Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6F0BD4CC5A44F051427124CC5866903DF8B868FD.cer
File:                     6F0BD4CC5A44F051427124CC5866903DF8B868FD.cer (raw, json)
Hash identifier:          9+22BXznBXwUshe5/WNCI7TEkt+7l0zSLqd94fgMgsw=
Subject key identifier:   6F:0B:D4:CC:5A:44:F0:51:42:71:24:CC:58:66:90:3D:F8:B8:68:FD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3EA790CB7B868661A0AD1CB62F0DBD5303FA0EC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/6F0BD4CC5A44F051427124CC5866903DF8B868FD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Dec 2022 17:05:13 +0000
Certificate not after:    Mon 11 Dec 2023 17:10:13 +0000
Subordinate resources:    AS: 270398
                          IP: 189.126.10.0/23
                          IP: 2804:6b68::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a7:90:cb:7b:86:86:61:a0:ad:1c:b6:2f:0d:bd:53:03:fa:0e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 12 17:05:13 2022 GMT
            Not After : Dec 11 17:10:13 2023 GMT
        Subject: CN=6F0BD4CC5A44F051427124CC5866903DF8B868FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:cb:f8:38:14:7c:13:af:ad:1a:9b:e5:1c:
                    4c:f4:64:f4:4d:f7:c3:01:4a:dc:b5:a1:db:bf:2d:
                    11:2b:ee:54:ac:00:c2:4e:b0:b1:f4:ca:df:74:2f:
                    b5:59:e4:19:c7:76:db:6e:19:b0:12:49:92:70:52:
                    28:95:e2:db:04:fb:54:e7:a4:8b:ec:ed:12:ae:7e:
                    e3:ba:04:e0:76:e8:0c:80:6d:94:4d:69:9d:b3:b0:
                    f8:b5:53:ea:35:2f:9f:c9:fd:a1:06:ad:15:f2:88:
                    ed:1d:b8:e5:02:ff:ed:14:0a:27:d2:11:d1:4d:7d:
                    71:a5:2f:db:de:07:11:b0:e0:4f:3a:f0:e2:b9:aa:
                    a8:12:3f:53:c3:5d:ea:b1:33:2f:44:aa:51:3e:56:
                    ea:57:ce:5c:6f:df:40:c6:55:3b:b0:2d:97:4a:ff:
                    45:e2:47:df:34:98:0a:60:0e:88:d4:5f:98:bf:09:
                    77:48:39:08:1c:5f:9a:f9:1a:9f:bb:59:4b:ca:4d:
                    1e:02:ca:75:24:74:60:58:4e:72:ac:cd:92:44:1d:
                    62:af:c4:07:ca:54:38:16:72:87:97:62:85:3e:4f:
                    68:47:3e:c9:e3:34:60:08:89:4f:1b:92:bb:b6:5c:
                    0b:40:ca:f9:94:85:ca:87:6b:56:aa:84:ab:25:b2:
                    db:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:0B:D4:CC:5A:44:F0:51:42:71:24:CC:58:66:90:3D:F8:B8:68:FD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/6F0BD4CC5A44F051427124CC5866903DF8B868FD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.10.0/23
                IPv6:
                  2804:6b68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270398

    Signature Algorithm: sha256WithRSAEncryption
         6b:80:e4:ad:53:78:ed:bc:b8:29:3b:74:b3:4f:ef:77:a9:58:
         7c:5a:5a:b5:8f:60:2d:9b:48:8f:bc:fe:d2:d5:fd:71:35:a7:
         37:56:82:6a:6a:7f:3b:94:7e:41:75:dd:6e:e2:e0:e0:1d:b2:
         fd:51:4a:6d:32:49:73:c2:bb:96:8f:59:68:98:e6:8f:2c:58:
         a7:55:82:86:62:82:2a:49:7f:d7:f6:fe:9e:bd:8f:ff:24:ec:
         86:70:fd:22:19:6e:68:49:19:0e:14:25:49:b6:36:01:b1:6c:
         70:cf:25:09:42:6e:97:58:f3:73:86:55:3c:d3:48:9c:ac:fb:
         ea:aa:a7:f3:6d:1f:a4:a7:2f:75:cc:5a:18:9b:cc:c8:6a:5c:
         56:cd:22:ad:71:91:85:c9:c4:18:36:fa:36:23:86:d5:50:a0:
         e4:77:45:f5:50:90:a2:c5:be:13:fc:1d:cd:d5:92:93:2a:5a:
         83:df:59:51:ac:12:05:a3:89:6f:2c:a1:8e:0e:2d:ca:72:d1:
         43:ff:83:ac:5e:dc:2b:86:ac:2b:fb:6d:67:66:e9:50:9d:95:
         a4:9e:f9:33:90:68:96:a9:55:29:e9:c9:87:f6:b3:5a:1d:70:
         65:b6:9b:9d:40:3e:37:8c:55:c3:46:55:f7:f9:79:0b:b7:ef:
         de:53:33:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----