Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B6986C016F3E80BC5D98F8941D5EA43AC8F632DE.cer
File:                     B6986C016F3E80BC5D98F8941D5EA43AC8F632DE.cer (raw, json)
Hash identifier:          KlgM+G7Zns88MfiHV5rdLRcElkW+Rqf7J/QTuazUi44=
Subject key identifier:   B6:98:6C:01:6F:3E:80:BC:5D:98:F8:94:1D:5E:A4:3A:C8:F6:32:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D9A208D91AFC6391EDBF8130045BF037C9DEB35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/B6986C016F3E80BC5D98F8941D5EA43AC8F632DE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Sep 2023 13:02:11 +0000
Certificate not after:    Fri 06 Sep 2024 13:07:11 +0000
Subordinate resources:    AS: 263027
                          IP: 186.249.240.0/21
                          IP: 2804:8838::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9a:20:8d:91:af:c6:39:1e:db:f8:13:00:45:bf:03:7c:9d:eb:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  8 13:02:11 2023 GMT
            Not After : Sep  6 13:07:11 2024 GMT
        Subject: CN=B6986C016F3E80BC5D98F8941D5EA43AC8F632DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:02:ca:dd:70:06:31:f6:50:2a:f4:5a:90:0d:
                    8d:2d:e9:96:d6:a1:1d:f9:d5:3e:03:60:e3:dd:b1:
                    64:56:5d:48:fa:2e:14:b8:80:d5:d6:9e:24:33:07:
                    5d:82:d4:33:c7:8a:86:a2:dd:1b:4e:7a:10:6a:a0:
                    3d:3e:18:90:f9:92:d7:e5:4d:48:79:ac:51:9f:69:
                    d8:cb:e8:b5:32:37:6c:25:de:35:32:79:7e:67:d6:
                    07:96:b2:11:af:6c:55:9d:f2:ad:1d:2a:84:0c:97:
                    fe:4a:5f:3e:0d:de:8c:8f:21:ef:31:04:e4:48:04:
                    6c:a9:d8:23:d2:30:0c:0d:3b:85:21:1a:bf:a0:6b:
                    c9:2d:41:e3:cd:77:1d:50:fd:ae:43:7c:5f:06:8d:
                    54:21:8f:fd:39:23:84:83:c2:6b:68:4f:d7:d2:02:
                    8d:29:14:54:89:68:88:af:da:52:fc:bd:1d:38:57:
                    7d:6c:11:47:20:50:ba:7f:aa:6e:23:61:3e:f8:54:
                    b7:c3:17:7d:c4:98:14:79:3f:e4:f4:73:6f:9f:68:
                    45:70:8f:78:ef:cd:3b:48:f7:75:ef:7c:b6:ea:b3:
                    2b:da:c5:e5:f6:97:c5:46:1f:23:82:36:e4:43:9e:
                    3b:24:d2:bc:dc:83:f3:8f:44:1e:c6:25:30:80:70:
                    86:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:98:6C:01:6F:3E:80:BC:5D:98:F8:94:1D:5E:A4:3A:C8:F6:32:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/B6986C016F3E80BC5D98F8941D5EA43AC8F632DE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.240.0/21
                IPv6:
                  2804:8838::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263027

    Signature Algorithm: sha256WithRSAEncryption
         2c:6d:46:0f:e5:dc:e6:2e:fd:df:89:d9:77:91:8b:4d:6f:47:
         5f:89:87:b8:13:fd:00:b7:ac:8b:64:0f:2f:f6:83:cf:6a:1b:
         1b:69:f9:fc:16:ca:56:3e:ec:81:be:d6:52:bb:6f:27:7c:77:
         61:5d:7b:e6:5a:7f:26:7a:c3:ba:c8:46:01:54:60:f0:62:48:
         47:4d:b3:2f:4e:d8:7e:c6:5a:45:da:23:9e:da:6d:20:5c:e4:
         b1:41:90:be:a5:4a:c8:e9:eb:ff:93:8d:19:8f:77:8c:82:62:
         80:39:4f:2d:54:46:f6:ad:2f:ad:d1:d0:34:ae:09:64:76:36:
         7e:e2:8b:23:3d:27:f8:42:de:b7:c3:e5:34:3a:6b:93:41:49:
         1b:1f:82:5d:1e:a7:5f:82:9d:46:8f:59:0a:7a:74:b2:90:89:
         eb:25:52:7f:d5:9e:45:2f:cb:05:46:58:07:0e:22:f0:f3:61:
         b9:13:90:c3:8b:a0:50:e1:f6:f1:61:be:a4:d7:69:bd:96:95:
         82:87:d9:a8:de:4c:a2:4f:97:b2:90:76:70:8f:c6:5f:ca:f3:
         c7:64:2d:53:8c:bd:36:d1:fc:30:8f:0e:37:dc:40:c6:3e:d8:
         fb:c0:56:4f:b3:6c:7a:d0:b5:1d:a0:8f:9e:15:3f:b0:38:b9:
         ac:33:6f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----