Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C0722F0738AD50072E4BF03B0DE71DEE7CF27382.cer
File:                     C0722F0738AD50072E4BF03B0DE71DEE7CF27382.cer (raw, json)
Hash identifier:          8nGBEsX0QHE2WGKfnrf/YEsSsjeZZRThazLytUVp+aA=
Subject key identifier:   C0:72:2F:07:38:AD:50:07:2E:4B:F0:3B:0D:E7:1D:EE:7C:F2:73:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       460CA36A854D15B9940F8AECF3A8D3C888FAA60B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/C0722F0738AD50072E4BF03B0DE71DEE7CF27382.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 15:07:07 +0000
Certificate not after:    Tue 03 Sep 2024 15:12:07 +0000
Subordinate resources:    AS: 262368
                          IP: 177.128.96.0/21
                          IP: 2804:85c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0c:a3:6a:85:4d:15:b9:94:0f:8a:ec:f3:a8:d3:c8:88:fa:a6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 15:07:07 2023 GMT
            Not After : Sep  3 15:12:07 2024 GMT
        Subject: CN=C0722F0738AD50072E4BF03B0DE71DEE7CF27382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:ee:cd:20:04:89:02:57:b5:a9:28:45:ed:
                    86:22:6e:73:09:64:50:ef:75:f9:33:99:85:4e:b1:
                    0a:98:b6:60:36:ea:c1:25:32:c4:db:3d:c9:6c:4d:
                    d7:60:5d:90:f5:d1:61:a0:22:e9:39:9e:ea:e2:04:
                    21:bc:66:47:95:2e:39:05:f6:b5:29:3f:ef:ae:c5:
                    47:d3:8f:b1:55:cd:9a:26:a9:e1:02:9d:fd:fe:ce:
                    7f:7e:b8:c0:97:f8:44:86:52:76:66:b7:1d:b5:f4:
                    3a:07:89:cc:a4:f0:46:35:72:6f:cf:bd:66:08:46:
                    a6:9e:cc:ec:41:a1:31:f5:b7:21:18:97:04:f9:69:
                    f8:9d:06:03:a5:b0:c1:f2:93:2e:5d:3f:98:7e:82:
                    cd:ba:93:c0:8a:27:15:17:4c:91:94:f2:72:c3:78:
                    1b:3a:e3:17:ec:94:58:73:6f:9d:38:ff:70:4c:c4:
                    fb:d7:ae:b8:eb:bb:ce:6b:db:bb:d0:00:0e:a7:f3:
                    d9:89:2f:03:c7:9a:d2:e3:8c:b3:10:3c:10:65:98:
                    96:d5:13:db:83:c7:91:d4:ac:24:9f:9e:57:ea:75:
                    7b:17:37:15:64:6c:49:e0:2e:2c:1a:67:a0:67:92:
                    3e:79:d7:e3:67:76:9c:c2:fe:f2:d2:04:f1:74:10:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:72:2F:07:38:AD:50:07:2E:4B:F0:3B:0D:E7:1D:EE:7C:F2:73:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/C0722F0738AD50072E4BF03B0DE71DEE7CF27382.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.96.0/21
                IPv6:
                  2804:85c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262368

    Signature Algorithm: sha256WithRSAEncryption
         63:2d:f2:44:ab:e3:85:7f:3c:32:f2:68:eb:ae:58:15:c0:24:
         80:e1:aa:0f:34:13:eb:d2:13:34:e9:db:e6:8f:a8:f5:9f:e7:
         fb:f4:0c:e3:90:1c:2a:14:c4:43:37:f8:46:a4:72:c8:23:0c:
         44:ea:83:15:e1:d4:97:5e:b0:61:31:b1:91:14:f4:ae:b9:24:
         c8:42:97:61:d3:ec:a9:f4:23:67:f0:26:64:96:ca:b6:56:b3:
         32:a0:ea:b4:3c:97:fc:d1:cc:01:58:ce:fb:b3:dd:b1:0c:49:
         10:77:c2:b4:ca:1f:9c:60:ac:bc:2e:cb:7e:39:7f:42:4e:73:
         3d:c0:2f:cc:a5:c9:cf:1f:fb:68:e9:a8:7d:ec:c9:2b:17:f0:
         c5:6b:00:0a:5f:8b:1d:a1:0e:99:2d:c1:f7:1f:dc:87:c4:e4:
         fe:e2:f5:18:73:6f:2c:d1:f6:e5:9a:60:04:98:be:4d:72:98:
         52:c3:71:98:60:0a:ac:a8:08:62:0c:d3:b5:1f:56:ca:1a:fe:
         b4:a4:84:6b:c2:7e:9e:ee:fc:96:6e:17:d8:8b:3c:f9:ad:9a:
         62:d8:3d:61:b4:14:58:0f:cf:11:30:64:e7:05:50:5f:06:f3:
         1b:f9:fd:56:60:4f:0e:ce:19:a0:e9:66:e0:8c:40:12:9a:a8:
         52:6f:78:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----