Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer
File:                     B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer (raw, json)
Hash identifier:          IpbpKICjn0+ARRh4km62Eg0ilqN5T91meW6KUO45ZQw=
Subject key identifier:   B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       444AA155356F9978C340F6DD49CC0B792D981924
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 08:47:56 +0000
Certificate not after:    Tue 21 May 2024 08:52:56 +0000
Subordinate resources:    AS: 52917
                          IP: 177.10.116.0/22
                          IP: 177.67.172.0/22
                          IP: 2804:c44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4a:a1:55:35:6f:99:78:c3:40:f6:dd:49:cc:0b:79:2d:98:19:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 08:47:56 2023 GMT
            Not After : May 21 08:52:56 2024 GMT
        Subject: CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:a4:35:8a:82:e1:92:ed:66:c0:70:24:2a:
                    ef:85:c1:f3:19:9f:ef:bc:0d:b9:47:ce:f6:6b:25:
                    0c:90:50:8d:35:87:48:b0:04:ec:5f:d8:68:76:3f:
                    f2:10:38:4b:5a:9e:21:7f:d4:d1:1d:bb:91:d5:be:
                    73:79:d2:bf:91:e5:95:53:d3:c8:b8:a2:aa:a2:7d:
                    db:ff:d6:ee:ea:39:38:36:5f:ca:8e:a6:2f:25:fe:
                    72:83:6c:be:0a:f3:7e:97:1a:c0:c4:aa:de:ab:30:
                    00:3f:7a:d0:08:c5:99:18:2c:b3:5f:57:e7:16:a4:
                    f5:bc:7e:4c:16:ad:a3:46:83:56:3f:db:e5:bc:65:
                    55:fc:60:5e:49:67:0f:43:fb:69:61:bd:e2:c2:09:
                    63:cc:9a:3c:e8:ab:ea:ea:b2:56:38:a5:38:1f:a9:
                    cf:3c:ec:b0:6c:48:73:d8:63:07:6f:64:44:3c:cb:
                    b9:8c:81:94:df:bb:e7:75:60:09:fa:70:5a:12:e9:
                    eb:16:1c:74:16:3c:61:89:e8:c9:5c:a1:e3:2e:75:
                    df:f8:7d:fd:ae:dc:6f:0c:eb:2f:f2:d7:2f:7f:bf:
                    0b:2f:ff:79:82:11:5f:cd:0c:53:7a:43:6f:9f:97:
                    11:f3:07:97:60:55:02:81:df:b8:6a:0a:c5:0c:70:
                    8b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.116.0/22
                  177.67.172.0/22
                IPv6:
                  2804:c44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52917

    Signature Algorithm: sha256WithRSAEncryption
         9a:12:25:08:bc:90:4e:ad:f1:02:7d:3a:1e:53:4d:06:13:5e:
         ab:08:b5:90:b3:e4:e0:51:7d:11:4b:47:63:9b:07:e0:60:d4:
         81:5e:61:13:83:56:5a:9a:8d:63:a4:bb:b5:56:78:53:7e:a8:
         74:88:70:0c:4f:bc:98:64:63:6a:77:c1:4a:a1:71:cf:cd:58:
         b5:d2:67:39:3f:f5:08:4f:85:bc:2e:f1:ec:d8:31:9b:65:be:
         6f:57:00:62:b1:12:97:1d:46:fd:39:9e:8c:ca:ba:b5:e1:fd:
         36:22:89:b9:b8:fb:d7:3f:af:ff:be:a4:97:b2:55:b9:e8:65:
         49:14:5f:0f:9d:a8:85:0a:0d:6e:26:a2:53:76:e9:35:5a:b1:
         72:aa:c7:f0:6e:cc:15:df:23:46:84:eb:6a:ba:81:30:c9:8a:
         64:ea:34:d7:13:22:65:11:38:d1:7c:f3:52:a6:87:85:69:69:
         21:9b:9f:2a:a9:f0:71:f4:65:80:83:d0:16:2e:52:b9:1a:c2:
         26:26:d4:4f:99:9c:80:3e:e8:8a:d0:23:9e:e1:fe:0a:9e:d4:
         b1:23:53:2f:58:3e:54:11:51:26:2d:76:3e:ac:8a:c1:ac:51:
         92:1e:b5:fe:37:91:5b:6d:9d:8c:97:fc:fc:da:0d:2e:d4:58:
         22:23:5e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----