Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C51858E8D4958BCC02DD1522A66C2DE642AF8AAE.cer
File:                     C51858E8D4958BCC02DD1522A66C2DE642AF8AAE.cer (raw, json)
Hash identifier:          0ivVZOLBEnsxdOmSqJRtPo+cYViLStShKJp1b0WoPzE=
Subject key identifier:   C5:18:58:E8:D4:95:8B:CC:02:DD:15:22:A6:6C:2D:E6:42:AF:8A:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FE064573E2A1E853967341BC2E9F865B27FD6E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/C51858E8D4958BCC02DD1522A66C2DE642AF8AAE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Sep 2023 12:45:30 +0000
Certificate not after:    Sat 07 Sep 2024 12:50:30 +0000
Subordinate resources:    AS: 267585
                          IP: 45.70.192.0/22
                          IP: 2804:43b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e0:64:57:3e:2a:1e:85:39:67:34:1b:c2:e9:f8:65:b2:7f:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  9 12:45:30 2023 GMT
            Not After : Sep  7 12:50:30 2024 GMT
        Subject: CN=C51858E8D4958BCC02DD1522A66C2DE642AF8AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:62:95:6f:40:af:00:cf:f3:f9:8f:1f:75:
                    5e:15:d4:c6:78:42:21:3f:a5:f3:34:25:33:da:38:
                    30:69:e4:c9:f2:3d:63:24:ad:e5:1f:5e:74:c0:82:
                    b2:53:f7:4e:35:73:2d:d5:56:82:c8:47:5b:7f:b3:
                    5b:37:3e:2f:ae:30:71:75:09:2d:09:dd:d7:e5:d4:
                    ba:c2:7d:6e:cf:fc:98:8d:c6:0d:6a:b9:50:45:ef:
                    36:80:40:31:77:f2:49:c2:4d:71:cc:77:3e:b4:57:
                    a6:4e:ab:51:84:b1:c9:b2:64:f8:a7:92:fc:09:c5:
                    e3:7c:30:3b:cb:f6:81:03:e9:e0:8f:35:c5:08:52:
                    71:15:7e:94:0e:23:62:4d:e1:02:b5:09:7e:c6:34:
                    f9:f3:bc:d7:4a:cf:03:61:7c:9a:86:76:14:44:5d:
                    87:14:97:d3:46:f2:f2:ca:11:77:19:a1:20:95:b8:
                    98:09:f0:d2:17:03:60:0b:e8:91:f8:a0:41:fb:e8:
                    4c:41:06:5c:dc:a4:d2:e6:77:bc:0f:45:06:a3:5f:
                    ea:83:35:ec:49:23:af:18:b9:ed:b4:66:ad:4b:a2:
                    04:69:0c:7f:17:d8:2a:e4:d6:f9:ef:b8:db:00:3b:
                    b9:aa:be:28:c4:0e:6c:63:0b:23:aa:d1:ac:1a:9f:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:18:58:E8:D4:95:8B:CC:02:DD:15:22:A6:6C:2D:E6:42:AF:8A:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/C51858E8D4958BCC02DD1522A66C2DE642AF8AAE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.192.0/22
                IPv6:
                  2804:43b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267585

    Signature Algorithm: sha256WithRSAEncryption
         1b:a7:63:73:24:9b:d8:05:cc:95:8b:85:91:b0:bf:1a:26:a2:
         34:a9:f2:38:54:27:79:3f:5c:9e:da:74:4a:1b:8e:4d:dd:37:
         5b:ef:5c:6a:3b:49:af:d9:61:f5:a5:aa:79:7c:e2:0c:71:5a:
         89:50:8b:7e:93:e7:6f:a7:46:1f:9f:f3:46:51:94:63:57:d5:
         12:bd:6b:e9:56:81:02:80:b3:a2:d1:1e:29:4d:bc:65:2b:ae:
         be:aa:af:42:b3:1f:88:f8:2f:93:8c:a3:15:49:92:69:f3:ae:
         6c:87:d2:71:c0:62:c6:a7:97:d2:84:09:7f:53:0b:70:fe:1a:
         95:03:03:85:9d:78:91:75:b5:ab:d8:3c:e0:14:a3:a4:1a:bd:
         d7:9b:ce:dc:35:fe:31:9b:c0:26:e4:73:f9:60:f8:26:e8:31:
         e2:34:b5:f9:cb:68:e8:a2:6c:8a:78:97:b1:44:6b:be:95:d0:
         77:7f:cd:4d:93:7a:27:eb:ba:89:c5:f8:86:24:7b:87:d3:ff:
         ca:ac:d2:5a:55:33:9d:0d:b6:36:b4:ca:01:f3:0d:1b:23:eb:
         a7:6d:73:29:b4:e1:e5:68:25:7d:e2:66:ae:6e:4f:9d:c0:cd:
         59:2d:2c:6c:52:c2:b2:a2:7b:5e:60:e4:81:46:c4:32:c2:9c:
         ab:82:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----