Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/552EC31E2BF77D7E45084CB7BF9D6C345612ECB6.cer
File:                     552EC31E2BF77D7E45084CB7BF9D6C345612ECB6.cer (raw, json)
Hash identifier:          CwfB38msxc62lcVWHqXyObe3GJEsvHpyRg5NSPylFF8=
Subject key identifier:   55:2E:C3:1E:2B:F7:7D:7E:45:08:4C:B7:BF:9D:6C:34:56:12:EC:B6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59D6FC620FE0699B3EF5A006EFB10349B21D17B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/552EC31E2BF77D7E45084CB7BF9D6C345612ECB6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Feb 2023 13:45:47 +0000
Certificate not after:    Fri 23 Feb 2024 13:50:47 +0000
Subordinate resources:    AS: 269261
                          IP: 45.182.16.0/22
                          IP: 2804:61dc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d6:fc:62:0f:e0:69:9b:3e:f5:a0:06:ef:b1:03:49:b2:1d:17:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 24 13:45:47 2023 GMT
            Not After : Feb 23 13:50:47 2024 GMT
        Subject: CN=552EC31E2BF77D7E45084CB7BF9D6C345612ECB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:d7:0b:66:01:11:aa:06:4a:e9:d2:4e:76:
                    f4:9e:7c:fe:be:c2:21:4c:1d:4a:be:b4:73:49:b8:
                    c7:fb:0a:85:67:d8:c7:8c:c7:d8:3d:76:84:a3:3b:
                    1d:47:40:3b:95:12:ae:12:dc:48:25:62:e6:34:41:
                    ab:93:cd:5a:8a:92:38:4a:8a:17:27:d3:d7:fc:5f:
                    15:b8:17:96:e9:5d:25:97:20:ee:35:f7:83:1c:2b:
                    8c:da:c2:a2:45:2d:d4:6e:f1:71:e8:47:bc:9e:3c:
                    92:f6:40:64:bf:92:4d:10:39:d6:be:b9:b1:f9:5e:
                    ac:c4:ec:27:f9:1d:5e:b3:b6:89:40:a1:12:1d:8e:
                    97:7c:28:7c:e3:2d:9d:6d:2e:a9:aa:32:07:a8:a7:
                    f3:f5:01:dc:08:11:c4:0e:93:14:e9:1d:8e:3e:35:
                    87:3d:f3:12:f7:44:58:9d:ef:b1:a7:8c:d0:23:fe:
                    89:7b:d9:69:00:df:ee:40:4c:fd:a3:40:96:72:3e:
                    9e:bd:02:98:44:30:d0:2a:70:8f:97:dd:18:14:70:
                    ae:e1:53:f4:1d:ec:39:7f:7a:d4:16:9d:49:fc:4b:
                    f8:22:a0:2e:3b:3e:2e:7f:f3:e7:7b:4b:18:0e:26:
                    60:04:56:2f:8e:7d:5b:d8:9d:13:43:75:d1:fd:d3:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:2E:C3:1E:2B:F7:7D:7E:45:08:4C:B7:BF:9D:6C:34:56:12:EC:B6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/552EC31E2BF77D7E45084CB7BF9D6C345612ECB6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.16.0/22
                IPv6:
                  2804:61dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269261

    Signature Algorithm: sha256WithRSAEncryption
         40:db:97:ed:f9:1b:10:1e:d4:b5:18:92:cb:54:5b:ba:d9:bd:
         63:47:54:56:d0:76:28:7c:87:5a:e2:01:63:79:0c:67:9e:df:
         0c:51:7b:2b:15:d7:09:e4:24:62:27:2e:e1:5f:27:0f:ce:ab:
         12:fc:37:30:0e:06:16:a6:65:72:4d:69:ee:32:44:26:5d:8b:
         ee:76:bd:26:dd:8d:a7:1c:69:ed:42:b8:46:1b:67:6a:0b:57:
         ea:9c:61:a6:b0:d2:a7:68:2b:77:de:45:49:26:9c:16:37:7b:
         7c:e2:e9:34:39:b1:54:3d:40:7d:f2:cf:70:24:4e:24:d0:48:
         cc:50:ee:45:b0:d7:97:5a:e9:e4:2f:f6:b3:67:57:74:b1:a6:
         8a:69:fb:b7:ef:5f:9d:41:27:d7:5f:11:ff:a3:40:e5:17:58:
         c0:84:b4:de:1e:62:8f:a5:c8:b7:d8:16:52:ad:a3:54:42:63:
         31:d3:67:ea:57:a0:4d:ba:ab:79:36:06:25:68:b4:0a:d9:a0:
         33:03:bd:f0:24:e7:f1:be:45:ac:f0:74:e4:72:1f:83:46:aa:
         46:78:be:d8:9b:e2:60:77:bf:05:db:70:95:a0:92:49:e9:7d:
         18:9c:c2:d7:59:33:e6:3b:a3:ae:eb:e9:57:7e:af:1f:19:31:
         55:34:47:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----