Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer
File:                     41E59B548B916216367A1DBCA5AD17479C65F6DA.cer (raw, json)
Hash identifier:          0YlkwOn/yXWw3qnZXrlH20Bjh7IDhfbuWiZiWLxTiAo=
Subject key identifier:   41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0585B30A4F42AAD76E79389BB0BB607CCB058E82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Sep 2023 11:35:10 +0000
Certificate not after:    Fri 06 Sep 2024 11:40:10 +0000
Subordinate resources:    AS: 264311
                          IP: 138.122.100.0/22
                          IP: 2804:25f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:85:b3:0a:4f:42:aa:d7:6e:79:38:9b:b0:bb:60:7c:cb:05:8e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  8 11:35:10 2023 GMT
            Not After : Sep  6 11:40:10 2024 GMT
        Subject: CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:54:4f:10:05:90:6e:67:9f:01:80:2b:27:
                    38:e5:0b:89:52:38:40:0a:59:ce:50:88:84:a3:ad:
                    8e:66:4d:5c:26:32:ba:91:4c:ab:26:da:c3:27:47:
                    e0:c4:4a:d0:4b:12:ef:3f:67:54:5a:b2:bf:ab:23:
                    c3:02:96:c1:eb:68:91:d6:de:ef:b6:2a:0f:16:b9:
                    9e:a2:85:43:38:dc:e0:df:3b:ec:eb:1f:bb:92:c3:
                    44:f7:dd:78:b3:23:5f:74:8d:6f:67:de:5b:9b:d8:
                    15:dc:3b:fa:16:b6:95:bc:8b:87:ad:63:b6:a6:39:
                    ac:be:e1:d1:a9:e9:d0:5e:03:ae:25:0c:c7:df:e6:
                    19:d5:5b:2d:09:8a:d1:20:6a:60:1f:a9:a6:51:b8:
                    a9:9f:78:d6:f4:e4:33:d0:e4:93:39:46:86:79:db:
                    76:0a:d7:83:ed:7f:c7:15:64:44:36:6c:1a:b6:1b:
                    15:70:81:84:c6:a2:20:01:4b:59:50:6f:7e:df:3e:
                    a8:65:47:55:0a:f9:be:61:7a:7d:69:2d:69:2f:27:
                    f3:c3:7b:c8:56:fe:67:9c:77:87:3d:53:7a:c6:3f:
                    68:5b:ba:dd:82:df:9a:cc:30:96:ea:63:73:6a:fc:
                    d8:48:09:ef:d3:95:b5:79:a6:59:8a:d4:ab:b0:e7:
                    b6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.100.0/22
                IPv6:
                  2804:25f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264311

    Signature Algorithm: sha256WithRSAEncryption
         37:66:84:61:90:98:88:f0:e9:09:48:88:f7:19:ac:b0:c6:d8:
         e5:d1:1e:e8:f4:a9:d5:da:57:bb:4f:84:84:4e:e4:3a:57:e7:
         b4:62:88:7e:c6:1a:0b:9f:16:b0:37:02:f9:01:4b:48:43:c5:
         b1:9f:15:94:d6:8b:70:33:40:f8:ba:2c:e2:e6:80:ff:a1:8a:
         8c:46:33:28:77:cb:d5:38:36:6c:4b:de:ac:93:0b:ad:b5:1b:
         02:41:8e:49:f5:fe:1c:86:c3:d6:a2:56:be:a3:25:1e:77:36:
         b1:67:1b:95:cf:b0:d8:33:64:e6:61:2d:a3:7a:d7:c6:09:9f:
         36:8d:fe:d5:5a:04:aa:67:9a:6e:df:d1:65:aa:a0:5e:49:4e:
         a4:80:21:71:eb:cd:be:59:8a:85:63:8d:5a:3c:e8:5d:c3:81:
         25:1d:28:d7:d3:60:17:6e:d6:14:22:9d:98:25:78:d3:78:6c:
         8b:67:9e:93:80:f4:a7:ac:dc:90:b7:f9:de:e2:81:9e:e9:48:
         32:b7:7c:93:ea:e9:6c:e3:80:5c:a1:bf:b5:0e:5c:32:ee:c0:
         aa:37:75:61:91:e3:c1:ac:a0:54:8b:24:2b:36:cc:eb:16:59:
         2b:8d:7c:d1:19:c2:cd:8d:12:a7:af:2a:0a:ca:89:86:d3:15:
         79:68:f0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----