Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/412E8E4AE762185CBFFAC82A35CE1688AEED73DA.cer
File:                     412E8E4AE762185CBFFAC82A35CE1688AEED73DA.cer (raw, json)
Hash identifier:          mL7ssTzi9Kty6y3XYROLp899z6ObgnEdsd9WlY178jY=
Subject key identifier:   41:2E:8E:4A:E7:62:18:5C:BF:FA:C8:2A:35:CE:16:88:AE:ED:73:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D26538A09E1E627C1932B7A17B91AE9A3779F50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/412E8E4AE762185CBFFAC82A35CE1688AEED73DA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Sep 2023 20:48:18 +0000
Certificate not after:    Fri 06 Sep 2024 20:53:18 +0000
Subordinate resources:    AS: 263497
                          IP: 191.243.64.0/21
                          IP: 2804:12c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:26:53:8a:09:e1:e6:27:c1:93:2b:7a:17:b9:1a:e9:a3:77:9f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  8 20:48:18 2023 GMT
            Not After : Sep  6 20:53:18 2024 GMT
        Subject: CN=412E8E4AE762185CBFFAC82A35CE1688AEED73DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:c7:9a:98:f0:b6:67:58:b6:f1:f7:1b:59:
                    ef:49:ea:88:52:a2:9d:00:fb:66:c2:07:c1:52:c5:
                    9e:eb:82:9b:ab:25:13:f7:87:11:7a:35:18:64:26:
                    c1:62:bd:6f:05:14:36:07:48:a3:d7:33:6e:52:68:
                    bc:0e:a7:32:e3:ec:45:7c:d4:43:9b:a2:a1:4f:7d:
                    80:7a:3a:b0:d3:ae:af:56:e5:f5:3f:50:d3:1c:16:
                    68:92:da:6e:dd:1f:73:8b:37:5d:71:e7:7d:59:84:
                    92:36:b0:e9:c8:af:73:65:fd:a0:f8:ee:51:13:d1:
                    75:79:bd:63:ee:39:42:e2:c6:1a:19:cc:eb:ef:54:
                    72:12:19:91:65:fd:b9:84:aa:fc:10:8b:87:3c:2b:
                    ed:15:b9:5d:1e:60:9e:dd:c2:c9:69:e2:b1:cd:e3:
                    2f:07:13:98:2b:b9:08:1a:65:ee:99:a1:7e:93:a7:
                    60:42:80:c1:01:e7:20:a0:4a:c9:33:8c:6f:09:fb:
                    39:ce:b2:8e:a0:3c:c9:5d:e6:7f:e5:82:96:18:a7:
                    db:ea:39:d3:c8:53:59:50:f1:15:f0:42:2a:4c:e4:
                    90:ad:d1:cc:c8:c8:71:04:06:a3:e4:60:7d:53:74:
                    f5:f6:aa:36:c2:93:6b:3a:42:21:9b:e0:0e:c1:90:
                    a9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:2E:8E:4A:E7:62:18:5C:BF:FA:C8:2A:35:CE:16:88:AE:ED:73:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/412E8E4AE762185CBFFAC82A35CE1688AEED73DA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.64.0/21
                IPv6:
                  2804:12c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263497

    Signature Algorithm: sha256WithRSAEncryption
         a1:c5:ad:1d:d3:86:9e:0f:81:70:5c:4a:c0:d1:f9:16:b0:fd:
         25:0e:be:58:d7:e9:7e:b5:0e:f1:ee:1d:cf:57:c6:b0:a7:9d:
         69:09:e7:35:95:71:08:f2:92:f2:ec:da:55:15:d4:ee:5c:d4:
         e0:00:ed:0c:00:4f:1d:cf:1e:2f:52:25:b5:f1:53:e0:bb:91:
         02:98:e6:2a:d8:bd:90:79:8b:8b:32:67:79:c2:71:29:bd:4b:
         34:a8:df:63:ec:c8:fb:9b:c6:cb:62:7f:16:96:91:45:6a:6f:
         05:72:1e:f0:1f:2b:74:61:73:7c:78:b8:0f:17:6d:93:a4:31:
         07:82:03:5c:f8:b3:9f:2c:f1:23:e5:4b:01:33:ae:69:f8:d0:
         17:38:cd:c2:ed:8d:d3:40:32:75:84:2e:56:41:9f:98:ce:fa:
         55:78:3e:cd:79:bf:ab:c7:fb:7d:b0:6d:53:e0:79:0f:cc:cc:
         ea:6c:c6:83:be:66:e8:2b:6a:d1:8d:a3:a3:41:ef:74:5f:a9:
         cd:c5:15:59:0c:49:33:9a:80:da:b5:74:83:e3:4d:a8:13:c0:
         ab:83:91:3b:a7:72:ed:5e:ac:0d:4e:33:3b:d8:a9:97:d8:f7:
         5b:0d:d7:3e:34:27:cc:dd:6a:97:06:83:f2:45:e6:0a:8c:f6:
         b0:63:68:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----