Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012.cer
File:                     B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012.cer (raw, json)
Hash identifier:          s2F9QSMX89upRiC3CLJmO7+P8pp2UieMPFrx6FjLQPU=
Subject key identifier:   B4:2C:E3:FD:4D:95:D4:3B:D3:3F:13:2D:6D:4E:CB:F2:B8:61:20:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B662D2E316AC4740DC5D5146AF7B4F5E38CA61E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/1/B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Aug 2023 14:39:21 +0000
Certificate not after:    Wed 31 Jul 2024 14:44:21 +0000
Subordinate resources:    AS: 264054
                          IP: 143.137.224.0/22
                          IP: 2804:2a10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:66:2d:2e:31:6a:c4:74:0d:c5:d5:14:6a:f7:b4:f5:e3:8c:a6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  2 14:39:21 2023 GMT
            Not After : Jul 31 14:44:21 2024 GMT
        Subject: CN=B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:e8:16:41:c3:e0:3a:db:96:8a:4e:ec:d6:
                    6c:98:82:9c:4f:91:b0:53:6c:34:83:b8:fc:ad:5e:
                    38:f0:d3:69:c4:27:86:fe:74:d4:8c:85:c7:89:bb:
                    db:28:57:12:5f:d9:11:e8:61:82:ef:d5:a2:e3:45:
                    57:2a:56:86:3a:8e:3e:25:13:f8:5a:0e:bb:85:cf:
                    48:f3:91:39:5e:d4:8f:b1:71:1b:81:43:62:6b:1b:
                    3c:be:26:21:96:e0:d1:2c:9c:e5:a3:4e:66:c3:e8:
                    3a:18:67:94:be:37:76:64:5a:9f:98:20:a5:ad:57:
                    15:d8:fb:ab:02:ef:63:dc:3c:90:c8:58:ef:8b:d4:
                    ba:24:f2:f0:e8:cb:2f:2b:a7:4a:92:52:07:a5:63:
                    19:55:84:f9:ed:b6:fd:a1:e6:d8:36:a1:14:18:5d:
                    83:67:08:fe:f4:f2:bb:9a:26:a1:95:90:79:2d:15:
                    92:21:bf:bd:7d:e8:2f:11:c9:3e:4b:d2:db:63:83:
                    4e:51:50:6f:82:20:c0:98:eb:9c:8d:10:24:7e:ce:
                    73:b0:73:d3:96:70:0b:38:97:40:92:71:a4:44:70:
                    eb:49:69:11:c8:c7:c6:8a:94:7f:2d:bb:14:ae:14:
                    79:d6:08:60:d4:12:fd:1d:3d:3a:b5:79:17:5f:7f:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:2C:E3:FD:4D:95:D4:3B:D3:3F:13:2D:6D:4E:CB:F2:B8:61:20:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/1/B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.224.0/22
                IPv6:
                  2804:2a10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264054

    Signature Algorithm: sha256WithRSAEncryption
         1e:ac:fb:20:a6:ff:9a:8f:a8:8f:0b:7f:db:f2:89:40:37:96:
         15:77:84:c9:48:ef:e1:43:39:df:e9:65:1c:e9:f5:f6:ff:4a:
         cd:b7:55:88:10:c1:ab:7b:7f:d5:07:92:72:00:21:4d:b7:35:
         c3:30:89:a3:b3:5a:b9:86:98:1a:56:d2:0f:12:fb:90:e4:3c:
         f1:fe:aa:a8:47:c3:85:e9:e6:d5:5c:3a:f1:e6:01:df:41:5c:
         21:11:5a:64:73:2e:d8:5e:15:41:26:6c:49:bb:ba:8b:58:2b:
         8e:fd:a4:65:57:d1:af:c3:8e:c9:9a:5c:b1:f4:17:18:76:a5:
         a8:19:d2:77:14:4d:f4:5f:4a:69:46:89:61:e2:79:3c:57:92:
         a5:60:87:f9:1e:2c:48:3b:ef:7e:81:f5:61:ff:07:e6:27:3d:
         60:58:9e:c0:9f:d2:80:8d:fd:b4:b6:d7:15:a3:53:96:65:30:
         8f:ff:9a:8e:d1:9b:c3:95:94:8e:61:82:ed:c9:36:33:70:5e:
         c6:ed:33:f8:89:c0:35:00:76:46:f8:b2:27:f0:81:29:6e:6c:
         d0:9d:3f:72:d0:22:0e:89:59:26:09:04:46:de:32:c1:23:d3:
         23:c2:b9:8b:63:e5:33:d0:0a:ae:0f:aa:53:cc:63:14:9b:ea:
         7d:f0:3b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----