Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer
File:                     8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer (raw, json)
Hash identifier:          Z4bWL9mCR6k+d3A6pGiVvrxW/OTrUFpTFgk7sAlcIdE=
Subject key identifier:   8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0701F711137C695CB8671DEB098FD11B13840617
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 20:55:11 +0000
Certificate not after:    Sat 10 Aug 2024 21:00:11 +0000
Subordinate resources:    AS: 269532
                          IP: 45.188.140.0/22
                          IP: 2804:6614::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:01:f7:11:13:7c:69:5c:b8:67:1d:eb:09:8f:d1:1b:13:84:06:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 20:55:11 2023 GMT
            Not After : Aug 10 21:00:11 2024 GMT
        Subject: CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:21:b6:95:32:ba:7e:73:4e:f3:e3:62:71:
                    11:3d:15:8e:47:bb:0d:22:7f:f3:bf:cb:5d:a9:b6:
                    5b:0e:97:4d:c8:a6:72:94:c6:d0:62:6c:6d:2b:24:
                    eb:55:2a:c4:66:a5:e6:22:2c:52:28:0b:2b:66:ce:
                    f9:7c:4b:1e:15:0c:40:f8:9e:bd:65:bd:9d:a7:db:
                    56:23:b2:98:c3:38:b6:ea:68:56:06:df:f6:0e:94:
                    f8:d7:31:4c:57:66:77:5b:2e:bd:54:da:d4:5c:e8:
                    a1:6c:b5:c0:da:c0:11:30:5c:cb:e5:1a:d6:dc:1f:
                    03:fa:ea:d1:8c:87:50:77:5d:40:96:17:f8:50:1d:
                    47:3b:37:20:f6:6f:8a:06:22:b1:42:53:73:67:1f:
                    46:bc:a0:c3:40:62:e0:52:06:04:48:f5:17:3a:13:
                    9c:13:4f:2d:f8:d6:58:a4:95:66:a9:8c:c1:ab:25:
                    32:df:89:62:61:94:4b:c5:f2:59:f4:79:03:b6:b3:
                    bc:dd:65:fe:06:58:c7:42:81:0e:1b:91:02:35:7d:
                    db:63:6e:5f:1c:b3:3d:9a:b3:df:18:8e:9d:4c:a5:
                    52:1f:e5:2e:71:38:29:c3:db:c2:bd:fc:0e:62:a3:
                    60:51:46:62:18:a0:f2:71:57:63:35:c8:08:10:02:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.140.0/22
                IPv6:
                  2804:6614::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269532

    Signature Algorithm: sha256WithRSAEncryption
         1f:8f:a9:b8:9f:f0:30:ac:66:1c:47:fa:83:48:63:36:d9:a4:
         6b:ad:09:39:82:ee:37:f0:f8:6a:f4:03:44:4a:e3:58:4e:97:
         2c:dc:59:b2:46:36:27:67:a7:2d:ad:47:37:c1:4e:18:c4:90:
         9a:4f:ed:f8:3c:e9:6a:dd:6c:b2:1c:04:af:7e:aa:1e:37:b3:
         d8:e3:87:ee:1b:04:52:6e:e5:98:d3:69:f7:48:80:c2:e2:42:
         a6:77:2e:a4:e7:86:94:94:f7:6d:f7:fc:cb:bd:79:5f:b1:f9:
         7c:9d:ee:ca:4a:b0:75:bc:17:7c:06:a6:8e:2b:b8:5a:e7:97:
         2e:5c:f0:0d:31:01:34:8d:89:21:e5:02:e3:a6:30:b0:9b:30:
         50:18:2b:ed:78:b5:2e:68:10:1c:4e:93:b6:f0:8f:bb:55:46:
         c9:1d:d6:c3:ce:0b:82:b3:21:23:07:1f:9a:2f:82:d5:d4:6c:
         50:12:0a:23:d1:2f:8b:b5:a2:1e:b1:8f:48:d1:f0:07:01:e8:
         31:7a:02:61:f5:44:5d:43:ee:a3:84:3f:e7:c0:c3:4b:31:f7:
         53:67:4e:ef:96:01:cb:75:c6:df:18:ae:51:2f:cf:e0:38:8e:
         6b:a6:45:6d:54:ef:fb:97:97:2d:b2:89:a9:3d:05:b5:37:29:
         12:3e:9b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----