Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B766FBC0609892AA99901CCBD05698B895620453.cer
File:                     B766FBC0609892AA99901CCBD05698B895620453.cer (raw, json)
Hash identifier:          qd7IZbI5pRf99Ml8ScHATGuLxqRjZbj0bqPsYYzlRgg=
Subject key identifier:   B7:66:FB:C0:60:98:92:AA:99:90:1C:CB:D0:56:98:B8:95:62:04:53
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       22C70D64BC5E2B11BFB88058353BF6B3D7F3DC16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/B766FBC0609892AA99901CCBD05698B895620453.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 15:11:05 +0000
Certificate not after:    Tue 28 May 2024 15:16:05 +0000
Subordinate resources:    AS: 262529
                          IP: 45.224.248.0/22
                          IP: 2804:452c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c7:0d:64:bc:5e:2b:11:bf:b8:80:58:35:3b:f6:b3:d7:f3:dc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 15:11:05 2023 GMT
            Not After : May 28 15:16:05 2024 GMT
        Subject: CN=B766FBC0609892AA99901CCBD05698B895620453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:98:74:e7:f9:b6:53:b4:d0:f3:9b:b9:ff:b8:
                    c3:7b:28:fa:a5:c3:a8:11:4a:6b:12:c6:c3:5f:3b:
                    36:70:5b:3b:0c:40:3f:4a:16:eb:0c:85:68:a9:e2:
                    aa:88:b5:11:11:99:6c:98:69:f8:f4:94:f0:2e:5f:
                    82:ed:c5:b7:76:e2:47:c7:ee:8b:6d:16:44:24:40:
                    5b:ac:5d:ba:b7:1b:0e:3c:c2:ea:86:2b:b5:e3:81:
                    e3:f3:64:86:1e:8f:ef:ca:a0:30:17:28:47:a0:6b:
                    31:44:1f:3f:70:51:6b:25:44:42:59:c3:98:6b:8f:
                    f6:b7:57:8b:0a:fb:13:36:d5:2f:3e:90:23:27:9d:
                    7f:8c:70:ed:21:2b:f1:e8:5d:ad:95:42:c7:77:84:
                    39:56:d9:66:25:e2:79:de:68:f5:dd:a8:36:a3:9e:
                    28:b8:17:ea:c1:c9:23:15:e3:0c:3b:cf:da:39:95:
                    03:07:1f:a8:89:a0:56:f2:f1:f7:cf:cb:30:98:6d:
                    c4:01:a6:97:af:a4:0f:62:7f:5a:b2:b2:b4:69:5a:
                    75:34:5a:14:94:a6:1a:7b:33:da:d3:56:77:b7:32:
                    84:41:ff:9c:2d:d6:fb:44:4c:4e:05:11:fa:0e:59:
                    88:42:25:e1:53:ae:6d:8e:4a:b2:06:6f:8f:41:56:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:66:FB:C0:60:98:92:AA:99:90:1C:CB:D0:56:98:B8:95:62:04:53
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/B766FBC0609892AA99901CCBD05698B895620453.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.248.0/22
                IPv6:
                  2804:452c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262529

    Signature Algorithm: sha256WithRSAEncryption
         5a:ba:51:d5:9d:2e:b8:a8:8c:ab:14:f3:a3:8c:ce:56:7e:79:
         af:64:16:d2:89:a8:24:2a:01:b4:e4:4c:eb:1f:06:d5:e6:22:
         bf:1c:31:95:28:7c:db:b7:f2:59:a9:92:7c:c2:e7:ad:b5:86:
         3f:b9:9f:8e:e5:89:aa:f1:65:76:5d:a3:d3:18:c6:0a:21:bb:
         f9:cb:9f:f5:b6:bb:a5:12:7f:c3:4d:a0:c9:0b:77:1d:19:89:
         b7:28:08:37:72:86:09:31:2c:30:60:dc:73:cc:a1:24:55:1b:
         ec:7a:82:26:2d:6f:0a:28:c5:a4:4c:aa:ec:aa:01:a9:73:cf:
         46:0a:95:9e:d9:20:52:11:1e:e5:48:20:3f:28:8f:20:e8:91:
         67:70:aa:ad:9b:a9:cc:0c:13:e8:44:fd:bc:9e:32:ee:d3:50:
         97:18:bf:3f:0c:6d:d9:49:f6:f5:51:59:66:ca:b8:f3:6b:0f:
         7c:03:7d:67:b4:2b:da:62:c1:33:95:80:40:62:fb:43:8c:1f:
         78:29:1f:36:6d:d9:ec:fe:de:ff:9c:d1:d0:fe:5b:13:0d:2c:
         73:5e:b3:de:87:3c:28:f1:e6:10:52:e0:06:88:f3:4f:1b:21:
         66:43:bc:17:c4:04:20:34:36:64:f8:43:07:3d:69:91:94:ac:
         41:20:b8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----