Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.cer
File:                     A81080075593D65A04DB9FC78CAC8CA9E1EE8246.cer (raw, json)
Hash identifier:          MYflJ7Gg6kkfsW1krhaJ95tC7U8WOMhJ3OBepo5F7Bs=
Subject key identifier:   A8:10:80:07:55:93:D6:5A:04:DB:9F:C7:8C:AC:8C:A9:E1:EE:82:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6355DC7EF5215D186271E5E89356E7762CDCBB93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 22:08:27 +0000
Certificate not after:    Tue 23 Jul 2024 22:13:27 +0000
Subordinate resources:    AS: 264867
                          IP: 168.205.224.0/22
                          IP: 2804:2f08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:55:dc:7e:f5:21:5d:18:62:71:e5:e8:93:56:e7:76:2c:dc:bb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 22:08:27 2023 GMT
            Not After : Jul 23 22:13:27 2024 GMT
        Subject: CN=A81080075593D65A04DB9FC78CAC8CA9E1EE8246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:47:a6:5b:99:d0:88:28:52:9f:2e:6b:39:
                    bb:0c:58:68:7d:87:b7:c6:59:3e:13:c2:65:f4:6a:
                    ea:06:b7:be:c8:bd:7f:e5:1e:3d:90:46:5f:c9:0a:
                    73:40:44:3e:9d:84:a0:d2:b0:d2:67:af:d9:20:f2:
                    f4:9e:94:2a:17:84:03:2c:ac:15:36:f4:36:05:bc:
                    71:3a:37:23:2e:c6:9e:0b:f6:fb:02:73:aa:94:1b:
                    b1:d9:5c:e4:39:9d:b9:40:f9:99:a8:e5:62:a2:b5:
                    2c:88:d5:cf:e9:5a:c7:88:35:85:53:b5:b6:d1:e0:
                    44:0e:fa:27:95:49:31:e2:64:d6:a4:b1:62:b0:fb:
                    ba:8d:1a:9d:d4:2a:7d:35:a3:8e:36:5d:3e:a8:11:
                    91:a3:5b:b0:0e:76:83:ff:04:b9:9c:6d:85:d0:9a:
                    a7:23:bb:63:4d:c8:c5:53:29:1d:c5:6d:f2:cc:15:
                    d9:06:b8:a9:16:5f:0a:b0:ae:d6:00:1b:8c:97:87:
                    bd:9a:15:84:cd:2d:4f:21:ad:30:86:fd:84:10:05:
                    ce:6c:6a:07:a8:84:2c:a9:66:3e:95:35:d9:d3:3e:
                    92:50:97:c1:c6:0a:36:ad:a2:f2:b2:30:7a:69:4d:
                    ec:1b:e8:3b:48:ed:dc:60:5d:a3:10:e0:66:e2:2c:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:10:80:07:55:93:D6:5A:04:DB:9F:C7:8C:AC:8C:A9:E1:EE:82:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.224.0/22
                IPv6:
                  2804:2f08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264867

    Signature Algorithm: sha256WithRSAEncryption
         0c:06:61:32:a1:fb:19:14:3f:34:85:6e:1a:71:0d:3d:27:6e:
         6e:5a:48:53:63:d3:bf:a4:c2:c8:ca:d6:03:b8:26:37:8b:21:
         d6:87:ed:22:cd:74:89:72:22:2b:76:a2:66:bf:d7:bc:74:cf:
         ec:57:42:2b:df:a9:f7:ca:29:b4:3e:14:e3:57:b4:c3:43:fc:
         2f:6f:55:ce:67:34:c3:b1:94:f9:75:bb:40:10:be:5b:2b:c7:
         52:c9:07:8c:d4:53:98:1a:a3:37:50:52:d6:df:4a:b6:e8:7b:
         fc:58:e7:fa:52:25:06:45:71:35:4a:f6:a3:1d:1a:bb:1f:b0:
         09:67:62:ea:19:42:5c:e8:67:53:96:f8:62:60:95:63:0a:3e:
         2a:03:37:ea:bb:26:f6:d6:cd:fb:1e:44:d0:ec:5c:05:4b:b1:
         4d:9f:d6:4e:bf:80:4b:f8:8c:c5:53:46:6a:46:db:67:b1:9c:
         b4:de:28:8d:44:20:a6:66:bc:e9:13:cc:65:bf:48:02:99:c0:
         e9:bb:e4:9c:2f:e2:33:c7:5b:e1:59:92:82:86:7c:29:94:cd:
         ba:b1:b8:14:7e:ae:66:de:d1:60:5f:d9:b1:fe:51:a2:24:3d:
         38:93:04:9d:2b:e5:00:23:c9:56:5f:81:71:d4:21:77:d8:c3:
         35:83:7a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----