Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/41B75113AE9716150D6BFBFA040F31771294DE81.cer
File:                     41B75113AE9716150D6BFBFA040F31771294DE81.cer (raw, json)
Hash identifier:          pv67ProaOWwpV8FMQybSZl42T8ix7AyTN1cMriBBhHQ=
Subject key identifier:   41:B7:51:13:AE:97:16:15:0D:6B:FB:FA:04:0F:31:77:12:94:DE:81
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       28AF0A03D91D9B2B99F506095B62BDCB0EE5F8C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/41B75113AE9716150D6BFBFA040F31771294DE81.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 23:13:51 +0000
Certificate not after:    Thu 11 Jul 2024 23:18:51 +0000
Subordinate resources:    AS: 267320
                          IP: 45.233.164.0/22
                          IP: 2804:4ba4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:af:0a:03:d9:1d:9b:2b:99:f5:06:09:5b:62:bd:cb:0e:e5:f8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 23:13:51 2023 GMT
            Not After : Jul 11 23:18:51 2024 GMT
        Subject: CN=41B75113AE9716150D6BFBFA040F31771294DE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:e3:70:e8:5a:bd:b7:eb:27:55:82:d9:3a:
                    17:92:c5:80:fa:36:f4:3c:72:2b:84:f4:a2:6b:a3:
                    6c:8f:0d:0d:70:1e:6e:b6:31:51:ce:47:d0:93:e4:
                    bf:89:b3:65:0a:27:84:28:64:61:d9:1f:cb:e6:43:
                    5e:0d:09:bc:7b:fd:4a:8e:15:80:4a:77:d9:15:39:
                    a5:f9:ca:ba:04:6b:1f:99:0b:e9:1c:90:2a:a7:40:
                    0d:c9:ad:da:1d:53:c7:f8:e8:a7:f5:ff:58:fb:fc:
                    a0:89:12:b7:9c:ba:d5:7b:38:47:94:6e:33:cc:a7:
                    0d:44:f3:33:0f:a7:6d:fa:1e:c6:55:64:72:2f:b0:
                    73:f5:15:ff:61:7d:2f:63:74:04:af:cf:07:c2:ef:
                    0e:99:68:75:bb:7f:3a:ea:60:2e:b7:90:de:a5:ba:
                    f4:f3:c3:a0:3c:62:41:f6:fe:fd:e4:30:ec:c8:0c:
                    b2:59:6f:4a:8d:f9:1e:20:49:79:00:d6:ea:af:10:
                    25:56:ba:0e:28:6e:2b:b3:99:6e:eb:71:78:e5:ff:
                    68:f2:49:02:b8:d4:73:ef:e9:bf:20:be:d9:d7:46:
                    5d:f2:b9:7e:f6:64:00:46:a9:5a:2d:50:af:56:59:
                    06:98:0c:86:12:34:0d:d2:31:41:7e:09:e7:ae:10:
                    f2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:B7:51:13:AE:97:16:15:0D:6B:FB:FA:04:0F:31:77:12:94:DE:81
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/41B75113AE9716150D6BFBFA040F31771294DE81.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.164.0/22
                IPv6:
                  2804:4ba4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267320

    Signature Algorithm: sha256WithRSAEncryption
         8c:33:9f:e9:7a:8c:2b:bd:a9:2a:e5:43:9c:6f:6e:2a:2b:9d:
         99:17:16:b4:5f:ab:69:25:84:09:1c:ea:e6:64:80:23:a0:f7:
         92:6e:15:a8:a6:95:83:aa:94:48:ed:d4:e5:50:16:dd:a6:34:
         b7:77:7e:af:45:d0:59:ce:0b:0d:d1:7c:39:7e:15:d4:1c:31:
         e2:1e:54:5a:c3:5e:ae:10:c9:e7:8d:6c:39:eb:e2:bd:7e:9e:
         7b:44:cb:46:40:c0:06:a2:fd:25:18:30:f9:cc:1a:a3:ec:08:
         ba:7c:e8:b6:32:f4:d3:2f:82:a0:f3:0c:4f:cd:b7:41:3f:c0:
         9c:ee:2f:6a:c3:a8:1f:99:40:23:7b:43:0d:27:29:cf:34:86:
         ad:19:04:68:51:a1:ec:b8:c5:49:e0:c0:1e:ab:5e:83:39:f4:
         7f:d6:1a:0e:a6:52:8f:49:8e:5c:3e:c6:6a:29:73:f9:f6:2a:
         a3:2a:67:58:5b:a4:92:96:29:f0:68:13:f4:d1:c1:18:25:6f:
         7d:b1:03:72:92:8a:d8:37:64:5d:5d:9e:d2:38:86:dd:a8:ec:
         1f:9e:d8:b9:60:9a:dd:96:c4:91:28:39:fb:d8:c0:c9:ae:60:
         12:d9:d0:db:33:3f:f4:77:59:ce:22:a8:b8:57:95:2d:13:58:
         50:26:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----