Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer
File:                     42069E8E68759D7E92CA70711619EA4DC4E27721.cer (raw, json)
Hash identifier:          ByBA0Jac7TbCB22ZCfVT9+JktqJfzIK7ld5y362Lc34=
Subject key identifier:   42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1AD7016D82B185036A21187DE10B9B2D23152D4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Nov 2023 20:04:17 +0000
Certificate not after:    Thu 21 Nov 2024 20:09:17 +0000
Subordinate resources:    AS: 263384
                          IP: 138.185.40.0/22
                          IP: 177.87.28.0/22
                          IP: 2804:1554::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d7:01:6d:82:b1:85:03:6a:21:18:7d:e1:0b:9b:2d:23:15:2d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 23 20:04:17 2023 GMT
            Not After : Nov 21 20:09:17 2024 GMT
        Subject: CN=42069E8E68759D7E92CA70711619EA4DC4E27721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:ba:04:89:c3:bb:4b:6b:5f:3f:2e:c5:1b:
                    9a:d5:60:87:e4:3a:23:92:26:80:4d:5e:2d:a8:ce:
                    1a:55:50:31:4c:d9:ff:fa:ee:92:5e:13:ca:b6:82:
                    60:a8:89:ef:e3:fb:08:77:ca:6f:87:81:ac:87:63:
                    9e:4b:f0:2a:58:00:a8:13:38:af:a7:0a:7c:78:09:
                    8c:82:34:2e:cc:ac:fc:3f:ed:f8:bd:9d:b7:61:39:
                    24:52:a7:4a:ff:1d:b7:a3:06:1a:c4:1d:ca:8c:06:
                    91:16:97:da:de:c4:32:be:c7:2b:72:f4:d9:16:af:
                    b1:3d:3d:65:37:9f:67:ed:f4:b2:a9:c1:29:d9:33:
                    49:6f:9f:e1:63:3d:af:65:6f:0c:8a:65:11:c5:b2:
                    f1:2a:6a:e9:4e:35:ec:dc:10:05:9f:a1:03:a9:96:
                    a8:72:d0:2f:34:ab:a8:69:fb:db:56:c0:fb:14:53:
                    b7:9d:97:90:4b:47:a9:1f:bc:e8:d3:f8:4b:03:83:
                    31:0a:13:b5:86:61:4e:d8:30:e3:3e:ea:ce:0c:c2:
                    ac:f7:5c:3e:80:67:5c:d1:36:5f:fa:d3:8e:55:3d:
                    9b:b2:3a:0f:dc:69:7a:09:ae:f9:8f:c8:69:fd:fd:
                    a8:5a:62:98:c7:87:ee:cd:1d:e1:24:94:e6:97:8e:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.40.0/22
                  177.87.28.0/22
                IPv6:
                  2804:1554::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263384

    Signature Algorithm: sha256WithRSAEncryption
         96:f3:fd:56:1d:17:b8:64:23:22:08:af:b4:36:d6:a1:46:00:
         d8:46:85:71:64:70:55:97:15:cc:bf:e0:d5:ab:70:d5:c1:f3:
         4c:9c:d5:63:19:bf:6f:36:33:d6:b7:81:52:8c:09:29:2e:71:
         65:86:23:fb:d8:a7:ee:73:d8:c7:d2:11:d1:04:2f:a1:be:a6:
         ef:fc:a3:fa:77:ae:ef:c0:1d:eb:f8:e7:3f:15:65:1c:6c:e1:
         86:e7:7e:0f:88:d2:34:95:ec:91:80:d9:66:4e:58:6b:37:44:
         b9:0a:2e:8d:e1:8f:e9:b0:8c:ef:71:ef:91:f2:04:90:d5:f7:
         ce:6f:40:f0:ba:d0:ce:a8:b2:23:e9:4c:ab:cf:69:01:b2:7a:
         7c:48:bd:9c:5e:07:54:fa:fb:06:ee:e6:76:29:e9:e6:a7:a0:
         44:fd:cc:30:49:83:1c:bc:45:e8:3c:27:0c:a3:f9:bd:33:2f:
         11:6e:7a:e5:68:1e:47:be:7c:a4:c1:bb:a5:e1:c3:76:6f:b4:
         7d:76:96:cf:9e:fd:d6:10:c3:de:84:1d:67:63:0c:9d:cf:4c:
         0c:ba:7b:6e:47:6d:c1:70:ed:e1:16:98:46:c5:12:f3:b8:1a:
         b7:0a:8c:09:e6:51:15:47:3c:71:c9:3a:9e:99:d9:c7:47:7b:
         c0:59:fb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----