Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/390314310DD560DE9AA52ED51B31A6BA4B2ABCFC.cer
File:                     390314310DD560DE9AA52ED51B31A6BA4B2ABCFC.cer (raw, json)
Hash identifier:          AwMrIedB29exi5ZRdhLdpwLrPa3Wq8T1u5Wl0/y9sss=
Subject key identifier:   39:03:14:31:0D:D5:60:DE:9A:A5:2E:D5:1B:31:A6:BA:4B:2A:BC:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2937006B41052790567436EB411F905DE78C17E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/390314310DD560DE9AA52ED51B31A6BA4B2ABCFC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 02:28:25 +0000
Certificate not after:    Wed 29 May 2024 02:33:25 +0000
Subordinate resources:    AS: 268258
                          IP: 45.237.8.0/22
                          IP: 2804:4e64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:37:00:6b:41:05:27:90:56:74:36:eb:41:1f:90:5d:e7:8c:17:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 02:28:25 2023 GMT
            Not After : May 29 02:33:25 2024 GMT
        Subject: CN=390314310DD560DE9AA52ED51B31A6BA4B2ABCFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:0b:37:63:7e:a7:48:b2:48:7e:ef:ec:7c:
                    7a:59:82:27:9f:d8:fe:a3:28:b3:d2:f1:c8:08:83:
                    af:19:07:65:e2:ab:32:74:74:a3:d6:9b:a4:b7:9d:
                    13:5e:a5:16:d0:d6:5a:bb:8e:7e:6f:a3:ae:b4:6d:
                    58:b5:2f:05:fd:0b:8b:66:6d:5c:1d:fe:9a:27:09:
                    f3:fa:83:e8:d4:ea:35:ac:bb:f2:0f:48:fb:2b:26:
                    c4:b7:65:d9:38:d8:52:5e:6e:5a:29:d2:82:cf:53:
                    7f:0a:f0:d8:75:26:35:68:18:cb:18:7a:10:33:7f:
                    f8:65:ae:4e:b5:47:14:1c:d1:55:0d:30:1e:fd:b1:
                    23:9c:5b:ed:66:cf:e3:73:b8:01:53:3c:a6:01:f3:
                    5a:8e:49:c7:b5:57:b9:96:ea:f5:13:12:88:0a:b8:
                    3d:a2:bf:ce:5f:dd:11:c3:11:86:03:92:6c:3a:e0:
                    3f:29:96:af:9d:e8:ad:57:1e:b1:1d:c8:85:c3:49:
                    be:8c:af:85:09:e3:41:e2:f4:75:51:95:85:08:47:
                    b5:79:21:54:bf:71:3b:b5:db:aa:f4:0a:88:c3:b0:
                    08:b1:7a:cb:32:60:ca:0b:4d:31:05:2c:85:4f:6e:
                    3e:f6:04:76:6e:0b:fc:b9:fa:77:6a:ec:c4:f2:f7:
                    d2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:03:14:31:0D:D5:60:DE:9A:A5:2E:D5:1B:31:A6:BA:4B:2A:BC:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/390314310DD560DE9AA52ED51B31A6BA4B2ABCFC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.8.0/22
                IPv6:
                  2804:4e64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268258

    Signature Algorithm: sha256WithRSAEncryption
         55:54:dc:f0:5a:4e:e7:3c:da:02:47:da:4a:fb:f6:03:d3:a3:
         19:eb:a1:30:2f:0e:65:e4:2c:0f:c2:c7:62:7e:ca:eb:74:f6:
         36:42:e0:1d:72:b7:4d:e8:f2:c0:15:69:72:b5:1a:78:ce:bf:
         5f:4e:78:36:51:ef:72:e9:53:b6:de:6c:20:70:88:e0:ef:e0:
         ba:d8:96:60:03:cb:7d:54:1b:6b:d4:97:36:3d:ee:91:08:25:
         f9:6a:2e:4d:9a:76:2c:94:fc:8b:65:35:36:fb:0e:e3:5e:13:
         2a:2b:b5:1a:22:2e:3c:fe:31:29:49:09:ad:d7:06:94:20:5e:
         da:24:4c:58:42:a4:33:9b:95:f5:f1:43:76:1e:45:2b:8f:2e:
         22:57:6a:c1:de:05:ca:58:5b:32:99:cd:0c:7e:e1:c9:1a:fd:
         82:ad:26:51:19:7d:f9:e4:88:28:74:fc:e5:fb:6e:f2:5a:88:
         fe:c9:b9:2a:dd:c7:0a:df:fe:d5:ee:e9:63:bf:a9:dd:d9:72:
         44:c6:61:d2:19:e3:8c:94:cc:a2:9a:e1:3a:e9:fc:22:fb:4c:
         4e:dd:6b:51:f7:3d:00:29:3a:55:4b:07:07:92:90:b1:ba:be:
         f7:c8:b1:cc:73:0b:a0:ab:7e:fa:4e:66:aa:bd:27:07:64:58:
         d9:86:d4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----