Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/67E82335A80C7D94AF91BB6F5A538393A57E028A.cer
File:                     67E82335A80C7D94AF91BB6F5A538393A57E028A.cer (raw, json)
Hash identifier:          O7eAHydRut1EYrBWNsKKHic7brCgAFxIczPCrQe9LhE=
Subject key identifier:   67:E8:23:35:A8:0C:7D:94:AF:91:BB:6F:5A:53:83:93:A5:7E:02:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7BB4E9C5DCC135CB0181FD21CFC321D702DB0C31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/0/67E82335A80C7D94AF91BB6F5A538393A57E028A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 13 Aug 2023 01:15:09 +0000
Certificate not after:    Sun 11 Aug 2024 01:20:09 +0000
Subordinate resources:    AS: 262313
                          IP: 177.105.224.0/20
                          IP: 2804:8564::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b4:e9:c5:dc:c1:35:cb:01:81:fd:21:cf:c3:21:d7:02:db:0c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 13 01:15:09 2023 GMT
            Not After : Aug 11 01:20:09 2024 GMT
        Subject: CN=67E82335A80C7D94AF91BB6F5A538393A57E028A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:9e:dd:fe:cc:a2:02:e9:83:5b:59:f7:a0:
                    22:06:43:5d:1d:b3:d5:6d:ee:95:67:74:91:e1:40:
                    37:8d:31:aa:4a:83:07:d2:2a:67:27:f7:01:6e:ab:
                    11:3d:9b:63:36:3a:b1:d2:df:a5:f1:f3:82:75:59:
                    0b:84:3a:35:53:76:bf:c7:04:1a:9d:3f:c5:7e:3d:
                    35:1b:8d:f9:48:5d:a2:c8:de:8f:37:01:58:6b:1b:
                    f3:d1:a2:4e:b4:84:4f:95:57:b1:7a:0d:01:78:a7:
                    55:09:72:f6:4a:79:22:fa:79:c6:e5:1e:a0:18:a4:
                    6d:b8:56:c6:c2:fc:97:a9:b4:a2:80:b0:b0:4e:c5:
                    2a:13:bd:c2:5e:90:b3:8b:f3:fa:29:d6:b0:06:eb:
                    35:84:ad:a3:ca:1a:db:3e:f2:c4:5b:6d:ac:26:15:
                    89:d9:3a:f6:c1:56:7c:b6:e6:76:07:0a:ff:ca:42:
                    03:cf:17:42:1c:e9:52:99:b3:f8:d9:02:79:c5:6b:
                    24:d4:bc:3a:27:25:62:75:f3:6c:ad:77:dc:0b:fb:
                    bf:ea:f5:c6:89:da:29:f1:bc:70:be:c4:ad:66:b4:
                    9e:10:71:2a:8e:da:72:46:83:b4:05:9c:a1:dd:ec:
                    13:f0:b2:c8:d0:06:cb:96:30:6f:38:fe:33:a9:a6:
                    9b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:E8:23:35:A8:0C:7D:94:AF:91:BB:6F:5A:53:83:93:A5:7E:02:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/0/67E82335A80C7D94AF91BB6F5A538393A57E028A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.224.0/20
                IPv6:
                  2804:8564::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262313

    Signature Algorithm: sha256WithRSAEncryption
         a4:66:f1:8d:39:9e:61:24:61:28:cf:7b:40:ac:d8:36:57:7d:
         64:98:35:2c:c6:e9:19:8d:b5:46:fb:c2:16:6c:43:74:47:98:
         b4:5e:0b:14:2f:d5:d3:c8:99:28:86:f5:3c:33:2d:dc:8a:35:
         af:4e:75:cc:39:6d:b5:5d:d4:e3:b6:16:99:b8:1a:2a:f2:5a:
         94:1b:a9:86:6f:a6:2a:19:f4:fe:b1:e7:04:c2:3a:3f:20:50:
         a0:6d:35:ca:96:2b:51:09:9d:9a:5b:83:57:72:cd:ba:8f:5e:
         21:3d:b0:ef:79:8f:c6:70:e6:ea:ed:2d:00:9e:63:36:61:a1:
         be:53:f1:c8:9b:40:50:c7:67:ed:44:71:e4:c7:6e:9f:24:ce:
         4e:0a:96:56:f1:e7:63:e2:ea:28:0c:ad:62:81:45:42:f6:a2:
         ce:ce:6b:14:b5:0a:6f:0b:ba:33:8d:ca:1b:a3:a1:a4:d2:4f:
         a1:98:d0:04:63:5e:84:55:60:c5:f2:95:28:10:b9:79:9d:91:
         68:ef:25:aa:09:8c:d5:4b:c4:73:f9:c5:c5:8f:66:95:19:af:
         50:52:e5:0a:61:8a:50:b5:44:e0:54:2e:a1:a6:00:ad:ed:79:
         77:50:02:da:dd:64:ad:b8:35:e7:d6:26:a7:b6:32:a2:e2:24:
         d2:a8:4d:a0
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUe7TpxdzBNcsBgf0hz8Mh1wLbDDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTMwMTE1MDlaFw0yNDA4MTEwMTIwMDlaMDMxMTAvBgNV
BAMTKDY3RTgyMzM1QTgwQzdEOTRBRjkxQkI2RjVBNTM4MzkzQTU3RTAyOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YZ7d/syiAumDW1n3oCIGQ10d
s9Vt7pVndJHhQDeNMapKgwfSKmcn9wFuqxE9m2M2OrHS36Xx84J1WQuEOjVTdr/H
BBqdP8V+PTUbjflIXaLI3o83AVhrG/PRok60hE+VV7F6DQF4p1UJcvZKeSL6ecbl
HqAYpG24VsbC/JeptKKAsLBOxSoTvcJekLOL8/op1rAG6zWEraPKGts+8sRbbawm
FYnZOvbBVny25nYHCv/KQgPPF0Ic6VKZs/jZAnnFayTUvDonJWJ182ytd9wL+7/q
9caJ2inxvHC+xK1mtJ4QcSqO2nJGg7QFnKHd7BPwssjQBsuWMG84/jOpppsVAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRn6CM1qAx9lK+R
u29aU4OTpX4CijAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83SjNMVXNEeFZLVEVmZ3k4bWNDSGVzcXJOeExza2tLenFo
RXBnUUNWNnBacy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN0ozTFVzRHhWS1RFZmd5OG1jQ0hlc3FyTnhMc2trS3px
aEVwZ1FDVjZwWnMvMC82N0U4MjMzNUE4MEM3RDk0QUY5MUJCNkY1QTUzODM5M0E1
N0UwMjhBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBASxaeAwDQQCAAIwBwMF
ACgEhWQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBACpMA0GCSqGSIb3DQEBCwUA
A4IBAQCkZvGNOZ5hJGEoz3tArNg2V31kmDUsxukZjbVG+8IWbEN0R5i0XgsUL9XT
yJkohvU8My3cijWvTnXMOW21XdTjthaZuBoq8lqUG6mGb6YqGfT+secEwjo/IFCg
bTXKlitRCZ2aW4NXcs26j14hPbDveY/GcObq7S0AnmM2YaG+U/HIm0BQx2ftRHHk
x26fJM5OCpZW8edj4uooDK1igUVC9qLOzmsUtQpvC7ozjcobo6Gk0k+hmNAEY16E
VWDF8pUoELl5nZFo7yWqCYzVS8Rz+cXFj2aVGa9QUuUKYYpQtUTgVC6hpgCt7Xl3
UALa3WStuDXn1iantjKi4iTSqE2g
-----END CERTIFICATE-----