Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.cer
File:                     B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.cer (raw, json)
Hash identifier:          k+XwGo9tSyDKlMUOUq95pbUMzxQcNFotp2atP3Dmitk=
Subject key identifier:   B3:AE:9A:F8:A6:2B:19:1B:D3:3C:A0:7A:2F:0F:E9:85:F1:BD:10:74
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F834129979D24D5313B89C736014D6071BC9565
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.mft
caRepository:             rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 17 Apr 2022 17:16:37 +0000
Certificate not after:    Sun 16 Apr 2023 17:21:37 +0000
Subordinate resources:    AS: 266401
                          IP: 170.81.60.0/22
                          IP: 2804:3748::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:83:41:29:97:9d:24:d5:31:3b:89:c7:36:01:4d:60:71:bc:95:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 17 17:16:37 2022 GMT
            Not After : Apr 16 17:21:37 2023 GMT
        Subject: CN=B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:a5:a1:34:ad:55:60:2b:0b:ba:9f:75:13:
                    a4:66:bc:0c:8e:37:aa:a0:bd:bf:f4:4f:70:bd:03:
                    1a:75:1d:73:ce:82:0b:de:98:90:cc:c5:6d:63:69:
                    78:cd:fd:5a:45:07:fe:4b:23:e9:4c:2a:6e:7a:0b:
                    e6:af:fc:e9:92:da:a7:bb:fc:98:47:58:cc:a3:4c:
                    7b:2e:b2:76:f7:59:0b:40:a6:e0:af:33:a4:03:9b:
                    42:5e:37:cc:4f:d5:4b:4a:7e:b3:00:cf:0e:09:20:
                    77:43:11:42:f8:f9:7f:c2:22:a8:8d:2a:21:ab:c7:
                    1d:62:97:11:ac:29:96:ce:66:3f:a8:61:22:6e:8b:
                    70:95:8f:f1:18:6c:e7:31:6b:e2:69:ac:8f:89:03:
                    2b:a2:4d:33:a9:bf:a3:06:db:6a:91:5a:f1:ff:81:
                    1c:ce:74:09:2f:13:c5:18:7f:5e:7d:67:71:39:fb:
                    e2:06:61:57:df:e9:c3:49:09:96:fb:f4:06:9c:fe:
                    b4:b2:48:b2:13:0e:ff:a1:f8:36:5e:fb:5f:1e:81:
                    de:41:77:10:4c:32:a9:9e:99:44:4f:ce:99:37:12:
                    43:5c:b8:04:4d:e0:0c:74:e0:83:2c:81:55:ac:95:
                    76:06:68:cf:f0:6b:cf:e5:34:33:2f:b8:51:04:24:
                    99:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:AE:9A:F8:A6:2B:19:1B:D3:3C:A0:7A:2F:0F:E9:85:F1:BD:10:74
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.60.0/22
                IPv6:
                  2804:3748::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266401

    Signature Algorithm: sha256WithRSAEncryption
         0a:8b:28:9f:24:26:2f:c9:8e:1e:fe:d7:84:27:79:ab:04:50:
         2c:70:af:27:b6:d9:77:95:e7:a2:7b:db:75:6c:09:41:86:4b:
         64:71:d0:a8:d2:4e:d7:82:76:30:96:0e:c4:c4:7d:e0:7d:27:
         3c:f9:31:10:54:1c:4b:dd:2b:21:c6:8a:2f:6d:d1:35:fd:da:
         1c:a8:03:b6:76:9c:1e:89:fd:8a:d8:39:5f:9e:e9:3c:18:a2:
         04:b1:48:e7:0e:4a:11:0f:b4:a8:25:73:c7:f3:67:9a:40:80:
         04:fa:99:1d:e1:b7:76:bc:cc:f8:b0:6e:6d:66:ef:98:ed:fa:
         2f:30:ef:e3:c8:25:a4:dd:12:55:47:57:89:5c:cf:e9:2d:1d:
         2f:16:92:30:84:b9:7e:6b:3a:05:d2:03:60:7e:ae:43:78:08:
         4f:84:90:f4:b5:ed:51:f1:bd:bb:c9:eb:79:c3:db:a3:3a:e2:
         26:5f:6a:7d:f7:6f:d7:cc:1e:e7:11:bd:d2:ff:4b:ba:42:e8:
         14:0a:80:68:af:06:eb:ec:46:0b:01:5c:fe:b7:7a:ad:a0:6f:
         56:23:29:dd:ca:e4:d7:b4:21:4b:c8:9e:df:5c:1f:3b:f1:92:
         d5:de:97:04:a5:3f:05:a5:21:c8:8e:fa:14:da:2f:40:0a:ab:
         fa:68:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----