Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.cer
File:                     BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.cer (raw, json)
Hash identifier:          FvBYiolgHd70rZB6bUDQV7tf1rBW6O75HNLXvGnl5Vs=
Subject key identifier:   BA:8F:2E:AA:10:80:F6:FA:C4:F5:DA:B6:B9:E4:3F:8E:6A:CC:66:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       487CDFBBBC2CC7743A392E8B9E2EB7011EBC1763
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Apr 2022 17:43:05 +0000
Certificate not after:    Tue 11 Apr 2023 17:48:05 +0000
Subordinate resources:    AS: 263532
                          IP: 191.5.48.0/21
                          IP: 2804:1364::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7c:df:bb:bc:2c:c7:74:3a:39:2e:8b:9e:2e:b7:01:1e:bc:17:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 17:43:05 2022 GMT
            Not After : Apr 11 17:48:05 2023 GMT
        Subject: CN=BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:85:3d:aa:f6:55:64:5b:08:4f:f8:cd:5c:
                    88:9e:45:c1:dc:cd:98:04:12:0f:64:f5:73:c3:9a:
                    43:85:af:70:72:b3:c4:9e:b6:eb:5b:5c:8a:28:1a:
                    27:1e:15:c9:43:b6:97:04:f2:de:18:77:04:da:a1:
                    88:99:e6:97:ae:df:70:56:ae:6a:6f:38:4e:b9:c4:
                    20:53:ec:93:31:c0:e5:81:ab:86:cc:12:12:2b:37:
                    95:66:6b:a8:fb:eb:81:48:00:db:eb:72:19:13:56:
                    08:f2:52:61:f3:a7:a2:7a:c3:2a:0c:27:46:27:e4:
                    82:08:bd:be:af:83:3d:8e:df:c3:d3:04:4b:4f:3e:
                    a4:df:41:67:61:05:8b:93:6a:04:03:2d:fc:1e:37:
                    53:63:f6:16:54:a3:c3:03:70:c3:98:8c:b5:c4:77:
                    62:12:8c:fc:67:a1:a5:12:7a:63:6b:e2:eb:e8:8e:
                    2e:46:c0:cf:39:0a:29:83:a3:80:39:d1:02:6a:61:
                    47:b4:86:eb:68:aa:0a:af:a3:39:80:1d:da:00:94:
                    93:90:d3:4c:89:8a:ff:b1:5a:86:69:2c:f3:af:36:
                    c4:7c:f1:f0:4e:25:28:62:ca:a1:64:cf:2b:01:6a:
                    5a:4c:6a:e7:95:3a:0a:38:72:29:ed:95:8b:9c:77:
                    5a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:8F:2E:AA:10:80:F6:FA:C4:F5:DA:B6:B9:E4:3F:8E:6A:CC:66:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.48.0/21
                IPv6:
                  2804:1364::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263532

    Signature Algorithm: sha256WithRSAEncryption
         a7:90:3f:fb:e7:fb:5f:0b:a7:34:c8:25:98:85:86:28:6f:33:
         f3:24:20:40:2a:77:eb:02:d3:5c:d5:4a:08:a9:5f:77:70:36:
         a2:18:72:ae:c5:43:c4:8f:78:19:a5:17:26:9e:26:2a:e1:c8:
         21:1e:f0:5b:2f:60:d5:eb:f7:95:44:48:25:a4:58:f0:5b:b0:
         f5:71:ca:ab:76:b2:03:7b:5b:7d:bf:f7:65:1b:bb:a4:6c:bb:
         66:63:aa:79:12:9e:a5:d3:65:28:80:8b:23:f1:17:96:8f:ad:
         12:2f:ff:21:47:a9:bd:a2:16:55:e5:81:53:84:c8:4b:ce:39:
         65:34:a3:18:35:23:f4:61:ea:e9:09:e4:72:39:c3:7f:f9:9e:
         a7:67:df:93:ce:fc:8e:6f:a0:36:48:1c:f7:95:21:d4:47:18:
         59:51:b8:18:32:fc:35:c7:3b:69:01:d1:66:bf:ad:d7:c0:5a:
         e1:5a:76:eb:b4:e4:d0:de:dc:7a:41:07:c1:e4:f2:e1:6d:ad:
         33:59:6b:37:19:12:9e:eb:07:00:c1:ad:f7:27:11:d0:74:9b:
         82:ca:42:3d:da:52:b1:da:3e:9b:a8:44:a3:b7:1e:5b:7a:3a:
         03:c0:56:1e:ac:31:c9:95:7c:d7:ad:47:d7:6e:77:2e:ab:77:
         38:78:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----