Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5.cer
File:                     A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5.cer (raw, json)
Hash identifier:          q3QOrRIKjj07vHy0oV2jDfSNJJLg+VXixS6aWQURId8=
Subject key identifier:   A4:A2:8C:FE:B5:0F:C9:3F:90:5F:F9:7F:3B:8E:3F:A4:F8:B6:F4:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       415D5B28D6E97D364B4309B562AB5AF4C58D398F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/0/A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 20:35:11 +0000
Certificate not after:    Tue 08 Oct 2024 20:40:11 +0000
Subordinate resources:    AS: 263120
                          IP: 177.92.144.0/21
                          IP: 2804:1710::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5d:5b:28:d6:e9:7d:36:4b:43:09:b5:62:ab:5a:f4:c5:8d:39:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 20:35:11 2023 GMT
            Not After : Oct  8 20:40:11 2024 GMT
        Subject: CN=A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:73:d7:42:8b:33:d6:f6:d2:39:cd:7b:21:07:
                    79:e6:ee:6e:99:25:6f:8d:a7:30:69:cf:87:12:af:
                    ea:13:85:d1:93:66:13:0a:61:46:80:90:0a:6d:a3:
                    6e:50:ca:f5:db:ef:7e:69:e6:99:a5:b1:0c:b5:68:
                    80:5b:14:7e:b6:29:25:a2:bb:33:6c:92:bf:16:32:
                    53:4f:e9:da:24:08:e6:7b:38:42:fd:9e:cb:3b:3c:
                    67:cb:eb:fe:87:bb:4b:b1:49:9b:0a:3f:97:ae:20:
                    76:2b:da:38:34:93:74:4d:44:06:6f:e1:e5:2d:da:
                    c6:7c:bb:52:aa:0c:7d:aa:df:7e:e1:8b:cf:33:24:
                    80:35:d2:1c:15:4f:e8:a7:7d:aa:07:8f:d7:5a:cb:
                    71:3a:fc:22:d3:44:ad:77:c0:a2:70:7e:75:66:6a:
                    99:33:d1:b4:c1:b2:38:8f:9b:10:49:2e:ef:fe:9b:
                    c7:bb:ba:db:87:68:5c:51:93:b9:47:5b:fe:7b:2d:
                    b8:2b:0b:dd:f3:0f:0b:7a:c9:74:c8:09:cb:fc:d6:
                    1b:03:4b:63:4c:fd:79:77:b5:ba:9f:01:02:d7:2b:
                    0a:79:5a:bf:a4:e9:53:a1:e5:4a:6b:1e:a1:58:e1:
                    f7:ac:a0:6c:76:21:26:08:ab:84:30:2c:31:4c:c8:
                    8a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:A2:8C:FE:B5:0F:C9:3F:90:5F:F9:7F:3B:8E:3F:A4:F8:B6:F4:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/0/A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.144.0/21
                IPv6:
                  2804:1710::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263120

    Signature Algorithm: sha256WithRSAEncryption
         49:3d:1a:df:02:57:1d:3d:7a:8d:fd:19:fe:71:67:0f:2e:65:
         42:6e:c3:83:94:9a:f1:5a:01:f7:b8:c3:e6:5e:ba:9a:3b:8c:
         78:29:5f:7f:51:2e:2d:79:5e:50:54:4d:fc:16:80:4c:c6:ec:
         b0:fc:b2:4f:d1:ba:31:18:34:5a:83:55:ee:ba:df:89:69:83:
         90:45:91:24:53:80:5c:f1:e0:c7:64:e2:1c:bf:55:66:69:c5:
         93:4a:58:dd:ca:f3:c4:d7:8c:bf:a2:21:e6:ae:5c:4a:7b:ec:
         3e:69:9a:89:81:2f:13:39:dd:35:5d:6c:2c:a3:fb:2a:0f:f2:
         d1:1a:1a:e0:6d:52:0b:e4:0e:63:b2:ba:63:b6:21:e8:d4:bc:
         ab:2f:05:60:d0:43:52:12:9b:f0:6d:54:6f:78:5d:30:18:d4:
         78:5b:bf:31:d6:e4:02:ca:50:a6:c3:bb:4f:bf:be:4c:74:bc:
         a9:22:8e:69:f2:60:eb:32:f3:20:b3:93:24:af:13:59:af:3c:
         f0:70:03:22:db:f3:53:5c:76:d5:51:ad:90:97:73:99:0b:cc:
         46:c3:bf:b0:cf:4d:d0:02:12:d2:f6:86:a5:26:5b:24:1b:f4:
         0d:51:e0:ae:fc:61:33:af:61:94:ae:78:88:39:66:96:3c:66:
         81:3d:3b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----