Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A45D3989DF644CDEF7512BADAAAB0091F844EA06.cer
File:                     A45D3989DF644CDEF7512BADAAAB0091F844EA06.cer (raw, json)
Hash identifier:          TyPX1FUbMLcCOW6a31MILzEMe0jFdhE3CfAW0pYkaRo=
Subject key identifier:   A4:5D:39:89:DF:64:4C:DE:F7:51:2B:AD:AA:AB:00:91:F8:44:EA:06
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1336C334A17708253A8B6EFB5EABF0ED588DEA7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/A45D3989DF644CDEF7512BADAAAB0091F844EA06.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 05:09:36 +0000
Certificate not after:    Tue 27 Aug 2024 05:14:36 +0000
Subordinate resources:    AS: 270904
                          IP: 189.84.104.0/23
                          IP: 2804:7340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:36:c3:34:a1:77:08:25:3a:8b:6e:fb:5e:ab:f0:ed:58:8d:ea:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 29 05:09:36 2023 GMT
            Not After : Aug 27 05:14:36 2024 GMT
        Subject: CN=A45D3989DF644CDEF7512BADAAAB0091F844EA06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:94:14:1a:36:0f:3c:f7:a9:1e:99:2e:51:
                    55:75:55:bf:e0:35:f4:5c:8e:c5:00:83:50:d1:61:
                    34:a7:92:87:c1:e9:ba:85:23:39:ca:30:6a:63:30:
                    cb:db:d8:0c:9f:23:3f:07:e7:7a:b4:38:1b:e8:96:
                    f6:f1:5f:95:25:c4:62:20:73:55:d9:38:c8:6e:5a:
                    45:54:e5:79:b7:01:c6:96:15:83:b6:28:35:06:55:
                    61:4a:32:cd:dc:e2:21:9c:11:db:05:60:30:a3:b1:
                    fe:69:1e:1b:30:9f:df:97:56:0a:8e:c0:73:a8:3c:
                    04:bb:2c:ca:c1:fa:ee:00:4d:98:26:af:01:fd:96:
                    8f:34:b3:f4:4e:fb:55:e2:9e:bb:ad:1c:19:17:3d:
                    30:86:b1:bc:b5:87:2e:16:8c:09:f3:17:9a:48:35:
                    50:8e:91:fb:66:dc:3a:7f:81:7f:89:9b:76:d1:d7:
                    8b:82:37:be:c2:f1:03:e9:dd:cb:14:68:64:6d:c3:
                    be:fe:9d:08:75:a0:62:a8:0d:a0:3b:b1:71:ee:e3:
                    2e:ee:83:9d:4b:25:07:28:05:2d:82:2e:42:57:7c:
                    8d:a8:6c:e8:4f:c3:35:86:4e:09:2f:2b:e1:03:f0:
                    36:4c:3c:06:35:b4:f6:de:08:d7:5f:7f:18:47:5e:
                    b1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:5D:39:89:DF:64:4C:DE:F7:51:2B:AD:AA:AB:00:91:F8:44:EA:06
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/A45D3989DF644CDEF7512BADAAAB0091F844EA06.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.104.0/23
                IPv6:
                  2804:7340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270904

    Signature Algorithm: sha256WithRSAEncryption
         68:d1:e7:14:52:3d:75:41:39:7d:76:e1:45:5e:7a:52:7d:19:
         31:67:e9:68:85:af:ac:87:5c:75:16:4d:84:a4:c4:8f:61:71:
         5b:69:fd:61:fc:69:48:2a:1e:5c:45:11:82:c4:42:5a:75:07:
         d5:07:70:8c:79:8a:f1:56:6a:59:68:db:70:35:54:c4:5f:34:
         d5:34:7f:6e:1e:2d:5b:80:28:d2:d8:45:80:ad:71:34:c3:37:
         f1:67:35:ae:fc:5d:91:8d:ac:b4:10:eb:2d:d3:54:45:5d:f0:
         ab:29:35:66:7d:25:2e:68:eb:f1:a5:85:43:89:e1:8e:e0:b1:
         56:4d:f8:42:6b:2f:6a:ec:81:57:6b:3c:f2:c0:01:1b:87:98:
         42:4d:e3:71:25:f6:03:53:8f:81:59:af:fc:f1:1e:24:7e:b1:
         99:24:01:4d:2e:f9:9b:18:94:8e:ef:62:54:e0:c7:26:92:f6:
         91:74:68:b0:72:d8:33:fa:9d:59:f8:01:32:1e:1d:28:d5:79:
         6e:0c:e0:46:a1:a7:94:07:0a:74:b6:55:ba:86:94:e8:f0:18:
         a2:8d:2e:3d:62:ae:c9:34:7a:ca:d4:f8:ad:51:96:76:ef:03:
         a4:38:c9:05:d7:c4:a7:ef:5b:74:06:7f:1f:7f:44:98:9d:ab:
         cd:21:d5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----