Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A4508218C1958F203B529CBF3C6F0D157AFCD08.cer
File:                     8A4508218C1958F203B529CBF3C6F0D157AFCD08.cer (raw, json)
Hash identifier:          yxCEHMq5c542q7A79M1Rqngnb6pf7pprZw5j4w+6zuc=
Subject key identifier:   8A:45:08:21:8C:19:58:F2:03:B5:29:CB:F3:C6:F0:D1:57:AF:CD:08
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3994B1AAC70DB42DF049CD33F2AFEFF53D2E9FD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/8A4508218C1958F203B529CBF3C6F0D157AFCD08.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 18:49:43 +0000
Certificate not after:    Wed 15 Jan 2025 18:54:43 +0000
Subordinate resources:    AS: 269136
                          IP: 45.180.136.0/22
                          IP: 2804:5ff4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:94:b1:aa:c7:0d:b4:2d:f0:49:cd:33:f2:af:ef:f5:3d:2e:9f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 18:49:43 2024 GMT
            Not After : Jan 15 18:54:43 2025 GMT
        Subject: CN=8A4508218C1958F203B529CBF3C6F0D157AFCD08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:06:5b:3b:62:18:8a:87:4f:d0:ee:9d:b3:02:
                    8c:b6:7d:2f:77:28:f3:d3:3c:40:cb:f3:06:ce:86:
                    32:49:91:b6:7a:00:b6:46:53:6b:1e:19:7d:87:9b:
                    10:c3:00:68:a3:af:6b:c6:d4:96:50:5c:38:fc:8c:
                    89:c9:58:cd:5b:f2:ae:d8:ec:fc:ee:13:1c:6b:a1:
                    21:af:e6:01:74:03:86:2f:4c:cd:81:e6:09:2c:c3:
                    68:3a:c9:e7:99:f8:3b:ce:b7:17:9d:7f:82:b8:55:
                    9e:79:15:bf:1c:a1:04:26:70:5c:25:83:cc:e1:03:
                    09:17:32:e4:81:0c:17:63:15:c6:01:56:a1:8d:cf:
                    44:f6:6c:e8:81:f2:c8:89:42:69:67:9f:4f:cb:e8:
                    b7:0e:1b:97:c7:1c:bb:43:17:99:a4:4d:f0:31:2c:
                    4f:74:eb:ff:de:f9:a6:0c:14:eb:ec:2d:46:a9:26:
                    78:d5:ee:7a:13:c6:f1:dd:4c:70:66:6d:13:bb:02:
                    74:2a:30:47:7e:9f:c4:16:7d:a8:0c:dc:84:b4:1d:
                    3b:21:22:2e:6a:b7:cf:2e:d0:3f:f0:81:36:2b:93:
                    f6:8d:bf:ea:8c:f1:e3:6e:b5:82:f2:b6:77:c6:e4:
                    9d:b4:27:eb:34:34:74:38:3f:58:bc:8e:81:84:04:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:45:08:21:8C:19:58:F2:03:B5:29:CB:F3:C6:F0:D1:57:AF:CD:08
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/8A4508218C1958F203B529CBF3C6F0D157AFCD08.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.136.0/22
                IPv6:
                  2804:5ff4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269136

    Signature Algorithm: sha256WithRSAEncryption
         4c:3a:6e:ee:8a:80:80:84:ab:39:c0:da:7f:59:2d:78:ab:e4:
         b4:e4:ac:5d:c1:1b:60:c9:81:a1:9f:17:65:58:86:56:8c:33:
         99:3b:47:ff:4f:4f:02:82:87:8b:21:59:a8:bc:0d:01:d9:58:
         8f:2f:60:a9:ff:aa:a5:19:1d:29:68:4d:3d:7e:5a:a9:cf:f4:
         5f:39:d6:d7:f0:6a:da:62:2e:9a:7e:d8:0b:2e:c5:2c:82:8a:
         04:a3:d2:2b:c5:97:b8:5a:c0:ff:9d:09:e5:1c:0e:4a:94:f5:
         c5:be:17:47:f2:1e:ab:12:b9:88:f8:8d:dd:30:61:25:c4:79:
         1f:56:14:e7:54:4f:45:16:05:2b:a3:27:ec:d7:95:18:21:aa:
         b4:fb:41:a0:70:63:af:63:06:51:94:12:a6:30:14:fe:ce:63:
         61:22:2b:f0:74:51:f3:27:58:22:9c:75:c1:d3:69:8d:56:0d:
         20:8c:e5:b1:ec:4e:20:fc:fc:73:e7:8f:c4:0e:6a:88:13:b7:
         2b:2d:7c:4a:f5:06:c3:6e:0e:8c:18:79:27:2a:56:fc:ce:34:
         29:19:d9:9e:f1:c9:be:aa:45:34:16:b7:98:70:fa:cd:e7:d0:
         97:1a:c6:64:67:8a:2f:f5:48:a1:a6:d6:60:0b:8e:be:e4:7f:
         af:71:c6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----