Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7C92A2F5DD6C7CF4D3338A9771FBA581C5098A1D.cer
File:                     7C92A2F5DD6C7CF4D3338A9771FBA581C5098A1D.cer (raw, json)
Hash identifier:          QIlC+WpbW0g3IvqsGVrz9AAFFNEkpVu+4zdhIEVhXJ0=
Subject key identifier:   7C:92:A2:F5:DD:6C:7C:F4:D3:33:8A:97:71:FB:A5:81:C5:09:8A:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51E09F5B7083D15F7000D882AA029CDA7319F8A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7C92A2F5DD6C7CF4D3338A9771FBA581C5098A1D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Feb 2023 07:14:19 +0000
Certificate not after:    Thu 15 Feb 2024 07:19:19 +0000
Subordinate resources:    AS: 52820
                          IP: 177.52.174.0/23
                          IP: 2804:8ac0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e0:9f:5b:70:83:d1:5f:70:00:d8:82:aa:02:9c:da:73:19:f8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 07:14:19 2023 GMT
            Not After : Feb 15 07:19:19 2024 GMT
        Subject: CN=7C92A2F5DD6C7CF4D3338A9771FBA581C5098A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:a4:90:36:93:1e:67:c0:bf:2b:6e:53:76:
                    5e:19:37:73:55:8b:a6:16:18:22:2a:d9:07:33:18:
                    b8:b0:68:35:9f:2b:b3:ce:ba:f8:af:73:5d:52:67:
                    47:4a:bd:32:05:10:ef:c5:43:72:90:95:ec:2e:06:
                    4d:2b:8b:88:c4:43:ea:aa:7b:35:c8:ba:2c:c5:bd:
                    e4:4d:a1:ec:ab:29:30:9b:dc:ed:20:48:13:d1:c2:
                    d6:21:06:51:74:21:e4:46:47:c1:d1:6f:9b:6a:85:
                    c5:6f:16:f7:4d:e4:1b:4e:03:7f:07:62:83:12:c1:
                    8a:d3:ca:b3:d3:ed:cc:1f:77:c2:86:ce:68:f2:cb:
                    10:29:5f:72:9e:4e:0a:e0:4c:3a:de:e1:e4:5a:9a:
                    d9:2c:28:ae:1f:a9:97:5b:9b:ab:47:77:14:6d:5f:
                    0c:6b:db:d8:cc:03:f0:2d:92:f6:58:38:07:8f:8b:
                    91:70:a2:37:00:30:cd:37:84:25:70:20:72:6d:52:
                    0d:00:68:0a:62:0a:50:3e:f3:1e:f2:31:c3:b9:84:
                    b1:81:2c:12:83:8e:72:63:20:b0:70:d6:35:57:46:
                    aa:42:e1:b4:9f:ef:b7:f3:95:52:17:dd:ea:89:ba:
                    da:9d:01:29:b6:83:5c:66:a7:2d:4c:b7:df:7a:d7:
                    e4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:92:A2:F5:DD:6C:7C:F4:D3:33:8A:97:71:FB:A5:81:C5:09:8A:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7C92A2F5DD6C7CF4D3338A9771FBA581C5098A1D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.174.0/23
                IPv6:
                  2804:8ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52820

    Signature Algorithm: sha256WithRSAEncryption
         8b:c9:5b:b5:ff:ad:fb:40:7b:c3:57:02:8a:e0:10:0a:b3:93:
         98:48:55:2a:5b:75:ed:25:48:da:cd:2c:1c:77:4f:f2:c8:01:
         15:17:05:73:85:cc:3e:62:52:c7:c9:a9:3a:49:2e:71:9f:24:
         40:24:63:65:74:43:6b:f1:61:be:27:e7:b3:18:40:fd:ad:94:
         95:e4:0a:0d:03:af:e5:4e:be:6b:41:89:5c:dd:67:55:43:1f:
         bd:0d:a2:cc:d8:92:7d:84:c4:d0:d6:bf:fa:2c:d1:ec:e2:17:
         9c:90:f3:9b:d6:89:21:7e:ab:65:9f:01:56:73:f2:c4:92:17:
         d0:74:75:27:31:0a:a0:96:37:03:7d:6d:b4:6f:b1:7b:1f:8c:
         6e:3b:bf:24:e9:59:63:86:40:f2:78:b4:97:1b:8d:2d:c1:39:
         7a:51:69:c6:d1:66:3c:3f:dc:46:fa:e6:af:37:92:10:92:22:
         4f:66:18:45:39:f2:e8:f9:ab:4c:df:2e:0a:cb:ef:3a:26:02:
         3c:12:9e:43:46:62:4b:77:e2:4a:82:22:1b:4f:c4:e2:09:1b:
         7f:cf:54:8f:3d:5d:91:9e:0a:62:f3:ee:cd:da:19:a4:17:ab:
         95:d8:89:25:2f:b4:06:db:ba:2e:f2:e8:d4:38:f8:07:c3:30:
         df:16:d1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----