Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.cer
File:                     443C52A1E1B3E17578094AEB52B4600E6650CDD5.cer (raw, json)
Hash identifier:          b+BQA9srARRWoGFc5TJDnUoiEsccb/mEIuES5nA9fYA=
Subject key identifier:   44:3C:52:A1:E1:B3:E1:75:78:09:4A:EB:52:B4:60:0E:66:50:CD:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E2E82A52F46CDB1FF2B9D19E8F3EC1EFD4C65A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Sep 2023 03:22:12 +0000
Certificate not after:    Sat 21 Sep 2024 03:27:12 +0000
Subordinate resources:    AS: 266190
                          IP: 200.9.20.0/22
                          IP: 2804:3c18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2e:82:a5:2f:46:cd:b1:ff:2b:9d:19:e8:f3:ec:1e:fd:4c:65:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 23 03:22:12 2023 GMT
            Not After : Sep 21 03:27:12 2024 GMT
        Subject: CN=443C52A1E1B3E17578094AEB52B4600E6650CDD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:23:a7:c7:b3:ae:16:a3:80:d0:f9:01:c0:
                    76:c0:34:54:35:d2:c3:3c:ef:13:38:2c:5b:43:a5:
                    f8:1c:f4:55:7d:a3:56:76:fd:06:eb:21:2a:52:51:
                    1b:ee:53:27:09:10:d8:40:fd:1c:7a:92:b0:be:8c:
                    95:21:3a:a4:ed:06:b6:0a:71:0d:27:52:64:39:a2:
                    62:c9:05:8e:9f:52:81:41:86:92:97:c6:37:fe:fd:
                    cf:08:13:56:fa:bb:57:ef:38:a5:76:da:c4:d9:cb:
                    0d:f7:3c:dc:10:56:5d:6c:72:11:74:b4:7e:5f:5f:
                    96:32:25:19:67:3f:f7:97:e5:0e:35:af:39:72:75:
                    82:e5:e8:3f:73:ad:06:49:80:2f:a3:0e:0f:5e:b3:
                    1e:ff:ab:10:22:46:b6:fe:94:45:9f:62:c7:c6:3f:
                    a2:8b:ce:79:2c:f9:e3:0f:a6:3c:c8:54:1c:a9:b6:
                    c3:9d:97:0d:e2:ba:94:f7:44:bf:8d:f6:d1:72:7a:
                    6a:b5:84:d3:06:99:67:3d:e8:46:05:1e:59:a2:f3:
                    6d:06:8a:3e:6b:e8:6a:2f:e5:95:17:ce:d4:94:70:
                    82:13:e1:df:06:c7:94:47:03:60:19:a3:84:2a:66:
                    b8:a0:eb:2f:be:53:c8:ae:d5:a9:7b:9d:bf:06:72:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:3C:52:A1:E1:B3:E1:75:78:09:4A:EB:52:B4:60:0E:66:50:CD:D5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.20.0/22
                IPv6:
                  2804:3c18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266190

    Signature Algorithm: sha256WithRSAEncryption
         7a:09:cc:bb:15:4b:2c:98:63:2f:d4:c8:9c:a2:9b:6b:c2:b8:
         24:bf:d3:2d:d4:04:88:3d:de:87:05:41:ae:f2:06:93:4d:76:
         ef:1e:51:e3:c1:2d:3f:8c:d6:be:e2:9d:06:99:e4:70:e8:96:
         e9:22:62:53:43:47:2c:0e:61:e3:21:70:90:83:57:74:36:e4:
         77:64:82:ce:c1:c4:06:6c:ff:6b:de:f8:2c:12:4a:34:a0:2a:
         01:89:63:d7:cd:82:4c:98:f9:6d:66:8b:49:45:04:93:de:3e:
         7e:06:75:b4:ac:f6:d6:97:cd:9a:a9:f9:87:d8:ef:b5:07:c5:
         1d:c4:f7:0f:60:69:d2:b9:48:a5:02:8b:a3:9a:25:3e:e7:99:
         8f:40:55:70:0c:8f:92:a3:c1:6a:2d:5e:fd:88:b2:48:24:e0:
         c0:60:1d:94:a5:1b:63:cf:05:f7:27:07:ea:76:66:8e:61:1b:
         99:9d:a8:3e:55:38:06:9b:e7:99:e2:a2:0c:5c:af:66:fd:3d:
         19:b6:23:88:b6:5f:fc:9c:b7:19:e9:ff:22:9f:30:7c:35:5a:
         aa:17:0c:04:c7:11:6f:1e:05:37:de:92:54:a7:0b:6b:04:79:
         be:e3:4d:0b:35:f9:45:ed:49:d8:47:bd:2f:ab:ad:bf:cf:87:
         49:bd:5b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----