Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.cer
File:                     8545ED852E6BA88695268C3F3DB0FF2B57345AAD.cer (raw, json)
Hash identifier:          J/wrzZ1iOo4ZQzEam/gpsDsmdQZ75H+zTgShj3oZacM=
Subject key identifier:   85:45:ED:85:2E:6B:A8:86:95:26:8C:3F:3D:B0:FF:2B:57:34:5A:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       73C9CC7D27BABD6F24E869C755A9067840E91215
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 18:07:43 +0000
Certificate not after:    Wed 19 Mar 2025 18:12:43 +0000
Subordinate resources:    AS: 265011
                          IP: 170.84.148.0/22
                          IP: 2804:3164::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c9:cc:7d:27:ba:bd:6f:24:e8:69:c7:55:a9:06:78:40:e9:12:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 18:07:43 2024 GMT
            Not After : Mar 19 18:12:43 2025 GMT
        Subject: CN=8545ED852E6BA88695268C3F3DB0FF2B57345AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:cf:ee:e7:36:54:7f:54:7a:e8:5f:6e:2b:
                    c4:22:d0:2e:ec:aa:21:01:f6:54:32:99:bf:c8:e0:
                    1f:58:a6:6b:01:d3:81:3e:b8:39:20:e4:98:08:6f:
                    8b:c8:21:74:f0:7f:0c:71:d1:51:7b:82:f0:3d:bc:
                    fd:80:f0:2b:fe:d8:03:ab:04:92:8d:07:f8:2e:f4:
                    a2:18:42:cd:e8:3b:60:9a:aa:37:07:cd:95:1d:36:
                    4f:45:a1:d2:e0:19:54:af:80:6d:e7:41:01:ff:af:
                    9b:3b:8a:93:13:73:c3:96:d3:c8:89:95:fa:77:21:
                    8f:e8:9b:8b:a4:d8:c9:ec:5d:76:e8:14:1b:f3:f1:
                    4d:9d:6c:0a:4f:39:46:f0:8c:54:fe:e2:f0:f3:de:
                    5b:68:7c:43:bc:40:c6:b5:c0:60:2b:a3:65:6e:2e:
                    a1:a3:2e:8e:6c:2a:ac:ac:0b:0c:4d:04:f9:b9:d4:
                    7f:d0:25:96:85:1f:fc:4e:6f:d3:3e:45:95:b2:12:
                    47:7f:fb:7e:b2:e1:f5:11:e7:33:c5:a8:fb:3b:0e:
                    9c:ab:18:64:46:55:df:d4:66:9a:56:48:99:2b:be:
                    4f:fa:a2:b9:74:83:6d:42:11:29:80:bd:ab:47:3c:
                    7e:ba:13:36:b6:01:d0:59:54:4d:09:f1:3e:19:ea:
                    4b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:45:ED:85:2E:6B:A8:86:95:26:8C:3F:3D:B0:FF:2B:57:34:5A:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.148.0/22
                IPv6:
                  2804:3164::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265011

    Signature Algorithm: sha256WithRSAEncryption
         96:e6:02:41:11:49:b6:52:d5:dc:2c:64:09:6d:a5:fa:d9:4c:
         46:e8:03:f1:9c:83:e0:56:1a:bd:1f:90:bd:ad:9d:4d:f9:5e:
         c2:a7:5a:d1:8c:c0:68:70:a1:4d:8c:e4:78:a9:38:c9:53:d8:
         c0:06:9a:98:f3:fb:ff:fd:8d:08:cc:e6:06:aa:35:ab:d2:32:
         84:f4:1b:65:03:e9:90:67:8f:44:59:0a:9d:51:bd:f7:1d:84:
         64:e0:24:1f:f5:6e:b1:f9:82:70:f7:e6:2b:8f:a9:35:4e:18:
         c3:22:3e:e9:c3:a9:97:34:4e:34:5f:72:d3:bf:7e:55:86:3d:
         d0:b8:2f:31:57:c5:27:54:8f:30:7e:cc:06:71:da:49:e7:e7:
         9f:6b:c8:67:6c:1d:35:5b:9a:8b:ba:3c:a3:74:08:b7:4d:59:
         51:7a:85:41:20:9f:5d:a4:23:3f:b5:b8:9f:63:9e:27:3b:fe:
         36:7a:f0:cc:22:3a:b8:8d:03:cf:8b:9f:49:f9:b8:64:19:d4:
         28:28:52:48:6a:6f:60:6d:e5:d3:ad:bc:cf:1f:43:8c:b3:9f:
         5f:8d:45:f9:c7:8b:ad:20:b0:b8:7a:0e:88:1d:3e:b0:92:ab:
         3d:40:91:6b:64:03:b4:9c:0f:66:51:5b:c7:6b:39:6f:a5:fd:
         d0:82:cf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----