Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BCC3258242A58B6E444EAA150DB77FD133FCAF99.cer
File:                     BCC3258242A58B6E444EAA150DB77FD133FCAF99.cer (raw, json)
Hash identifier:          ZfCI7fr5fhELv+GtJieWofgYzV5oYxkWjn6O81EMMAA=
Subject key identifier:   BC:C3:25:82:42:A5:8B:6E:44:4E:AA:15:0D:B7:7F:D1:33:FC:AF:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       61AFEABF129DC1BF4FDBA9052174E34B85E50ED7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/0/BCC3258242A58B6E444EAA150DB77FD133FCAF99.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 15:01:04 +0000
Certificate not after:    Thu 07 Nov 2024 15:06:04 +0000
Subordinate resources:    AS: 268648
                          IP: 45.164.244.0/22
                          IP: 2804:5468::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:af:ea:bf:12:9d:c1:bf:4f:db:a9:05:21:74:e3:4b:85:e5:0e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 15:01:04 2023 GMT
            Not After : Nov  7 15:06:04 2024 GMT
        Subject: CN=BCC3258242A58B6E444EAA150DB77FD133FCAF99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:a8:de:03:b1:68:8b:d0:ef:d3:a4:8f:2a:
                    12:c7:b3:58:12:68:d5:06:35:89:6d:c8:ab:59:2d:
                    df:88:8a:5f:63:1d:d8:bc:79:b0:d3:fa:8d:c6:bb:
                    46:f8:9a:e7:a0:7a:36:5e:69:bf:45:e4:04:1b:e0:
                    45:64:5c:dc:a6:cf:0b:e8:0b:67:76:9e:8c:78:74:
                    fa:af:38:bd:9c:ae:8f:4a:93:21:79:de:ed:41:8b:
                    37:e6:dd:93:d5:c2:e3:3f:38:18:99:b4:74:8e:71:
                    b0:8b:a1:31:9b:6b:7f:76:5b:67:15:a0:89:d9:3c:
                    e1:dd:3c:87:63:a3:50:66:4e:bc:37:a5:69:c4:ee:
                    30:36:e8:2f:88:65:a1:d2:c8:b1:34:66:d5:7b:46:
                    de:6c:23:72:6e:d5:bb:40:20:16:27:ad:9a:9e:39:
                    cb:c3:d4:30:94:58:0f:a8:86:4b:c1:6b:b4:e5:f0:
                    8c:9b:9c:2a:db:9e:1d:38:07:bd:e1:62:f3:ca:63:
                    df:25:b5:43:0f:da:2e:cc:5b:b8:25:ee:42:95:b7:
                    55:98:06:24:25:15:00:89:69:f7:52:a6:19:b1:fe:
                    88:84:a4:ca:56:df:78:79:6d:86:af:df:0a:a0:78:
                    d6:cf:fb:2f:54:d1:bf:9e:85:bb:92:0d:c9:26:8a:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:C3:25:82:42:A5:8B:6E:44:4E:AA:15:0D:B7:7F:D1:33:FC:AF:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/0/BCC3258242A58B6E444EAA150DB77FD133FCAF99.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.244.0/22
                IPv6:
                  2804:5468::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268648

    Signature Algorithm: sha256WithRSAEncryption
         63:2f:7a:47:33:11:a5:d9:1b:39:66:0e:25:49:8f:ea:23:5e:
         68:8e:24:d9:d7:c1:35:fe:a0:f8:a2:ef:64:88:d2:69:b5:a9:
         2d:04:5e:cb:42:d4:64:d4:8c:a7:1e:85:58:73:72:a2:7d:b1:
         eb:66:a3:4d:a2:6a:39:26:b1:c2:7f:ea:24:cb:7a:44:97:cd:
         20:1e:48:e8:16:ab:c7:0a:6c:ed:02:c9:a9:a1:15:eb:5c:22:
         0a:f1:9c:63:a2:c6:9b:c8:ff:01:ab:05:41:37:73:3c:ca:a8:
         2a:e3:d6:36:b7:fa:f4:e8:91:02:27:04:be:6d:ee:6a:16:8d:
         08:96:2c:2e:5d:d4:f9:d0:1b:4c:a7:da:83:4a:0b:2a:40:b8:
         0b:b9:7a:43:d5:e7:b8:41:77:78:cf:68:6f:f3:be:f5:0f:20:
         a7:eb:8a:e6:ff:b3:e3:21:00:f9:b6:3f:d4:f3:ca:b4:28:d9:
         73:72:af:e7:9a:f8:28:c3:8c:60:13:67:83:e6:0f:92:50:dc:
         b4:dc:dc:71:15:9a:8a:9f:d6:77:19:e6:39:ec:a7:16:db:c6:
         5d:a1:e3:5d:2b:86:60:38:0f:01:fe:be:b2:e5:77:51:71:25:
         85:66:e5:ad:a3:1e:62:9a:56:c5:79:51:37:0f:cd:e1:6c:1b:
         d8:32:19:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----