Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C0997B4394F42D63309972CD488DD6809FD72A14.cer
File:                     C0997B4394F42D63309972CD488DD6809FD72A14.cer (raw, json)
Hash identifier:          f1movF/QKHZz03Hb/lHRqmiqiqcIHBp3uw01Cj7HMxw=
Subject key identifier:   C0:99:7B:43:94:F4:2D:63:30:99:72:CD:48:8D:D6:80:9F:D7:2A:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       33B9EB04D1FF506D7DF2251103CED7885F2107F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/C0997B4394F42D63309972CD488DD6809FD72A14.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 21:04:36 +0000
Certificate not after:    Tue 23 Jul 2024 21:09:36 +0000
Subordinate resources:    AS: 268991
                          IP: 45.177.116.0/22
                          IP: 2804:5dc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b9:eb:04:d1:ff:50:6d:7d:f2:25:11:03:ce:d7:88:5f:21:07:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 21:04:36 2023 GMT
            Not After : Jul 23 21:09:36 2024 GMT
        Subject: CN=C0997B4394F42D63309972CD488DD6809FD72A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:9e:a4:02:72:9f:c4:e4:cb:8f:8f:61:1e:
                    3a:21:95:b4:a9:55:d0:7f:2e:64:e4:91:69:a1:da:
                    26:59:d6:4c:f1:0c:23:33:15:dd:28:a3:7d:a3:15:
                    d6:b4:c7:5d:31:da:f6:ad:75:f0:dd:df:a8:8a:f0:
                    9e:0d:a0:d9:18:50:38:fe:62:09:7a:ec:16:2f:77:
                    5b:8c:e7:c1:d4:97:d9:49:9b:7b:2b:6f:28:fd:80:
                    52:74:3a:ba:b6:57:c0:57:1a:98:e5:69:af:39:83:
                    73:3b:9d:56:17:9c:6c:4d:78:b4:31:05:06:5e:cd:
                    4a:12:89:90:11:9e:b3:5d:e9:d9:05:94:eb:d8:ba:
                    76:dd:78:d5:7f:a2:f8:6e:b1:1a:d8:53:a0:e8:14:
                    0a:f4:38:26:f3:e7:66:4b:6b:62:86:88:b4:12:1c:
                    96:19:8c:7b:23:da:12:79:be:7b:e4:b7:70:7e:d1:
                    2a:f8:ac:51:33:00:b2:60:73:73:fb:91:e6:0c:64:
                    50:6f:aa:69:5b:bf:7d:22:43:af:76:a4:c7:da:db:
                    bc:14:46:b7:70:8d:fc:3d:9c:59:af:38:4f:73:f0:
                    bc:13:81:88:4c:15:00:51:38:0e:10:ce:a3:81:f5:
                    c4:c5:8b:27:39:ce:12:a3:70:b5:31:c0:7d:7a:39:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:99:7B:43:94:F4:2D:63:30:99:72:CD:48:8D:D6:80:9F:D7:2A:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/C0997B4394F42D63309972CD488DD6809FD72A14.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.116.0/22
                IPv6:
                  2804:5dc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268991

    Signature Algorithm: sha256WithRSAEncryption
         21:d6:ea:85:be:e3:36:a9:05:c6:b4:2b:3d:f2:0f:1b:f3:31:
         87:5a:29:a2:89:3d:6d:8c:f8:20:f8:5b:9c:55:08:ff:96:22:
         8a:61:74:d6:ff:07:58:90:a2:49:47:61:8e:a3:ea:11:b1:a6:
         51:34:7c:2e:e3:4f:37:ba:b5:0a:2a:14:0c:a0:9f:56:ba:75:
         c2:3a:e1:36:8f:01:c0:63:aa:c1:8c:36:5d:ea:83:fa:0f:dd:
         6e:02:00:64:38:49:92:b0:b1:a6:cc:39:ee:e3:95:8e:59:35:
         96:9d:d0:b2:da:d0:12:ec:7d:3e:b6:87:0f:05:c4:14:95:94:
         16:53:3f:94:f8:cd:10:a6:86:b0:63:d2:55:88:94:98:e0:2f:
         c2:32:1d:bd:a0:00:a8:0b:cb:3f:14:8d:b3:09:7b:96:08:33:
         e1:ad:c7:11:21:b9:4d:12:33:9c:b2:b4:66:21:e6:c0:87:84:
         1e:59:82:fd:e7:64:3f:42:9a:c0:04:5b:69:9b:36:64:32:13:
         08:f0:20:de:db:fd:4d:14:69:5c:a7:6b:c4:2b:af:a9:70:ee:
         3c:39:3f:25:c5:f8:82:d3:85:a0:f3:0e:1f:cd:c7:d2:6f:bb:
         ea:7d:aa:a9:af:1d:52:7a:c7:aa:52:c3:3e:fb:35:12:83:e8:
         7d:9b:03:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----