Sep 2024 19:33:19 +0000
Subordinate resources:    AS: 270280
                          IP: 200.125.172.0/22
                          IP: 2804:699c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:33:9e:81:cc:64:a4:20:21:49:e6:81:9c:d4:54:0f:a4:1a:71:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 19:28:19 2023 GMT
            Not After : Sep  4 19:33:19 2024 GMT
        Subject: CN=2E6A513ED4E24CB11D0D621BDB94CDA5F25365CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:45:13:12:bb:32:be:fe:28:5e:22:a8:95:
                    6f:f6:21:ea:bd:62:ae:42:bf:70:c5:04:3b:24:b0:
                    80:33:eb:9a:b9:98:f9:8b:f8:41:13:da:0a:39:18:
                    4b:4a:f4:ab:87:ec:b6:e9:dd:cb:23:b9:e4:5e:52:
                    cd:26:68:66:64:b1:6c:27:a1:a0:ac:34:d6:a3:ab:
                    14:30:3f:83:22:f5:79:da:f8:81:8c:06:a3:d8:17:
                    14:fa:38:c8:05:a6:36:06:4f:0f:f0:df:31:d9:d0:
                    0c:32:b1:f5:7d:eb:3b:33:26:d5:6c:d4:35:9f:b6:
                    2a:79:98:34:66:a9:bb:e8:3f:87:29:eb:e2:38:94:
                    bb:95:fe:8d:22:b7:7e:38:64:de:b0:e3:4c:77:ff:
                    98:61:2e:80:08:14:ec:d7:83:54:2d:b3:93:66:d7:
                    de:37:61:04:a5:00:d1:be:13:21:e0:2c:c7:d3:72:
                    34:d8:64:79:0d:8b:3a:37:cd:71:69:5a:c6:42:09:
                    96:fa:e6:2e:e7:19:90:de:0c:95:62:70:96:bf:f3:
                    34:37:6a:1a:b9:7e:e6:cd:ed:28:74:e4:53:7d:ff:
                    3f:d0:4b:92:7e:ea:ee:7c:68:3d:db:8c:f5:56:4a:
                    91:63:73:e6:88:40:9d:5e:be:65:86:e2:d7:0b:7d:
                    4f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:6A:51:3E:D4:E2:4C:B1:1D:0D:62:1B:DB:94:CD:A5:F2:53:65:CB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/1/2E6A513ED4E24CB11D0D621BDB94CDA5F25365CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.172.0/22
                IPv6:
                  2804:699c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270280

    Signature Algorithm: sha256WithRSAEncryption
         87:ef:f8:f7:c0:94:2d:76:24:88:59:f1:a2:3d:d4:68:83:5c:
         3d:30:3c:1d:43:48:83:29:e1:eb:f0:a6:ef:3f:b3:b7:13:26:
         f7:ed:ce:3e:d8:b6:b3:99:28:b7:85:82:4a:fd:20:d1:6f:2b:
         c9:d8:7d:47:c9:fb:d9:f2:25:ed:11:ca:9a:c2:07:ae:37:3a:
         eb:3e:1c:49:51:3f:71:ce:42:e0:5f:65:3c:ed:fd:fc:07:b9:
         5c:65:ee:1c:e2:7e:02:bc:e6:b2:4d:24:59:e2:6f:06:3f:61:
         94:c5:cc:e2:8b:50:75:cd:b2:57:96:4b:47:43:b5:2a:25:97:
         88:93:e1:ef:15:e1:68:92:5b:6d:f4:ae:0c:aa:5a:5e:81:74:
         51:09:6d:f8:31:7c:54:75:a3:a2:c4:3a:86:9e:35:69:a8:8d:
         e3:03:32:f2:31:45:67:2c:68:d6:25:c8:f1:f6:6c:c8:85:3a:
         a4:b8:99:55:fa:04:f9:59:cb:f4:6f:08:f6:36:de:25:00:09:
         99:db:18:5a:69:38:c6:ff:aa:03:a6:b5:8f:e4:cd:a0:3d:c6:
         d8:f0:3f:01:79:86:18:39:9e:32:d1:dd:a4:d9:48:b6:cf:d9:
         9c:ca:ba:94:e1:f3:e6:2d:78:df:08:39:95:d5:05:c1:24:65:
         ef:8c:f2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----