Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A646D371FC2C8E729B4DF2ED3A1475720567B384.cer
File:                     A646D371FC2C8E729B4DF2ED3A1475720567B384.cer (raw, json)
Hash identifier:          pUx/gHLb4bZTiXEKamOAF/zJ6WXQHUm17k8vxUmEO3w=
Subject key identifier:   A6:46:D3:71:FC:2C:8E:72:9B:4D:F2:ED:3A:14:75:72:05:67:B3:84
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C5ECC2FA064726A7EE668E8F87CC247A39C76A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/0/A646D371FC2C8E729B4DF2ED3A1475720567B384.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 21 May 2023 13:55:13 +0000
Certificate not after:    Sun 19 May 2024 14:00:13 +0000
Subordinate resources:    AS: 271538
                          IP: 179.63.112.0/22
                          IP: 2804:7d18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5e:cc:2f:a0:64:72:6a:7e:e6:68:e8:f8:7c:c2:47:a3:9c:76:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 21 13:55:13 2023 GMT
            Not After : May 19 14:00:13 2024 GMT
        Subject: CN=A646D371FC2C8E729B4DF2ED3A1475720567B384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:06:11:ea:85:a3:ed:a9:62:41:ba:52:ae:ac:
                    73:cd:c4:12:44:2b:80:47:bf:3c:05:69:8b:80:18:
                    31:22:f6:99:d9:3c:fa:da:6b:9e:5a:ec:c0:d8:c6:
                    00:c8:31:fb:0e:97:8d:15:d6:ec:2c:bb:b6:3c:2a:
                    f2:78:4c:54:91:cd:ff:61:e4:41:fe:83:46:32:8c:
                    46:1a:aa:0b:dd:e7:13:99:78:22:67:d6:1f:a2:c9:
                    15:3a:f2:c2:57:d5:be:7b:c3:1a:c7:a6:85:af:3f:
                    b5:ea:ed:c0:b8:ab:df:d8:90:ec:26:69:18:42:79:
                    ee:51:2b:61:7a:b9:1a:f0:95:47:a3:46:d6:14:01:
                    f5:f4:09:5f:db:fe:f4:b0:58:c4:48:35:50:36:6c:
                    15:10:ea:e7:f2:3a:60:85:d5:5b:2f:96:1f:7e:5f:
                    a9:3f:7e:ed:fa:56:7e:58:41:60:a4:42:1e:12:75:
                    f0:cc:c3:99:7e:2c:f5:8a:49:6c:4c:c4:98:b1:b5:
                    d4:29:e3:69:f3:db:cd:ed:76:88:e9:44:de:80:3c:
                    27:d8:6d:74:13:2f:4b:73:6c:a7:7d:1f:d8:df:9b:
                    ac:2b:a8:8c:8f:1a:8e:17:94:e2:3f:18:7a:78:0d:
                    db:fe:7e:77:eb:73:36:c2:cb:c8:bf:32:d9:78:9c:
                    71:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:46:D3:71:FC:2C:8E:72:9B:4D:F2:ED:3A:14:75:72:05:67:B3:84
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/0/A646D371FC2C8E729B4DF2ED3A1475720567B384.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.112.0/22
                IPv6:
                  2804:7d18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271538

    Signature Algorithm: sha256WithRSAEncryption
         40:6a:7b:52:76:fc:60:e3:34:a1:8e:b2:8c:ea:f3:23:b7:23:
         a9:f4:74:6d:2a:a7:2c:99:ed:52:bf:4d:77:2a:18:7a:e6:f0:
         3d:0b:f8:13:16:bb:08:ba:17:2c:1d:7c:9b:13:49:d7:81:1e:
         42:1f:c9:0a:b8:db:b1:a6:41:f5:2d:d9:74:25:ce:d8:b6:da:
         f7:d6:21:64:27:e8:40:42:79:5c:e4:d7:0d:e7:25:8f:4f:d6:
         5f:11:0e:e0:9c:12:0f:11:80:ce:2b:29:96:68:b4:e8:b2:ce:
         fd:de:ad:27:51:6a:5d:30:dd:59:df:f3:4c:27:be:9e:70:a9:
         e5:25:cb:85:82:41:89:2f:97:80:28:5e:2b:f8:4b:f7:14:2f:
         60:3c:59:dd:90:97:8c:fe:9d:ec:b7:b9:de:c0:03:26:45:15:
         89:dc:1e:17:10:cc:4d:7b:38:0d:ef:bc:b4:21:37:62:8b:54:
         4f:b7:9c:8c:39:75:36:4d:a6:fd:fa:35:96:9e:41:fe:03:c9:
         3f:63:06:a2:c3:3a:d0:bf:2c:c9:79:b4:aa:84:1c:e3:99:45:
         05:a9:71:a0:61:0e:45:10:d2:b8:29:2b:de:a4:59:4d:e2:72:
         6b:f9:98:e3:9e:65:e6:4a:12:70:ab:7d:d2:57:b2:79:71:7b:
         a4:21:5a:32
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUPF7ML6Bkcmp+5mjo+HzCR6OcdqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjExMzU1MTNaFw0yNDA1MTkxNDAwMTNaMDMxMTAvBgNV
BAMTKEE2NDZEMzcxRkMyQzhFNzI5QjRERjJFRDNBMTQ3NTcyMDU2N0IzODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBhHqhaPtqWJBulKurHPNxBJE
K4BHvzwFaYuAGDEi9pnZPPraa55a7MDYxgDIMfsOl40V1uwsu7Y8KvJ4TFSRzf9h
5EH+g0YyjEYaqgvd5xOZeCJn1h+iyRU68sJX1b57wxrHpoWvP7Xq7cC4q9/YkOwm
aRhCee5RK2F6uRrwlUejRtYUAfX0CV/b/vSwWMRINVA2bBUQ6ufyOmCF1Vsvlh9+
X6k/fu36Vn5YQWCkQh4SdfDMw5l+LPWKSWxMxJixtdQp42nz283tdojpRN6APCfY
bXQTL0tzbKd9H9jfm6wrqIyPGo4XlOI/GHp4Ddv+fnfrczbCy8i/Mtl4nHGhAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSmRtNx/CyOcptN
8u06FHVyBWezhDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EcUNVZzNFWmtKWXllRlh4UFdUVFJKU2hhQkxuRDJjUVA5
eVo5a2U2cnptTi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRHFDVWczRVprSll5ZUZYeFBXVFRSSlNoYUJMbkQyY1FQ
OXlaOWtlNnJ6bU4vMC9BNjQ2RDM3MUZDMkM4RTcyOUI0REYyRUQzQTE0NzU3MjA1
NjdCMzg0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKzP3AwDQQCAAIwBwMF
ACgEfRgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCSyMA0GCSqGSIb3DQEBCwUA
A4IBAQBAantSdvxg4zShjrKM6vMjtyOp9HRtKqcsme1Sv013Khh65vA9C/gTFrsI
uhcsHXybE0nXgR5CH8kKuNuxpkH1Ldl0Jc7Yttr31iFkJ+hAQnlc5NcN5yWPT9Zf
EQ7gnBIPEYDOKymWaLToss793q0nUWpdMN1Z3/NMJ76ecKnlJcuFgkGJL5eAKF4r
+Ev3FC9gPFndkJeM/p3st7newAMmRRWJ3B4XEMxNezgN77y0ITdii1RPt5yMOXU2
Tab9+jWWnkH+A8k/YwaiwzrQvyzJebSqhBzjmUUFqXGgYQ5FENK4KSvepFlN4nJr
+ZjjnmXmShJwq33SV7J5cXukIVoy
-----END CERTIFICATE-----