Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer
File:                     5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer (raw, json)
Hash identifier:          K/wgXQ2pSmlyGsvdg3bZKEyXX7GFHsCRuuVv9DSvDHc=
Subject key identifier:   5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       50A5E12DA0D3EC2B0F9F098F3A2D4603387B2789
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 14:02:30 +0000
Certificate not after:    Thu 07 Nov 2024 14:07:30 +0000
Subordinate resources:    AS: 263335
                          IP: 191.36.136.0/21
                          IP: 2804:1484::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a5:e1:2d:a0:d3:ec:2b:0f:9f:09:8f:3a:2d:46:03:38:7b:27:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 14:02:30 2023 GMT
            Not After : Nov  7 14:07:30 2024 GMT
        Subject: CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:8a:a3:dc:77:4c:c7:89:e4:17:ca:96:c9:
                    70:4b:d2:57:57:c1:58:6d:38:98:cf:59:7c:0c:91:
                    b3:74:5a:45:5e:ca:a5:02:28:6f:9b:8e:b9:a0:90:
                    8f:2a:90:49:00:21:e2:4e:23:3a:e7:78:37:d7:cf:
                    07:66:fa:35:81:e3:e5:46:b1:64:78:41:a3:9e:2f:
                    42:c6:83:6e:c3:c3:24:69:0c:fa:da:4d:d1:f4:18:
                    8a:1a:48:3a:16:4d:6d:76:f4:21:4e:50:fb:2e:b0:
                    b3:d1:e2:01:13:0c:d2:e3:fa:99:a6:43:f3:4a:8e:
                    e0:a3:8b:a8:ad:77:d7:c1:57:81:cd:00:9d:97:79:
                    37:dc:8e:2b:ac:81:1e:08:f8:65:90:6d:23:c4:54:
                    20:67:38:8f:f0:03:d7:58:22:a7:71:46:db:9e:d0:
                    37:62:a2:95:9c:c4:29:02:d6:f7:ae:d2:1b:dc:b5:
                    78:0b:87:6e:34:5e:c2:0b:26:70:61:0d:2d:be:b9:
                    ed:0f:4e:bd:8c:e6:35:ff:39:8c:64:0e:2b:99:95:
                    1f:d6:c0:ba:e3:ed:ed:5a:53:e5:98:c0:73:2c:fb:
                    c2:eb:a8:b3:49:d4:e6:e6:94:39:cd:f2:0d:39:99:
                    81:6f:38:97:43:0f:d1:e4:13:e0:8e:c7:06:3b:79:
                    0e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.136.0/21
                IPv6:
                  2804:1484::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263335

    Signature Algorithm: sha256WithRSAEncryption
         61:f3:2b:66:15:6e:b9:40:d5:8d:ae:b7:f9:f1:14:f1:bc:f3:
         0e:4d:b5:f3:99:1b:e5:e8:ce:2d:45:3b:18:ce:20:76:3e:06:
         a0:05:e0:e0:d1:98:51:af:c8:98:ad:74:2f:71:f6:10:48:58:
         17:e0:e7:26:cc:00:d6:16:56:af:e1:b1:ee:90:43:a8:21:d9:
         51:ec:e9:31:9d:26:f9:b2:7e:8b:a2:67:c7:8d:99:22:06:ea:
         dc:79:91:bf:5e:b5:d3:64:b3:26:b6:9d:ff:72:d3:b2:40:d7:
         90:f5:1f:b2:b5:2c:b9:c4:d7:d0:ff:b1:69:92:20:ae:f8:15:
         05:14:da:c6:b0:12:65:da:e3:c5:9c:15:22:73:1e:a2:72:11:
         c1:07:a7:a5:8f:70:c2:73:8e:8b:be:e0:75:b1:78:37:10:aa:
         97:9e:1c:4c:64:47:5e:40:13:18:78:2d:3e:e2:e5:d7:cf:b8:
         85:5e:81:9b:72:da:d4:cf:b7:b7:b5:4c:de:e5:27:34:a5:fe:
         8b:84:64:e0:3d:82:a2:21:a1:62:e0:da:96:ce:0d:58:4e:de:
         84:ed:01:99:c3:64:14:a6:27:56:12:d2:b9:d8:bf:cd:07:e6:
         2e:1a:e5:51:7f:e4:8b:42:b6:35:e5:43:5b:91:49:f5:57:63:
         6b:36:7c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----