Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer
File:                     4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer (raw, json)
Hash identifier:          H8NISwSCWe6R9Vsiw3P6mATASA2nkODEt6ANLkNPwKw=
Subject key identifier:   47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       730B9F2EEE94D17F23A38F00E2AA8433DFA3254F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:22 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:22 +0000
Subordinate resources:    AS: 269417
                          IP: 45.186.88.0/22
                          IP: 2804:6444::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0b:9f:2e:ee:94:d1:7f:23:a3:8f:00:e2:aa:84:33:df:a3:25:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:22 2024 GMT
            Not After : Mar 31 11:03:22 2025 GMT
        Subject: CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:30:30:35:6f:fc:6e:1a:bf:24:62:33:a2:
                    51:ab:f5:1a:42:18:2b:c0:b4:fc:e6:0c:44:db:56:
                    71:f3:f8:40:9d:71:ee:9b:f8:86:dd:94:6d:4b:22:
                    6d:c6:68:08:71:97:88:e7:6d:ba:ec:fa:3f:b9:90:
                    81:d8:03:49:38:a0:28:4d:0d:a3:1e:05:7d:02:a6:
                    97:77:94:1d:ea:b2:66:91:56:bb:66:69:eb:7a:0a:
                    36:f7:48:7f:42:e4:f8:57:9a:7e:b3:d4:74:70:6e:
                    28:d4:d1:3a:37:a8:dc:19:18:ff:8d:dc:45:74:e8:
                    8f:ce:91:dd:18:6a:df:41:41:29:10:9b:0a:c6:ce:
                    d5:c0:6b:b1:18:da:ac:b1:a4:33:87:f0:d6:cd:3b:
                    2e:c0:fb:0b:00:82:45:db:61:1e:52:ed:6a:0f:1b:
                    29:24:16:ae:63:61:50:2a:ff:1c:f5:27:cf:4a:96:
                    37:98:19:9f:e4:a2:1e:8d:a0:e5:3c:48:e4:96:fa:
                    41:0e:66:37:32:95:dc:14:29:6c:45:c6:4f:fd:f2:
                    84:48:76:ec:88:1c:98:0f:25:ea:19:71:58:3b:b4:
                    01:ad:f5:1f:22:e0:cf:d4:bd:41:b6:62:37:72:fc:
                    ab:46:6c:f1:b9:d8:ac:f3:08:42:1c:60:18:61:70:
                    f2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.88.0/22
                IPv6:
                  2804:6444::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269417

    Signature Algorithm: sha256WithRSAEncryption
         0b:80:13:7f:39:27:97:f1:4c:a2:65:0c:bd:f9:33:00:76:5a:
         9d:8c:7f:cd:d0:7b:a7:c3:77:be:20:78:46:11:ad:a5:d3:bd:
         84:ef:5d:16:eb:42:49:cf:5e:3e:86:39:f1:e7:22:a7:da:9b:
         0e:48:b8:6e:51:da:b5:db:9e:35:eb:a6:4e:33:2e:29:b5:7a:
         27:b7:b0:b3:7c:2d:a4:ad:c1:ee:ba:69:f5:05:8a:a5:28:1c:
         8f:ab:1b:c5:71:d7:53:f4:cb:df:06:ac:be:e6:d2:e8:df:b9:
         30:78:c1:4e:d4:bf:c7:fb:77:47:c0:3c:d0:d3:6e:ba:a3:58:
         15:aa:34:7d:9c:b2:de:eb:88:9e:54:65:ce:7f:85:75:d3:ab:
         16:4e:98:cf:cf:e4:78:a7:10:e1:dc:65:83:60:89:42:c2:82:
         80:90:05:cd:08:e6:01:a1:2b:a0:31:74:29:5a:f5:76:de:f9:
         94:7d:43:7a:74:90:cd:f8:7c:4c:db:c9:df:26:15:3c:8e:74:
         66:42:a7:32:f6:4e:a2:6c:68:be:e3:8f:71:7d:63:bc:44:f9:
         5a:f5:10:69:65:db:3c:79:43:e6:e2:7f:f8:51:35:fa:74:aa:
         26:f5:86:d3:f0:64:27:de:8e:79:e2:e2:d4:44:c8:93:e3:d6:
         de:f0:e7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----