Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.cer
File:                     82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.cer (raw, json)
Hash identifier:          YigUFbBwEjP7+H6tsS+lm/dpMix9PGaP6wdUqrsc0uY=
Subject key identifier:   82:DA:F5:D1:4F:90:2F:8E:9F:28:B1:DC:F3:D9:90:C0:F6:84:40:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       718C8EADCE68B9FB3D5BF5902E0C613045E6DDD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 00:31:36 +0000
Certificate not after:    Wed 25 Sep 2024 00:36:36 +0000
Subordinate resources:    AS: 269362
                          IP: 45.184.240.0/22
                          IP: 2804:6374::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8c:8e:ad:ce:68:b9:fb:3d:5b:f5:90:2e:0c:61:30:45:e6:dd:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 00:31:36 2023 GMT
            Not After : Sep 25 00:36:36 2024 GMT
        Subject: CN=82DAF5D14F902F8E9F28B1DCF3D990C0F6844033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:60:d2:70:6e:78:0e:0d:3f:fe:37:04:eb:
                    5e:ce:c4:b7:1d:f3:75:2b:4a:a3:c4:6a:08:06:e2:
                    1a:c8:64:18:05:76:af:7c:0c:5c:42:5c:01:39:66:
                    22:61:e3:e8:bf:de:59:c2:be:ca:34:33:d5:ae:e7:
                    21:64:da:90:2a:9a:4d:2f:42:58:a2:f2:1d:5f:b6:
                    8b:13:68:97:75:34:3e:16:d9:81:c1:d9:ad:11:ed:
                    33:e0:ad:00:9d:06:b7:b2:a1:67:54:ff:40:63:c4:
                    df:17:7b:54:27:50:d6:f9:b5:7b:a4:0d:3b:c5:7a:
                    16:70:71:7d:83:19:2b:5b:cf:bc:5b:f0:ec:82:60:
                    48:a7:79:f6:d1:6d:cb:d6:77:8e:59:9f:c0:89:bd:
                    5c:98:df:a3:a2:e8:31:32:15:ac:1a:81:b8:7c:df:
                    a6:70:bc:2e:19:b6:44:78:77:b5:12:2d:cc:0b:70:
                    8e:60:2f:90:93:07:8f:82:96:6b:d4:66:c6:36:8f:
                    3d:50:b1:6e:ff:e3:dd:88:f9:62:6e:34:65:23:27:
                    53:18:a5:03:32:ba:72:03:09:c2:e7:20:c9:70:b2:
                    50:3c:57:f3:01:57:c4:fe:b2:f7:77:3a:af:01:28:
                    36:c4:79:4e:1a:8c:74:4e:0d:ae:c8:18:2a:67:ad:
                    2b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:DA:F5:D1:4F:90:2F:8E:9F:28:B1:DC:F3:D9:90:C0:F6:84:40:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.240.0/22
                IPv6:
                  2804:6374::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269362

    Signature Algorithm: sha256WithRSAEncryption
         36:92:8d:71:48:7f:ee:b6:59:a4:76:5c:6d:c2:94:c0:bf:4b:
         9b:49:26:e1:47:ea:66:dd:03:eb:a3:00:3f:1c:d7:fe:2e:19:
         17:bf:90:84:38:f8:d8:85:77:7a:a1:f4:a7:ba:63:a8:2a:e7:
         77:21:98:48:11:a9:33:6c:95:e0:5c:b9:23:f3:03:27:16:0b:
         36:1b:bc:d2:f1:16:0f:f7:15:f3:79:2f:d0:44:55:af:9b:2a:
         ab:91:3f:17:21:a1:6b:64:7a:46:41:42:9a:87:71:8f:15:a5:
         5e:97:46:bf:2e:16:51:9e:13:92:b6:47:68:61:9c:63:a7:29:
         e3:89:b4:db:f8:b0:3a:36:9f:ac:99:38:05:8d:f5:9b:34:51:
         57:1e:75:e0:44:26:2f:9d:f4:80:04:ab:7e:b3:c4:b1:42:17:
         4b:93:26:fd:33:51:f2:11:31:3d:c0:44:92:06:92:6b:fe:3e:
         44:01:08:ed:bb:ec:93:e9:ed:3b:3e:02:6b:7c:b6:ee:8b:f4:
         64:0f:93:df:45:5c:c4:b8:d8:de:a0:9d:72:bc:02:b7:09:79:
         a7:90:dd:c5:ff:51:b0:8c:b5:4d:0f:05:d7:09:5c:dc:e2:23:
         bd:b3:64:a4:8c:94:57:e2:a0:fc:27:78:42:2a:5b:13:66:99:
         33:15:48:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----