Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.cer
File:                     BE253B1D2A29537AA15E656F80DD5C74AB78B69D.cer (raw, json)
Hash identifier:          elW1snECoHiIUd3xr8xiW9vex8T4a99QxGqdZpYE1sc=
Subject key identifier:   BE:25:3B:1D:2A:29:53:7A:A1:5E:65:6F:80:DD:5C:74:AB:78:B6:9D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       37C60A0338781B2AA39B743AE2DFB24A897F60B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jul 2023 12:59:23 +0000
Certificate not after:    Mon 22 Jul 2024 13:04:23 +0000
Subordinate resources:    AS: 268886
                          IP: 45.173.188.0/22
                          IP: 2804:5c14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c6:0a:03:38:78:1b:2a:a3:9b:74:3a:e2:df:b2:4a:89:7f:60:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 12:59:23 2023 GMT
            Not After : Jul 22 13:04:23 2024 GMT
        Subject: CN=BE253B1D2A29537AA15E656F80DD5C74AB78B69D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:34:14:85:a4:c7:34:60:fa:ff:cf:83:fe:
                    eb:d8:d3:dc:16:0a:d6:a7:71:7f:cc:e0:b7:f6:16:
                    ed:4e:69:b7:d4:b5:44:3a:76:7a:f2:8f:5b:cf:67:
                    fd:2f:ec:8f:62:28:c0:6e:f7:ef:26:a9:1a:f8:46:
                    b4:46:59:b7:89:a8:7b:e2:df:ab:23:8b:0c:dc:98:
                    c6:e2:e3:13:59:d2:ee:92:a4:0b:9b:8e:3e:3a:da:
                    2a:4d:8f:ca:9e:3c:63:5f:93:29:dd:4d:50:69:fd:
                    b3:2d:31:c4:d3:cf:4d:7b:76:3b:78:9a:95:78:7e:
                    c0:a0:a8:40:a5:fc:1d:41:26:51:be:13:3d:8f:fd:
                    49:70:30:46:14:5e:c1:fe:12:37:8e:de:18:7d:5f:
                    55:b1:76:f3:b7:7c:6b:cf:51:fc:e4:46:f8:a1:d0:
                    e1:12:79:9f:9b:1d:1f:f8:f9:b7:93:f5:a1:38:5c:
                    50:d4:f1:1d:77:32:b1:66:cc:9f:eb:0a:29:92:c1:
                    ba:3c:86:3a:9b:ef:51:a8:b4:8d:e2:5f:c8:11:2e:
                    ec:ab:32:eb:f7:f7:ef:c7:5a:e9:8b:04:fc:09:60:
                    c4:09:f0:97:b9:b3:0f:0c:fb:7d:86:18:3d:1a:3b:
                    43:15:fe:1e:02:8e:b2:cc:9a:76:ea:c7:52:cd:07:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:25:3B:1D:2A:29:53:7A:A1:5E:65:6F:80:DD:5C:74:AB:78:B6:9D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.188.0/22
                IPv6:
                  2804:5c14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268886

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:2c:37:ea:97:63:32:5c:f1:a4:c9:15:9c:f2:32:24:e6:
         23:0f:df:13:ef:71:71:55:28:31:f7:ef:a6:52:fc:63:56:4d:
         16:33:cd:e6:b6:78:2a:c8:c5:0c:06:28:16:8f:62:22:52:04:
         52:cb:2f:a7:78:03:1a:f0:15:d5:97:70:35:e6:c9:b1:eb:30:
         1b:ad:41:bc:b7:6e:e9:ad:b0:db:b4:0c:d0:77:19:16:f6:0b:
         39:27:92:08:f8:d3:2f:3f:12:7a:24:f1:48:5d:df:98:01:4e:
         ec:fb:d7:13:6c:07:4f:06:47:d4:47:38:c9:26:52:9d:c6:9d:
         15:7d:b1:77:96:5f:78:80:3b:a7:34:c4:ab:46:fa:c8:21:61:
         fb:16:0d:4b:9c:0f:d4:2c:77:73:24:6b:94:8f:e9:b5:01:d7:
         c7:eb:35:c1:27:bf:e1:c7:cf:9f:74:57:1c:b4:47:ed:d8:92:
         83:49:97:fb:75:37:26:1f:ab:2b:c9:b9:e4:ec:3c:07:ba:bf:
         ab:83:6b:fd:1c:55:5b:6e:3d:32:ea:d4:78:3f:a5:61:30:63:
         02:3e:48:a9:f2:12:1c:94:2b:c5:de:6c:e0:57:e3:78:ca:94:
         2f:26:75:4c:d3:23:f9:9c:6e:1c:f7:7d:79:65:5c:cb:61:25:
         0a:e6:98:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----