Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.cer
File:                     85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.cer (raw, json)
Hash identifier:          tVDt0JKO1xOWHvda3GzWrVHl/Shk0XDVIfZwvu6KoEA=
Subject key identifier:   85:19:2C:5F:A8:56:A2:0D:36:DB:D2:15:5B:9F:94:D2:C9:4D:FA:3F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58D08C16091C4FE7DAC03E753E082537E48B0BDF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 19:14:19 +0000
Certificate not after:    Mon 16 Dec 2024 19:19:19 +0000
Subordinate resources:    AS: 270382
                          IP: 190.111.128.0/22
                          IP: 2804:6b28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d0:8c:16:09:1c:4f:e7:da:c0:3e:75:3e:08:25:37:e4:8b:0b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 19:14:19 2023 GMT
            Not After : Dec 16 19:19:19 2024 GMT
        Subject: CN=85192C5FA856A20D36DBD2155B9F94D2C94DFA3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:df:79:04:e3:37:ef:4f:69:26:7f:26:a5:
                    08:1a:05:db:75:85:64:19:07:88:04:4e:03:fc:19:
                    9b:f7:0d:3f:40:67:a6:c8:ed:40:ad:0b:da:61:5e:
                    fb:30:dc:14:b3:4b:4e:a3:0b:fa:79:82:df:2c:59:
                    3e:74:dd:92:21:dd:9a:88:d5:6f:cc:98:cc:a1:7a:
                    13:0c:0b:05:a9:f8:d7:e3:ff:85:16:fd:2f:20:83:
                    ab:77:2a:5c:54:a9:b4:dd:99:78:94:e5:6d:7c:62:
                    ac:51:4f:53:70:57:47:3f:87:1a:4f:62:cc:9a:47:
                    b1:52:a5:23:74:8c:84:64:3f:85:b5:5e:b6:88:17:
                    68:61:f5:db:0a:fb:7d:f1:8e:00:81:71:7c:27:5d:
                    86:90:a5:2d:44:a1:53:50:1d:6a:b4:15:81:5e:e9:
                    65:9d:ed:1f:0d:80:8c:a7:1a:01:48:8d:11:91:d9:
                    21:18:be:ed:05:d1:d2:ec:b1:fc:66:fe:95:10:f3:
                    95:6c:9f:4b:1f:5a:3e:f5:ef:37:a7:54:2b:22:15:
                    0b:58:c7:51:d5:7f:42:93:64:35:3d:b5:10:91:45:
                    bb:d2:2f:4d:4e:12:23:b9:ad:70:dd:fc:2e:4f:60:
                    d8:e6:56:e7:a0:a6:64:00:c6:fc:61:99:ba:f0:ea:
                    84:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:19:2C:5F:A8:56:A2:0D:36:DB:D2:15:5B:9F:94:D2:C9:4D:FA:3F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.128.0/22
                IPv6:
                  2804:6b28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270382

    Signature Algorithm: sha256WithRSAEncryption
         54:16:c7:d8:fd:d9:1a:b1:09:90:d7:d5:80:66:6e:14:d3:e4:
         e7:4f:a4:f7:1f:43:33:eb:38:89:26:9c:a9:4c:e8:b7:06:aa:
         ed:98:8c:78:7d:6f:1a:6d:a3:06:83:65:ef:a9:c9:4f:ed:ee:
         b7:ef:f4:00:a2:6b:fe:7c:04:ee:5c:0f:82:93:cb:b8:0c:5a:
         fd:7e:d0:27:0b:59:fa:94:bb:ef:e1:d7:06:97:d4:17:12:8b:
         e5:a6:51:4a:e0:bc:aa:15:65:00:0e:e7:34:d0:ad:6a:ef:18:
         df:9b:ae:43:86:ff:df:32:a9:bf:6a:7d:02:93:13:83:fa:15:
         95:c5:5a:2e:10:8c:90:41:4f:3b:9b:23:62:01:ce:3a:83:66:
         d7:7d:15:e5:a3:78:ba:83:5a:68:4f:2a:39:46:ad:5f:4d:29:
         a9:0e:a7:c8:51:56:ce:e3:3c:dd:f0:4f:8f:fb:6e:13:85:d3:
         6c:dd:e4:97:d5:6f:a7:48:a7:52:da:af:0a:1d:1b:cd:c0:04:
         50:c1:87:f2:07:dd:24:cf:35:4d:90:2f:a6:1c:ee:e2:6e:d9:
         ed:29:d4:9b:cd:58:13:d6:52:bc:5b:7f:1c:84:8b:ff:47:4b:
         2f:e9:96:d0:d8:b0:5c:09:36:37:86:04:44:e2:9a:7e:f3:9a:
         98:1f:55:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----