Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.cer
File:                     417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.cer (raw, json)
Hash identifier:          kV9tbH9G5gJKiV5L9QFWbhHKxwbJ194Uq4Hr3XElZp0=
Subject key identifier:   41:75:26:E4:CA:DA:3A:0A:9D:94:AF:16:B1:B3:7A:65:F4:A0:DB:4F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       172AD6E4F7B8A03844A159A57FEF0CC6DC0B5C50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 22:18:36 +0000
Certificate not after:    Tue 23 Jul 2024 22:23:36 +0000
Subordinate resources:    AS: 265263
                          IP: 168.90.32.0/22
                          IP: 2804:2d20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2a:d6:e4:f7:b8:a0:38:44:a1:59:a5:7f:ef:0c:c6:dc:0b:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 22:18:36 2023 GMT
            Not After : Jul 23 22:23:36 2024 GMT
        Subject: CN=417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:13:51:7d:59:e4:4f:8c:62:2b:3b:6f:b6:
                    39:aa:02:08:a3:de:ff:6f:27:74:56:a8:06:a2:b9:
                    97:63:9f:29:83:75:3b:3d:21:7f:87:4f:c6:25:6b:
                    b4:cf:32:cc:14:ac:3d:c3:38:8c:60:02:b8:8c:62:
                    24:c1:52:29:bc:ed:13:15:39:99:45:f5:ec:6e:76:
                    c4:c3:55:d5:35:d3:b8:48:87:72:ec:fa:2f:36:32:
                    8a:b1:9a:9e:40:75:89:07:b0:44:51:f9:59:ba:3e:
                    c7:b1:42:aa:5b:7e:66:37:60:1c:52:1f:52:75:85:
                    e3:82:e7:c5:e5:c3:d4:c5:bc:92:25:19:61:ee:50:
                    63:c8:46:12:fb:51:63:5b:ad:32:e4:00:c4:3d:06:
                    97:7f:80:cd:b2:80:2b:b5:8b:08:b9:9b:65:3d:c1:
                    7c:c4:c6:99:fa:73:bd:2e:ea:03:7a:47:db:c3:a7:
                    58:0d:75:67:2f:f1:f9:de:46:8f:cf:d5:37:31:8e:
                    67:01:a6:65:2f:79:08:8e:b2:3c:c8:19:ce:25:f9:
                    47:a4:4f:22:df:29:b8:c7:fe:27:4a:42:84:cb:e6:
                    6d:00:d1:b5:31:ec:29:1c:1a:65:b5:13:f1:a0:59:
                    1d:0d:3f:39:a4:1a:81:44:e6:d0:25:94:32:de:34:
                    78:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:75:26:E4:CA:DA:3A:0A:9D:94:AF:16:B1:B3:7A:65:F4:A0:DB:4F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.32.0/22
                IPv6:
                  2804:2d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265263

    Signature Algorithm: sha256WithRSAEncryption
         63:f5:6b:8b:82:7b:a1:5b:aa:16:a6:49:5b:c4:0e:7c:73:21:
         3e:d0:f7:dc:8b:62:0c:3b:ef:e7:75:df:73:68:22:99:5a:df:
         df:4a:b3:c0:37:84:47:d3:76:40:54:46:b7:6f:75:c5:b1:44:
         9b:2d:98:46:56:75:a1:c3:67:2e:83:3a:38:4a:0b:ec:bc:07:
         30:81:24:77:e4:84:e1:3c:9e:ee:eb:b8:44:11:ff:2e:27:7c:
         f3:ec:8c:8a:7f:22:f6:7b:ec:7c:1b:f4:38:fe:f4:e2:b4:38:
         db:26:31:95:33:8b:4d:97:52:76:6e:06:a8:b0:c5:ec:0f:bc:
         a7:20:87:be:b5:e9:c2:79:c1:49:9b:72:f4:6e:b1:c6:f1:b7:
         ad:e8:9f:85:f2:39:a3:42:86:8a:e7:e1:55:53:62:71:b5:fb:
         d0:51:b4:ba:1d:93:d3:08:de:27:24:93:01:3d:f1:98:06:51:
         f5:f5:62:41:86:9e:bb:91:fe:3e:84:f5:32:46:f3:ec:19:5c:
         af:64:fc:87:f8:5d:6b:7a:f4:8d:4e:59:6b:a8:f2:99:6e:5e:
         fc:12:9f:9b:b9:aa:b8:ae:72:5e:68:77:f9:22:d4:ad:66:e4:
         11:87:69:bd:d2:2c:1b:a7:eb:6f:b9:2b:2a:0b:cc:0e:9f:b3:
         7b:3d:81:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----