Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.cer
File:                     C32C4CF5306FA1777F8B122237D098922FCFDEB9.cer (raw, json)
Hash identifier:          eRmOFYa/EGjOy5Qd8YMwh5ss7DjbpthVJogFgE9i9zw=
Subject key identifier:   C3:2C:4C:F5:30:6F:A1:77:7F:8B:12:22:37:D0:98:92:2F:CF:DE:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6088CBB86960E9D668044CF35BADAA6E6196B45B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Jun 2023 23:28:28 +0000
Certificate not after:    Thu 20 Jun 2024 23:33:28 +0000
Subordinate resources:    AS: 263159
                          IP: 177.93.160.0/21
                          IP: 2804:179c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:88:cb:b8:69:60:e9:d6:68:04:4c:f3:5b:ad:aa:6e:61:96:b4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 22 23:28:28 2023 GMT
            Not After : Jun 20 23:33:28 2024 GMT
        Subject: CN=C32C4CF5306FA1777F8B122237D098922FCFDEB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:98:57:e8:89:6d:23:7e:5b:37:23:ab:85:
                    25:b9:d4:18:51:ea:f7:7f:fd:d3:78:6e:35:39:91:
                    01:63:cc:2b:ce:bb:cb:10:80:ba:72:76:68:09:0d:
                    47:c7:83:c7:17:56:06:e4:89:5e:48:f2:aa:1d:8f:
                    0c:5f:a2:14:5c:62:8c:48:17:ff:6c:2a:d0:7a:78:
                    f2:ea:56:b5:84:2f:c0:9e:2f:8e:03:1c:22:ff:56:
                    53:cd:f4:d4:c5:90:de:1a:a0:1e:b7:2c:35:56:98:
                    6e:bf:61:0d:23:2c:65:88:80:0c:f8:6a:62:12:dc:
                    bd:ad:0f:5b:fa:23:df:e4:d6:c2:9d:4a:96:a1:a7:
                    1b:b6:98:f1:19:fc:f7:bb:ca:4e:ad:80:47:7b:20:
                    0e:8b:8a:66:65:47:ba:50:74:34:77:a6:6a:63:a5:
                    86:c0:c2:c3:e3:9e:35:bf:62:53:4e:63:6e:0f:e9:
                    35:f7:93:f2:74:70:64:c6:db:40:4e:ff:8e:7b:97:
                    c0:df:f9:68:b5:78:92:98:b2:0b:8a:b0:25:86:a7:
                    1b:1c:67:43:a3:9f:a6:0e:7e:ba:9d:09:b0:f1:bf:
                    72:7b:4c:83:ea:a9:fe:07:45:9b:45:06:97:86:f8:
                    38:aa:5a:4b:15:10:3d:3e:7c:9f:7e:02:7a:11:cd:
                    71:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:2C:4C:F5:30:6F:A1:77:7F:8B:12:22:37:D0:98:92:2F:CF:DE:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.160.0/21
                IPv6:
                  2804:179c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263159

    Signature Algorithm: sha256WithRSAEncryption
         64:f0:06:e3:5a:eb:8e:b5:97:b6:e4:4a:1a:07:56:a8:b7:45:
         b4:7e:68:1b:42:71:71:91:2a:11:46:3f:22:7f:07:7c:2d:e0:
         9f:a6:1c:01:a4:39:2a:c8:52:9b:35:ea:47:9a:d4:99:75:dd:
         d1:5b:39:84:4d:05:54:97:64:02:f6:92:ee:a9:17:4b:e8:19:
         f5:0f:a5:d1:d0:4a:b7:a6:de:5d:38:d0:5b:dc:76:2c:29:88:
         b0:d5:63:48:94:c2:d9:2a:10:69:08:8a:ed:6f:4c:f0:aa:fb:
         2e:5a:9d:8e:e1:01:ee:f1:bc:83:62:7f:a1:fb:6b:5a:58:1e:
         2a:ef:6c:5b:01:5c:5d:5d:eb:3f:85:ca:f8:68:9c:ef:7f:9c:
         29:c2:bf:bf:5c:6b:24:79:46:30:3f:72:91:cd:ea:d2:d8:32:
         3b:6c:12:64:3e:0b:97:43:76:2b:9c:b9:60:69:38:bb:5e:3d:
         b3:0c:09:8e:06:56:e2:57:a0:da:ce:69:63:c7:02:89:84:4c:
         91:2a:20:ee:8b:15:0f:65:56:70:95:4c:07:f5:c5:ed:49:6d:
         7f:fc:bc:86:9c:20:26:fe:b8:cc:16:29:5e:9c:fc:72:f7:c0:
         dc:78:8c:68:6d:59:46:62:f7:1f:df:28:3d:1a:81:cf:06:91:
         74:6f:49:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----