Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.cer
File:                     8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.cer (raw, json)
Hash identifier:          O9M+D+0OeqH2H0Gjkc2d8x9/D4z+UET9fEEFMZplYA8=
Subject key identifier:   8A:5C:AC:02:20:F1:C0:DF:5B:C8:EF:97:E5:53:4F:F3:58:71:76:18
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       07733320AA842704D10AF0D00AF53575472491C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Dec 2023 17:15:11 +0000
Certificate not after:    Thu 05 Dec 2024 17:20:11 +0000
Subordinate resources:    AS: 267039
                          IP: 45.228.4.0/22
                          IP: 2804:4738::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:73:33:20:aa:84:27:04:d1:0a:f0:d0:0a:f5:35:75:47:24:91:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 17:15:11 2023 GMT
            Not After : Dec  5 17:20:11 2024 GMT
        Subject: CN=8A5CAC0220F1C0DF5BC8EF97E5534FF358717618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4f:94:45:c3:4e:41:11:83:e5:46:85:b3:f1:
                    8a:de:b5:32:81:48:17:6e:69:59:c6:c7:26:75:cf:
                    e2:36:39:02:9f:50:49:10:bd:36:b8:15:49:b5:59:
                    52:92:fd:c6:eb:fb:fe:f3:e0:d7:87:7c:eb:78:88:
                    c5:d1:f3:01:25:a7:61:71:54:75:84:51:0b:d6:1a:
                    d4:17:74:fe:d8:a0:8e:23:19:5f:0d:9a:30:a5:fb:
                    89:3d:6b:9a:48:ea:85:fc:42:99:a8:7a:52:78:c8:
                    56:34:c7:08:c9:8e:46:28:47:2d:10:f7:2c:a0:44:
                    84:62:03:57:00:53:3f:5d:dd:d9:0a:05:cb:5e:5d:
                    33:b7:23:9e:f1:8e:27:7b:c7:ee:eb:b0:a4:6a:2f:
                    27:0f:3e:37:9b:93:8b:19:53:ee:0c:cd:c8:3a:62:
                    22:fd:fa:22:43:9b:b6:5c:60:37:88:23:18:3a:8d:
                    1f:4c:78:44:9c:82:af:98:fd:bb:53:48:0a:e3:b8:
                    6d:40:91:f4:49:8b:af:8f:bb:96:83:79:20:64:fd:
                    91:0c:68:83:1a:c9:89:93:64:1d:dc:94:97:d8:31:
                    db:52:f6:a8:02:4b:52:b1:92:61:ce:53:64:b8:51:
                    6c:1c:be:5c:c7:93:38:f2:73:c0:da:3f:04:8b:2e:
                    68:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:5C:AC:02:20:F1:C0:DF:5B:C8:EF:97:E5:53:4F:F3:58:71:76:18
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.4.0/22
                IPv6:
                  2804:4738::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267039

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:25:4d:c7:ce:2b:14:2c:d5:33:c9:3e:60:d4:aa:6c:94:
         22:84:28:27:d2:db:68:f2:98:d1:9f:f5:cd:67:11:8f:43:82:
         60:52:b1:10:f2:9f:50:50:9f:c8:36:05:1e:00:91:84:72:f1:
         78:6e:8e:aa:ef:3d:bf:dd:c4:7d:48:a8:69:f9:11:67:36:3b:
         fa:13:0e:50:2a:99:64:6d:6c:6d:ad:16:3f:67:a8:4f:a0:84:
         49:19:f6:a6:92:a3:e3:89:6a:c3:26:eb:1c:c6:85:1a:95:a4:
         49:1a:8f:c2:90:3d:2f:f3:13:e4:f6:98:44:16:0d:cd:55:9b:
         a1:7c:90:f4:c2:b0:2a:4a:cf:1c:4a:cb:38:48:63:1e:97:a6:
         93:9f:90:fd:42:c8:ed:33:92:8e:6b:39:02:44:8a:12:0b:ee:
         61:88:fb:79:81:06:9c:3a:0a:db:9a:a8:fb:07:c1:f9:4d:0b:
         9b:6a:7f:6b:0a:a6:2a:8b:9b:29:7e:e4:cf:98:e1:af:b2:52:
         b2:69:96:1a:f4:08:36:dc:b0:6f:a7:20:b1:04:8c:67:e6:26:
         5d:d5:39:47:72:5a:72:60:ad:5f:a8:21:8b:fa:01:e6:7a:cf:
         ed:64:ab:28:05:ee:5f:5e:55:78:51:54:cc:48:29:3b:4b:8b:
         96:c7:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----