Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer
File:                     97E1948AB638C8EFF90F5297533F4B3540F047C3.cer (raw, json)
Hash identifier:          cu5Z3YW4HoB0/0uW8rKftP4/SCy3SrRkbX+RFzR5JtE=
Subject key identifier:   97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       595394807CFFC1D94FDD879A9DD1DC4BAB73D5A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Nov 2023 13:35:08 +0000
Certificate not after:    Wed 20 Nov 2024 13:40:08 +0000
Subordinate resources:    AS: 271247
                          IP: 200.106.212.0/22
                          IP: 2804:7880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:53:94:80:7c:ff:c1:d9:4f:dd:87:9a:9d:d1:dc:4b:ab:73:d5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 22 13:35:08 2023 GMT
            Not After : Nov 20 13:40:08 2024 GMT
        Subject: CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:75:dd:b2:a4:f6:ac:9c:b6:b3:9a:75:55:
                    c3:73:4d:0d:56:3d:28:64:e1:b2:69:13:9e:f4:84:
                    2a:8b:8f:33:3e:79:fa:c4:a8:37:c0:d2:1d:ca:d4:
                    71:a8:cc:12:6f:58:80:33:6d:68:6d:1d:08:a4:9c:
                    3e:84:21:ca:26:6d:cf:fe:24:b6:e8:dc:cd:8e:20:
                    97:e9:e9:6f:ff:b9:26:17:1c:44:1f:12:9d:84:a1:
                    e3:05:9b:94:b8:53:69:66:14:3f:82:f0:ea:9a:48:
                    fe:72:5e:87:5c:f4:b2:a0:0c:82:a8:8a:6f:a6:70:
                    d6:05:b1:82:a9:1f:ba:ad:e2:15:64:2d:a9:7a:6f:
                    26:dd:9e:b6:5f:f2:86:47:30:9d:19:29:c0:31:9a:
                    d6:8b:f6:d1:4a:d1:38:ac:5b:63:e9:3e:4f:71:71:
                    68:a2:19:eb:96:3c:63:e0:9f:98:af:10:1e:56:e4:
                    71:3b:14:36:33:5e:ca:5f:2c:9c:37:d5:4a:05:8d:
                    54:53:cf:cd:fb:4a:55:93:95:dc:6e:ae:a8:7e:9d:
                    b8:7d:92:9e:a5:9d:e3:d5:dc:c7:c8:aa:b1:a5:a5:
                    09:96:9f:b9:f4:02:06:68:b8:59:d5:72:5e:38:54:
                    b0:13:27:5a:45:b8:7a:d5:97:b0:9b:27:f0:c7:bf:
                    c9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.212.0/22
                IPv6:
                  2804:7880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271247

    Signature Algorithm: sha256WithRSAEncryption
         26:8e:5a:a2:cb:41:ce:08:16:37:08:60:99:2e:02:0b:3c:ef:
         4f:a6:7c:c7:fe:c1:38:bd:fa:a5:43:52:28:da:da:13:b6:86:
         db:94:11:3b:f5:91:c6:13:c0:f9:50:94:d1:20:2f:59:4b:e7:
         59:70:72:1d:07:0a:0e:da:40:29:f0:21:12:b0:9d:e1:7a:f3:
         92:7c:7d:4f:f9:29:0e:34:06:46:54:85:09:3e:8f:14:7a:49:
         99:a4:eb:c9:d4:a5:38:54:e3:fe:7d:3e:10:a2:de:c4:3c:b7:
         23:4c:0f:c0:99:b1:53:dd:eb:a7:24:b7:a3:3c:c9:d6:c9:f9:
         30:de:70:73:c4:c2:7f:be:66:fc:f8:5f:25:3f:ed:ab:cd:bc:
         b9:15:b9:92:70:51:ed:75:58:80:b8:e7:38:f0:a0:5b:04:e0:
         ee:7e:0a:fa:45:53:bf:fd:69:10:0f:e1:25:10:d6:60:c5:3f:
         1c:19:76:a0:cf:7e:de:30:b4:f1:df:ff:47:73:84:94:a7:c7:
         56:62:0e:ba:16:a0:6b:77:3a:3c:12:26:8c:de:1a:5b:d5:a0:
         80:83:ef:46:7a:a3:51:99:b8:92:8d:a8:3e:e0:f5:ec:8d:1e:
         75:76:25:0d:29:15:f3:3c:9b:25:0a:b7:8b:08:a3:07:3f:93:
         56:bd:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----