Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6D953757C3802AF950C8835FFAF09F57F8632103.cer
File:                     6D953757C3802AF950C8835FFAF09F57F8632103.cer (raw, json)
Hash identifier:          FHzLiYP01sCSShrPOZg0sfTP06WjdgKiSomKYhQYufU=
Subject key identifier:   6D:95:37:57:C3:80:2A:F9:50:C8:83:5F:FA:F0:9F:57:F8:63:21:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F71553B9B302DD58D5F4EAEF670AD99571D743D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/0/6D953757C3802AF950C8835FFAF09F57F8632103.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Sep 2023 23:17:05 +0000
Certificate not after:    Tue 24 Sep 2024 23:22:05 +0000
Subordinate resources:    AS: 270569
                          IP: 200.215.244.0/22
                          IP: 2804:6e00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:71:55:3b:9b:30:2d:d5:8d:5f:4e:ae:f6:70:ad:99:57:1d:74:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 23:17:05 2023 GMT
            Not After : Sep 24 23:22:05 2024 GMT
        Subject: CN=6D953757C3802AF950C8835FFAF09F57F8632103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0e:09:93:bd:43:01:20:85:9d:13:22:24:cd:
                    5c:21:b7:40:38:7b:6b:a0:ea:64:89:1a:90:d3:7c:
                    81:d4:80:37:60:38:95:c3:dd:b1:1b:6b:26:da:e7:
                    f1:89:b3:2e:25:c9:2b:69:c9:17:81:c7:6e:c9:88:
                    93:11:7f:e5:6e:55:fb:55:77:0f:22:ec:b7:9f:a1:
                    b0:63:80:bd:76:32:38:d9:4f:9d:93:ec:d5:3c:48:
                    13:cd:95:50:a5:a5:b3:6a:4b:12:c5:87:92:34:49:
                    c7:b9:40:e7:b4:5b:e2:4d:67:42:39:23:bb:3e:7c:
                    54:61:b9:87:9d:79:07:4b:f0:51:31:00:a4:1c:61:
                    87:bd:1c:86:d9:64:d8:eb:04:15:28:83:88:ae:92:
                    84:e7:f0:9b:1e:3f:e2:e5:64:f8:75:27:5b:c3:df:
                    0d:d1:e0:ab:54:37:10:77:5a:69:7a:04:92:c0:2a:
                    09:60:5a:1d:46:3d:8a:07:ed:0f:d9:a3:18:b0:ae:
                    61:70:e9:96:f8:9d:2e:88:4e:1f:44:12:4f:80:26:
                    73:01:db:3f:dd:45:c8:75:07:a1:0a:83:98:f0:77:
                    e5:fd:2d:e2:ea:c3:00:6b:5d:33:38:53:60:b7:19:
                    b3:b2:0f:97:c0:85:4a:cd:23:a0:9d:89:52:22:dc:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:95:37:57:C3:80:2A:F9:50:C8:83:5F:FA:F0:9F:57:F8:63:21:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/0/6D953757C3802AF950C8835FFAF09F57F8632103.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.244.0/22
                IPv6:
                  2804:6e00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270569

    Signature Algorithm: sha256WithRSAEncryption
         2a:47:fe:3e:c6:8b:08:ed:6f:8a:9b:a0:6c:33:1d:32:fe:e7:
         de:4a:e1:ab:02:67:81:c2:f0:11:2d:78:b1:29:ef:27:54:8b:
         dd:1c:9b:f6:fe:70:64:fd:db:fb:91:52:1c:77:a3:56:1c:31:
         f9:9d:c5:5e:44:3f:e8:3a:de:b0:fa:73:e1:fb:77:e3:87:04:
         25:19:9e:0a:74:c9:ff:74:1d:b3:c9:76:fa:27:91:c1:9b:03:
         88:92:38:d3:8b:16:5f:73:0a:30:ac:aa:09:3c:5d:92:e6:e0:
         47:32:97:1e:52:25:38:c9:48:83:04:41:79:ef:55:a9:77:7e:
         57:b3:7c:36:e0:9d:cb:3d:20:91:a1:8b:15:0e:66:db:3b:7b:
         01:0a:79:20:50:86:3f:82:df:63:4a:d7:a4:d8:b5:23:d3:0e:
         61:35:ea:5b:e2:73:ee:76:4e:58:64:72:74:20:21:e5:dd:90:
         03:2a:27:b5:5e:af:5b:89:d9:6d:aa:33:8b:88:e0:59:65:da:
         8a:a0:eb:05:21:0d:b0:11:09:6a:11:36:c3:e7:75:37:fe:34:
         ea:97:65:05:5c:a9:27:75:2a:4a:b4:a5:51:76:29:9e:0e:28:
         4b:ce:1e:d3:8e:83:63:83:63:69:47:35:35:7e:c9:e4:8d:93:
         c3:a5:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----