Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5A31EDF85D2C2F70A05019D7EA6F5E049D18C4C0.cer
File:                     5A31EDF85D2C2F70A05019D7EA6F5E049D18C4C0.cer (raw, json)
Hash identifier:          AkpG1RDhwqFl2ILrcWA0fOMzFw5LKzEfNviTirUN6yk=
Subject key identifier:   5A:31:ED:F8:5D:2C:2F:70:A0:50:19:D7:EA:6F:5E:04:9D:18:C4:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A2A49177FE04042171C9323CE6DAAAA06E337
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/1/5A31EDF85D2C2F70A05019D7EA6F5E049D18C4C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 31 Aug 2023 23:14:34 +0000
Certificate not after:    Thu 29 Aug 2024 23:19:34 +0000
Subordinate resources:    AS: 264150
                          IP: 138.99.12.0/22
                          IP: 170.247.104.0/22
                          IP: 2804:233c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2a:49:17:7f:e0:40:42:17:1c:93:23:ce:6d:aa:aa:06:e3:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 31 23:14:34 2023 GMT
            Not After : Aug 29 23:19:34 2024 GMT
        Subject: CN=5A31EDF85D2C2F70A05019D7EA6F5E049D18C4C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:63:27:15:f7:d1:16:33:5d:ad:18:4a:a0:
                    46:dd:4e:d2:13:ab:7f:a9:5c:63:90:92:76:48:e7:
                    4e:a9:20:58:b5:7f:64:e1:69:2b:ca:0d:4a:9f:20:
                    5a:67:d6:24:2e:6b:c6:1c:01:f0:fe:2b:37:6c:3c:
                    45:12:57:57:44:d3:c8:33:c4:ec:e9:52:9b:a9:2d:
                    ea:23:8e:b9:72:32:3f:ab:ca:d5:d8:d2:17:b4:7d:
                    b1:62:d5:c5:84:8f:3d:14:11:b4:4b:32:2d:07:b1:
                    b2:f3:18:11:0e:18:fb:eb:25:8b:be:71:9d:a9:55:
                    ee:b2:f3:5f:9f:67:6e:d8:e7:4a:60:37:e3:68:cb:
                    ca:c3:93:6a:68:6e:e8:1a:d4:92:27:0e:4b:96:c0:
                    85:7e:b5:0f:5d:49:85:b5:0a:bf:f4:46:12:e6:98:
                    36:71:9f:7f:fc:ca:b9:47:55:ea:70:0c:6d:b4:9d:
                    7f:3f:08:65:67:e2:b1:ee:86:fd:b4:21:8e:62:aa:
                    e4:f5:54:aa:78:b6:d5:c5:6d:c3:15:97:84:55:2a:
                    76:0e:3c:5d:00:1d:c8:51:f7:0b:47:3d:bb:a5:f2:
                    24:a4:30:3b:dc:a5:28:2b:65:70:f9:e2:60:5f:fb:
                    e5:bb:79:a5:47:3a:ce:d5:f2:63:73:44:93:2b:a7:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:31:ED:F8:5D:2C:2F:70:A0:50:19:D7:EA:6F:5E:04:9D:18:C4:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/1/5A31EDF85D2C2F70A05019D7EA6F5E049D18C4C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.12.0/22
                  170.247.104.0/22
                IPv6:
                  2804:233c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264150

    Signature Algorithm: sha256WithRSAEncryption
         4a:d2:fa:a4:d5:31:b3:6d:eb:6d:68:ea:2f:d4:3b:14:af:60:
         fa:a1:54:1b:ce:b1:cb:ca:09:a9:81:d8:be:1d:62:19:06:b5:
         e2:c2:a2:9a:71:fb:32:34:19:01:92:ff:61:6f:0d:96:da:c1:
         75:58:20:f4:87:34:48:d4:a2:53:fe:f3:4e:f0:df:51:68:d3:
         94:93:00:04:93:0f:54:0d:0c:3a:40:f1:15:de:a2:35:1f:aa:
         09:f3:4f:6b:d0:28:38:dd:a8:3b:1f:ad:bd:86:7f:4a:fa:b6:
         a2:ec:3b:dc:ea:d9:fb:90:be:70:11:86:f4:7a:2a:a6:2a:ab:
         0c:f2:de:51:19:9d:33:f3:69:b8:83:05:c3:8a:02:25:b6:6f:
         b9:6f:9e:d4:a6:5d:d3:92:88:f3:03:f9:7f:27:4d:5c:9e:f6:
         b2:67:e5:18:fe:8f:be:7f:45:ca:e7:81:14:f6:f6:0a:70:dc:
         84:50:48:71:82:9c:c2:a1:06:3f:b7:99:f9:e4:fa:74:52:2a:
         9b:0e:10:15:80:bd:eb:f9:eb:d1:0e:08:1b:42:54:ed:64:44:
         dd:2b:d9:4d:5e:84:2e:e6:88:ac:b7:48:e7:92:69:b7:0c:8c:
         12:7d:53:19:22:43:04:42:4c:8b:cc:4b:51:ca:69:a0:09:18:
         41:41:e4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----