Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/82F01FED074CD2FF90B488B5FCD5528CBC2D920C.cer
File:                     82F01FED074CD2FF90B488B5FCD5528CBC2D920C.cer (raw, json)
Hash identifier:          Sxzkv9VOV5anEkJKdE4iMH9D65keE1JQWGgamoB9dfs=
Subject key identifier:   82:F0:1F:ED:07:4C:D2:FF:90:B4:88:B5:FC:D5:52:8C:BC:2D:92:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2AB7E479AD6F43EBCB17797BC5042E2A6A260686
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/0/82F01FED074CD2FF90B488B5FCD5528CBC2D920C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 12:36:25 +0000
Certificate not after:    Mon 27 Jan 2025 12:41:25 +0000
Subordinate resources:    AS: 271453
                          IP: 181.174.244.0/22
                          IP: 2804:7bc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b7:e4:79:ad:6f:43:eb:cb:17:79:7b:c5:04:2e:2a:6a:26:06:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 29 12:36:25 2024 GMT
            Not After : Jan 27 12:41:25 2025 GMT
        Subject: CN=82F01FED074CD2FF90B488B5FCD5528CBC2D920C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:e2:cc:63:88:4d:4c:74:45:b1:ae:f7:4f:
                    b4:d1:ff:e9:45:1b:23:1e:d5:d2:77:79:f9:f4:16:
                    7e:bf:16:e0:53:37:d3:0a:38:18:15:8f:fa:29:36:
                    f3:79:53:14:a4:1c:f0:a6:95:c2:4b:b9:a8:5a:a9:
                    89:3a:ca:55:8d:e0:ab:85:35:c8:2f:71:3d:e3:8e:
                    d9:4a:de:3b:b8:1b:f7:d7:3a:93:74:5d:22:b3:36:
                    da:df:3b:68:3c:f9:87:df:c9:58:08:68:bb:a6:8c:
                    1a:57:01:01:02:d7:48:66:a1:d1:0c:b7:eb:8e:b7:
                    00:b9:e3:46:f0:9c:e0:64:2f:2f:6a:5b:68:be:e9:
                    26:b9:a0:92:a9:37:5d:71:03:f5:57:d0:9d:2b:1e:
                    e0:54:13:c1:71:74:db:4d:eb:da:33:51:22:06:aa:
                    84:eb:43:70:b0:c7:64:01:7c:94:d9:f5:f7:41:c5:
                    26:e2:d9:38:3f:3c:29:66:ed:94:91:57:30:de:53:
                    9a:1c:b7:8b:03:16:88:0b:ae:24:83:24:8f:77:48:
                    dd:57:aa:40:71:d8:13:25:78:d1:43:a6:72:1b:b2:
                    7c:3b:27:15:ab:6e:0b:02:2d:ea:a5:70:42:4d:a0:
                    b7:2e:e4:e0:57:ac:c2:5c:f5:0f:9d:dd:c5:34:9a:
                    d6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:F0:1F:ED:07:4C:D2:FF:90:B4:88:B5:FC:D5:52:8C:BC:2D:92:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/0/82F01FED074CD2FF90B488B5FCD5528CBC2D920C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.244.0/22
                IPv6:
                  2804:7bc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271453

    Signature Algorithm: sha256WithRSAEncryption
         95:53:15:b0:db:e9:b5:ca:0d:5b:a4:cf:5c:9b:c4:7e:73:1b:
         c8:c2:b7:f8:7f:cd:66:9e:28:17:ef:c3:41:47:b7:b4:88:1b:
         8a:af:71:5f:2a:58:3c:8d:34:22:94:a6:09:e1:d8:f5:f5:a8:
         74:b2:72:1f:57:20:7a:7e:29:ba:de:cb:ad:17:59:09:aa:c1:
         2d:29:4d:cf:4a:27:4c:68:4e:a7:25:ec:47:e8:9b:bb:01:1c:
         07:5e:c3:dd:a6:66:62:38:86:ea:c9:25:d8:3c:5d:23:2e:3c:
         44:51:b0:4a:e9:4a:8b:52:42:0f:41:8f:70:54:04:c6:f2:d7:
         d0:ee:73:0b:eb:a9:83:5c:fb:59:46:c1:0f:1b:da:0c:c0:29:
         1e:e9:57:f2:c0:8c:0d:04:cb:93:b1:ee:82:9a:42:89:6b:dd:
         f9:99:44:6d:64:79:51:46:e8:43:2d:b1:d8:1c:59:f4:43:c2:
         67:c6:c8:04:97:3f:5f:77:72:3a:5f:e1:50:07:1f:c6:59:21:
         2e:bc:78:36:b2:88:29:b7:99:e5:66:30:93:5a:ef:df:c2:b1:
         e8:71:a8:06:bc:3c:1b:44:38:94:75:6e:e9:a5:be:97:4f:aa:
         ba:04:3f:15:f2:0e:9a:93:39:8c:d4:ff:e1:c8:2c:2b:f2:1a:
         15:fc:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----