Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.cer
File:                     C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.cer (raw, json)
Hash identifier:          Wb+qfZ3JySHFn32h2UMpYk65WT5v3L3s0Ir2h+PKgvM=
Subject key identifier:   C4:0E:E4:EB:2A:E8:7D:ED:80:AE:96:46:F1:8D:1D:0E:9E:56:CB:E6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0CB53877A7A42BDBACADF0A0A262EB09B2B2A3D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 02:56:10 +0000
Certificate not after:    Wed 04 Dec 2024 03:01:10 +0000
Subordinate resources:    AS: 268928
                          IP: 45.176.12.0/22
                          IP: 2804:5cc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b5:38:77:a7:a4:2b:db:ac:ad:f0:a0:a2:62:eb:09:b2:b2:a3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 02:56:10 2023 GMT
            Not After : Dec  4 03:01:10 2024 GMT
        Subject: CN=C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5d:3e:80:cd:13:97:b4:42:14:26:c1:6d:0e:
                    ea:15:1d:6e:cc:6d:f9:2e:3b:4e:49:6c:3f:6e:ae:
                    5c:e0:8b:20:67:67:04:c7:6f:31:9d:3d:d9:98:70:
                    6d:04:d0:35:37:00:12:d8:fd:39:33:51:4a:c1:54:
                    72:6f:e7:a5:84:2f:42:66:a8:22:58:b3:7e:ce:f8:
                    52:bd:11:4b:33:3b:8e:f5:f1:a6:c4:aa:41:2a:4d:
                    9a:d0:67:26:c2:4b:88:96:48:f6:a0:a7:cb:2b:ff:
                    36:be:9e:e7:33:6c:ec:cb:2a:27:0c:ec:89:2e:fc:
                    e2:6c:55:ec:07:d4:f0:aa:78:c2:8a:7c:6d:e3:37:
                    2c:f0:9f:f1:cb:76:61:dd:45:d8:63:8e:78:e8:f7:
                    1e:b0:01:94:5a:1e:48:99:ae:25:8c:66:90:bf:43:
                    0c:0c:22:67:70:25:3f:b6:98:d8:f4:07:f7:48:7d:
                    5f:86:2b:a4:1b:63:e9:d5:72:9d:44:5e:e2:00:74:
                    79:96:f3:5a:d3:ca:d4:e3:bf:a3:94:9f:59:f6:3b:
                    52:a1:4d:46:15:57:4c:4f:66:9e:b0:4c:20:c5:f3:
                    35:e6:ba:fd:e7:40:71:37:7b:31:c4:62:ea:a2:94:
                    94:0b:fe:4f:ce:71:46:dd:71:07:24:5a:9a:dc:9a:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:0E:E4:EB:2A:E8:7D:ED:80:AE:96:46:F1:8D:1D:0E:9E:56:CB:E6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.12.0/22
                IPv6:
                  2804:5cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268928

    Signature Algorithm: sha256WithRSAEncryption
         0f:b7:e3:42:ae:4e:41:b3:d4:db:e3:fb:d6:82:6c:ab:dc:6f:
         68:79:51:34:a2:73:10:58:05:f0:26:10:b8:60:05:63:0d:7d:
         61:1f:3a:15:d7:fc:97:88:5d:22:2f:80:8e:60:c7:87:71:fe:
         a6:8e:c7:6d:57:35:cf:de:e3:19:ac:5a:8b:63:cd:6c:19:06:
         6a:56:03:3e:f3:6b:bd:e1:58:96:36:24:08:e7:b1:9c:17:c1:
         09:23:14:74:4a:b1:f4:c3:4d:5e:91:86:ed:48:b3:2f:4b:67:
         75:87:09:2b:f9:05:81:b2:ee:26:c6:e7:b8:3b:b8:aa:bd:46:
         5f:e0:ff:b9:cf:45:eb:cd:59:e7:1d:52:9f:d2:a4:ae:b8:f5:
         2b:64:a2:75:4a:ea:89:86:88:65:7c:b0:b6:54:0b:d0:26:e9:
         92:07:a0:f8:51:1e:43:ff:84:a8:ea:64:bc:d8:69:77:c8:ef:
         79:21:04:b1:bd:d2:18:51:5f:f9:f8:25:4b:5f:e0:7a:6d:5f:
         bd:5a:dc:11:87:7a:a4:1c:77:b5:c6:90:f1:ee:03:92:fe:c4:
         25:58:db:e7:cc:2a:8e:0d:a7:4d:2e:e4:8b:35:b9:76:e4:65:
         3d:ba:2e:75:a7:2d:e9:8a:62:91:aa:96:7f:ec:db:c7:09:00:
         e7:8e:7c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----