Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.cer
File:                     305EE7370CB5E56FF8D0E01B37E786125925B0C8.cer (raw, json)
Hash identifier:          6xWW0C7LkIC84lGDS4kSrLhV+rMQRngGyKTW0a0+qXk=
Subject key identifier:   30:5E:E7:37:0C:B5:E5:6F:F8:D0:E0:1B:37:E7:86:12:59:25:B0:C8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7074427B5E353BF18F6A8B32ECE65E250C0F95AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 13:40:52 +0000
Certificate not after:    Fri 12 Jul 2024 13:45:52 +0000
Subordinate resources:    AS: 265420
                          IP: 168.195.48.0/22
                          IP: 2804:33d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:74:42:7b:5e:35:3b:f1:8f:6a:8b:32:ec:e6:5e:25:0c:0f:95:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 13:40:52 2023 GMT
            Not After : Jul 12 13:45:52 2024 GMT
        Subject: CN=305EE7370CB5E56FF8D0E01B37E786125925B0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:e5:ca:75:e9:bd:1d:86:88:df:ba:89:f6:
                    6d:e9:cc:0e:78:7d:02:5f:ef:9f:9c:7b:56:c4:cb:
                    1c:0b:55:69:5a:bc:51:08:c1:24:d8:e1:52:4b:f0:
                    df:3a:6a:36:1b:fb:a7:e7:54:df:87:6d:50:70:2b:
                    94:a3:98:dc:95:f9:b8:2f:15:73:47:96:fd:92:df:
                    fe:66:16:0e:9d:4a:ae:59:c6:3f:27:57:af:7a:0f:
                    d7:42:94:6c:58:ee:7d:22:48:fa:cb:e1:48:50:c4:
                    cf:6a:40:fe:6c:41:db:01:c1:fe:77:30:15:74:b7:
                    ad:5b:2a:44:e8:c8:2f:2f:e3:01:23:b2:e2:5d:1c:
                    bb:9e:96:91:db:9c:09:46:f5:16:8d:1c:6a:3c:b8:
                    90:4c:aa:ad:f2:93:a5:42:14:cf:01:6f:46:65:7c:
                    b4:86:8a:93:99:b8:21:b2:30:0c:53:3f:4d:cf:63:
                    00:13:fb:e9:47:de:f9:31:a9:94:9b:c0:45:52:b3:
                    57:b1:96:39:59:54:38:b2:50:55:86:a6:cd:47:9e:
                    20:b8:be:6b:f8:25:c4:5e:1d:b9:cd:50:fc:34:0f:
                    50:9f:3b:60:e4:69:38:38:1d:1b:4c:41:e7:98:4e:
                    58:b3:c1:1c:0f:3e:05:e0:ac:2d:96:5e:53:e3:86:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:5E:E7:37:0C:B5:E5:6F:F8:D0:E0:1B:37:E7:86:12:59:25:B0:C8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.48.0/22
                IPv6:
                  2804:33d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265420

    Signature Algorithm: sha256WithRSAEncryption
         6d:c0:25:9e:a1:3a:fd:2e:60:0e:ac:0e:1e:3a:10:b3:3f:49:
         a9:5b:c1:d1:d1:a9:21:1f:9e:9b:36:6e:2c:2d:04:b4:61:30:
         b4:e9:15:04:1b:6d:8b:60:a7:9b:fd:54:1a:a6:92:84:86:df:
         e6:96:89:7b:41:1c:d1:5c:7d:7c:48:f6:6d:42:7c:9c:7c:0a:
         4b:e4:46:c0:f9:21:ee:04:c0:79:ee:72:3e:bf:9e:08:7d:08:
         1b:51:3c:8e:07:b9:e6:e3:a0:4b:de:4f:3c:ca:18:3c:12:d0:
         9a:d6:a2:7e:e3:e8:4c:35:14:d1:e0:89:d6:6d:1e:38:e9:68:
         52:ea:e0:47:af:d8:d8:c9:67:19:a4:0a:4b:b0:36:21:0e:dd:
         58:84:ab:98:05:17:72:0e:01:01:0e:ae:d8:fc:12:e5:ae:3a:
         df:73:1b:13:02:57:e9:2d:ce:24:c5:cf:37:67:61:f8:b7:4c:
         fa:0c:4f:8e:5e:93:e0:45:1c:ed:09:7b:4e:ff:41:8f:ba:2c:
         4b:20:d2:69:74:c0:a5:4f:3a:0a:8f:d1:5c:8c:91:f5:c4:d9:
         a0:79:02:9a:3c:a4:86:c5:47:da:1b:c9:e1:b8:06:2f:9c:1c:
         7a:6d:88:cd:5f:e3:39:e5:b2:05:fe:2a:1a:4f:4a:07:92:61:
         b1:f0:09:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----