Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.cer
File:                     B96B0A6083B862C27D011654CF18FB16A3C983B7.cer (raw, json)
Hash identifier:          BPwDxig1N20U7jbXt7nkZT7Mr8vdOQGCVwTNEjGsq5E=
Subject key identifier:   B9:6B:0A:60:83:B8:62:C2:7D:01:16:54:CF:18:FB:16:A3:C9:83:B7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18F1AC1038BF83B97B80317DE1762D45E8CBBF4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Dec 2023 15:15:13 +0000
Certificate not after:    Sat 28 Dec 2024 15:20:13 +0000
Subordinate resources:    AS: 266628
                          IP: 128.201.52.0/22
                          IP: 2804:3ee8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f1:ac:10:38:bf:83:b9:7b:80:31:7d:e1:76:2d:45:e8:cb:bf:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 30 15:15:13 2023 GMT
            Not After : Dec 28 15:20:13 2024 GMT
        Subject: CN=B96B0A6083B862C27D011654CF18FB16A3C983B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:3f:87:e6:17:69:6c:15:b3:bd:29:0f:70:
                    8b:09:ea:3e:df:8c:88:92:e8:81:bb:bc:cd:20:da:
                    5e:d6:98:5c:db:d8:70:9b:46:ad:48:a2:92:ca:8b:
                    ee:13:79:2d:61:d6:c6:d8:de:57:36:6e:b4:c1:f2:
                    e3:2e:64:5a:cd:9a:7d:0b:5a:1e:43:e7:5d:06:01:
                    06:24:e1:d1:9c:43:85:35:7f:81:0e:9c:36:ad:03:
                    83:32:10:02:15:71:8a:5d:ff:9f:98:dc:c1:d3:42:
                    a1:af:cd:1f:ad:80:8e:8a:b5:8f:26:5e:75:bc:3e:
                    49:e7:c7:27:58:69:db:3c:44:99:5d:64:29:51:0f:
                    55:20:67:26:6c:52:95:d2:8c:e4:04:c4:dc:35:e6:
                    86:1e:53:62:ea:fe:35:1f:f8:70:b6:94:87:50:77:
                    80:0f:ba:06:a7:8c:18:e2:2e:df:76:ba:47:51:06:
                    e7:87:3b:2e:c0:84:0d:e0:d0:9b:7a:c9:d5:92:3e:
                    e4:e0:4b:db:c3:83:4c:0f:53:ad:d7:6a:88:3a:91:
                    b1:03:ac:ea:cc:ce:dd:76:84:10:e2:55:17:e5:4b:
                    ca:1a:98:07:5c:b0:fb:9a:d9:0c:9a:d8:18:55:65:
                    be:b8:54:71:ee:85:83:ed:26:62:8a:15:75:8e:d5:
                    58:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:6B:0A:60:83:B8:62:C2:7D:01:16:54:CF:18:FB:16:A3:C9:83:B7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.52.0/22
                IPv6:
                  2804:3ee8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266628

    Signature Algorithm: sha256WithRSAEncryption
         6b:2f:61:01:47:dd:74:12:66:b5:f8:7b:c2:ee:58:33:27:9c:
         94:7f:d6:ef:20:17:7c:51:6f:a4:42:f8:33:18:0e:91:8c:d0:
         0b:df:ee:9a:4f:5d:71:f1:0e:8a:87:dc:cb:f2:49:15:fd:d1:
         b9:7b:e0:13:a5:3c:37:2c:66:ee:17:64:97:31:2c:51:ba:58:
         df:19:f8:d3:6d:62:40:d3:6b:85:a7:b5:23:df:2f:98:b5:20:
         82:c9:4d:ad:db:f6:c9:1e:b8:e6:3f:12:d9:c9:84:a4:d1:ec:
         13:d5:1b:78:14:fb:bd:4e:84:72:89:09:65:ad:1b:36:50:db:
         e6:52:65:4a:0c:82:f3:7d:d9:9f:f8:4d:aa:4c:82:69:26:e3:
         81:ec:19:1a:f5:0c:85:f8:32:ed:49:be:26:c3:f5:59:ce:f6:
         c8:bb:24:a5:ef:f0:dc:77:60:a9:48:18:99:16:04:18:27:a1:
         84:4e:59:88:4b:63:fb:c5:65:0e:bd:05:c5:4d:77:36:88:40:
         f5:b7:92:5e:0c:f7:71:99:22:72:33:d3:23:c7:05:dd:4a:d3:
         9f:79:a3:c9:b4:8f:8f:6e:3f:48:72:78:4d:95:b5:f3:c4:a9:
         40:75:2e:e9:9a:9a:1f:09:a7:a9:ad:49:43:ee:80:26:c9:65:
         59:b0:50:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----