Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9962126DEF2432BE442D9A04B4049871B8BD2BD9.cer
File:                     9962126DEF2432BE442D9A04B4049871B8BD2BD9.cer (raw, json)
Hash identifier:          3At8VW7BV8Tq/fS/ZjMt0xPT/ryv00obacGno3ocfhE=
Subject key identifier:   99:62:12:6D:EF:24:32:BE:44:2D:9A:04:B4:04:98:71:B8:BD:2B:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3642CE0D008F23C3393BD6AEB8914D3E190D333E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/9962126DEF2432BE442D9A04B4049871B8BD2BD9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jul 2023 17:37:49 +0000
Certificate not after:    Mon 22 Jul 2024 17:42:49 +0000
Subordinate resources:    AS: 265160
                          IP: 167.249.108.0/22
                          IP: 2804:2b90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:42:ce:0d:00:8f:23:c3:39:3b:d6:ae:b8:91:4d:3e:19:0d:33:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 17:37:49 2023 GMT
            Not After : Jul 22 17:42:49 2024 GMT
        Subject: CN=9962126DEF2432BE442D9A04B4049871B8BD2BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6b:75:46:6e:a0:d0:90:84:5c:16:1a:6c:32:
                    8d:1b:e4:48:35:29:ea:8c:55:16:a1:8b:8e:6c:bd:
                    db:b4:e0:70:00:c4:5c:01:9c:1a:52:1f:a3:61:2f:
                    03:9e:41:9e:06:03:cc:79:da:d3:26:46:cf:1e:df:
                    34:70:47:c5:31:dc:ca:8e:3b:b8:d5:4f:ff:ed:b6:
                    67:8e:4a:89:e5:d7:98:2c:4b:c8:dc:73:fd:d3:2e:
                    01:d1:ae:45:a7:8f:08:e4:bf:6f:f0:d2:dd:6f:62:
                    b7:d8:e4:fc:62:d9:a0:82:b8:24:b7:cd:a9:11:95:
                    c0:f4:ee:ca:8f:03:fd:cc:44:3e:9f:82:3f:10:24:
                    71:3c:56:d3:6d:9c:91:f2:d0:96:fa:0c:34:ae:ca:
                    a3:9f:1b:20:9f:45:ca:f5:45:7a:07:3a:5e:28:a7:
                    36:1f:fb:f5:ad:1a:22:3a:67:ae:72:f0:f7:6b:b2:
                    8e:20:0a:d5:c0:f0:90:a7:71:05:f7:4e:22:61:51:
                    be:90:65:07:fa:2f:26:db:63:30:47:e2:a3:93:b7:
                    22:a6:84:df:d2:07:93:18:99:e5:5a:2f:e2:36:1c:
                    bc:fa:a5:91:bc:3c:b2:bb:28:b0:e1:64:29:32:57:
                    b2:da:ff:e4:5a:61:2e:b1:33:8f:6b:79:17:67:07:
                    99:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:62:12:6D:EF:24:32:BE:44:2D:9A:04:B4:04:98:71:B8:BD:2B:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/9962126DEF2432BE442D9A04B4049871B8BD2BD9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.108.0/22
                IPv6:
                  2804:2b90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265160

    Signature Algorithm: sha256WithRSAEncryption
         65:15:9a:d2:65:16:75:9c:1d:0f:fc:c5:e3:cf:b0:02:fd:fc:
         a2:d5:99:b8:9d:60:a5:e2:82:c9:ee:82:ed:29:96:99:97:67:
         b0:07:d2:81:bd:30:ef:20:da:b3:30:f3:05:f7:36:d5:bf:fc:
         31:c3:98:6b:a1:7e:28:1f:ea:c8:d1:54:a2:20:81:e9:82:f1:
         da:ec:7f:98:52:a6:33:b0:41:94:d4:22:e7:70:1b:2d:f0:10:
         d8:a9:be:88:96:68:86:32:c5:15:b6:2e:23:17:43:30:dc:c1:
         a9:66:53:4f:26:d9:40:92:99:bd:cd:a2:6e:e4:09:75:4d:e3:
         b9:0f:46:7c:77:e0:ac:9c:78:03:98:ad:da:75:0b:79:9c:d3:
         96:56:8e:2a:5e:9b:e4:00:12:7d:52:80:3f:13:1d:4b:7f:f3:
         98:46:1b:a7:d9:fc:2f:d2:7a:71:d9:7d:da:44:46:b6:7d:d6:
         27:48:07:44:a5:94:8e:7a:61:77:ce:4b:4b:37:f2:52:5c:3d:
         04:33:c4:f6:8c:2d:7d:98:34:5a:b3:00:12:27:7d:38:11:c6:
         00:56:7c:29:28:88:e3:99:23:53:af:8a:f7:de:d1:2e:b0:10:
         0b:b2:75:0e:e1:b9:95:ab:99:0f:58:d9:ac:6d:e9:5c:4f:03:
         e2:9c:5a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----