Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5C1ACFA3D7CEA55E0BB4F710B951A0FF57069A84.cer
File:                     5C1ACFA3D7CEA55E0BB4F710B951A0FF57069A84.cer (raw, json)
Hash identifier:          4QzNhmFwmFKzcI2c35Om9KQvJ/Int0VuIy9dIfH+v+0=
Subject key identifier:   5C:1A:CF:A3:D7:CE:A5:5E:0B:B4:F7:10:B9:51:A0:FF:57:06:9A:84
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       BCD7118E1F1E952FBB3D6C5CD5E318D1B2CAF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/5C1ACFA3D7CEA55E0BB4F710B951A0FF57069A84.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Aug 2023 17:14:37 +0000
Certificate not after:    Thu 15 Aug 2024 17:19:37 +0000
Subordinate resources:    AS: 263320
                          IP: 191.7.144.0/20
                          IP: 2804:143c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bc:d7:11:8e:1f:1e:95:2f:bb:3d:6c:5c:d5:e3:18:d1:b2:ca:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 17 17:14:37 2023 GMT
            Not After : Aug 15 17:19:37 2024 GMT
        Subject: CN=5C1ACFA3D7CEA55E0BB4F710B951A0FF57069A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:be:04:b9:90:87:9a:79:41:35:1d:ef:86:e7:
                    a2:d6:a9:97:c3:4d:a9:ed:65:fd:9c:1c:24:cc:2b:
                    3a:82:64:69:a7:e0:0b:99:16:0e:31:0d:d1:3b:fb:
                    7f:45:6f:3f:5b:79:3b:34:17:b7:a3:64:e8:0a:36:
                    1a:ce:b4:25:f2:41:1c:b1:04:52:ba:02:56:7a:6b:
                    d6:d4:b4:f0:31:e5:db:8f:97:66:0d:90:6e:50:f3:
                    be:e1:00:29:47:51:73:ac:8b:e2:00:f3:fc:7d:c5:
                    c9:e1:bc:26:64:dd:f7:02:5a:71:60:ce:ae:f2:2c:
                    51:86:33:36:66:3a:9c:25:46:a7:a1:f5:13:29:28:
                    43:7e:58:cc:85:f9:d9:96:aa:46:df:7c:cc:3d:97:
                    aa:59:ba:cd:17:09:58:1e:b6:97:d5:f0:dd:9f:47:
                    c5:5d:1f:46:50:06:2e:ce:e8:89:01:96:9f:36:ad:
                    77:3f:41:46:0b:b4:8b:47:d8:e4:6d:1e:8c:9d:94:
                    8e:ed:fa:57:92:9f:4b:1c:fc:11:50:5e:53:bf:d7:
                    02:ba:bb:a7:86:15:16:8d:74:39:35:d3:4a:88:91:
                    14:2d:5e:71:8d:2d:5d:70:77:a3:57:fa:fe:80:19:
                    0c:9a:fc:0d:fe:77:5a:d5:e9:bc:64:a4:99:96:6b:
                    98:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:1A:CF:A3:D7:CE:A5:5E:0B:B4:F7:10:B9:51:A0:FF:57:06:9A:84
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/5C1ACFA3D7CEA55E0BB4F710B951A0FF57069A84.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.144.0/20
                IPv6:
                  2804:143c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263320

    Signature Algorithm: sha256WithRSAEncryption
         38:a6:ed:cb:70:bd:23:10:22:ff:3a:9f:10:27:6a:7c:05:98:
         7a:bb:22:c1:8c:70:14:91:10:aa:3e:2c:fb:ed:26:b1:cf:55:
         a3:c3:9b:43:b9:f2:47:ae:86:5d:e6:26:9d:88:93:7b:7d:b4:
         cc:49:94:d8:de:fc:fa:94:78:fd:ce:f0:7e:f4:4d:f9:82:0b:
         0d:40:46:48:7e:2e:0b:8e:a0:a1:60:dc:56:8d:04:58:73:93:
         27:f8:21:c6:30:85:24:46:2f:42:e7:be:79:dc:78:7a:a2:55:
         b0:f1:4d:ce:4b:f9:7f:df:f9:ba:07:62:4a:8d:6f:79:c1:83:
         a2:5e:c0:98:7a:f1:9a:65:57:65:1a:a0:43:41:82:b5:ea:ec:
         e6:e8:d1:34:78:91:4e:c3:cc:c8:05:16:af:55:bf:66:fa:fd:
         0d:2d:3a:d5:29:86:eb:ba:73:9a:75:41:f5:ee:56:19:31:cc:
         b7:4f:6c:02:ef:8d:67:e2:fb:85:b1:28:09:77:71:60:97:ee:
         bb:ca:51:c2:5b:3a:b4:f9:e6:de:2b:21:d0:18:f9:1e:03:a2:
         9a:57:be:ce:73:7a:b8:78:cc:54:40:c6:b7:12:91:e9:4a:35:
         c3:32:17:6e:10:33:2c:be:f6:c8:09:9c:22:65:73:cd:6e:d3:
         0e:b8:e5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----