Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C561F2EF07E91BA3D510B1A625AB95066D362AD7.cer
File:                     C561F2EF07E91BA3D510B1A625AB95066D362AD7.cer (raw, json)
Hash identifier:          ESzqZbnJgK9bWqLYimzXzqzHoXDbHb0o31LfXmy0/2U=
Subject key identifier:   C5:61:F2:EF:07:E9:1B:A3:D5:10:B1:A6:25:AB:95:06:6D:36:2A:D7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       454A436030A523780E2A2F19BE9FBD831899826F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/C561F2EF07E91BA3D510B1A625AB95066D362AD7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 31 Jan 2023 17:18:30 +0000
Certificate not after:    Tue 30 Jan 2024 17:23:30 +0000
Subordinate resources:    AS: 264192
                          IP: 138.97.152.0/22
                          IP: 2804:23f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4a:43:60:30:a5:23:78:0e:2a:2f:19:be:9f:bd:83:18:99:82:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 17:18:30 2023 GMT
            Not After : Jan 30 17:23:30 2024 GMT
        Subject: CN=C561F2EF07E91BA3D510B1A625AB95066D362AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:24:2f:ea:75:1a:c4:2b:ce:3e:32:b9:1a:c8:
                    ed:55:a7:4e:31:42:d7:df:8a:e0:43:24:a8:66:02:
                    57:b0:f0:fe:fe:ed:95:55:66:50:d3:7b:53:85:c7:
                    4d:10:c8:91:46:e9:b7:e0:e4:5e:dd:89:78:cd:bd:
                    fc:92:9f:f3:03:31:c1:e8:cb:d8:1f:df:ee:88:4a:
                    5d:c1:4d:f6:df:6e:07:41:75:5d:ed:07:e5:ea:88:
                    52:44:7e:f9:f1:50:f2:40:15:63:fb:42:02:49:71:
                    5e:e9:e8:2e:be:0b:62:50:1a:6d:c4:53:e0:e3:b2:
                    41:4c:d7:0c:c8:75:32:3a:f0:43:81:c1:75:44:e1:
                    70:4a:45:e4:cf:d8:7c:fd:3e:92:01:30:94:60:ff:
                    44:7f:5d:cf:f8:b8:31:9a:8f:78:c4:9b:4f:db:98:
                    ce:66:ee:a5:47:2e:7c:ea:55:4b:a0:73:d2:43:6a:
                    6b:ed:3f:fa:64:2f:6c:d6:11:13:c2:67:a3:7d:3e:
                    e4:3f:25:e4:95:c0:5a:94:bf:a9:31:73:ba:1e:a8:
                    a4:dd:2a:c0:c0:09:0a:29:af:c8:ea:0d:d5:ab:56:
                    52:a4:c5:1b:45:ce:73:ef:92:47:b4:4d:03:15:ab:
                    c2:4f:08:7d:82:bb:10:45:b9:1f:cd:13:ec:ba:ef:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:61:F2:EF:07:E9:1B:A3:D5:10:B1:A6:25:AB:95:06:6D:36:2A:D7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/C561F2EF07E91BA3D510B1A625AB95066D362AD7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.152.0/22
                IPv6:
                  2804:23f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264192

    Signature Algorithm: sha256WithRSAEncryption
         ad:99:40:8f:e5:7e:28:96:52:67:57:ef:3c:a4:55:f9:1e:1f:
         d1:f3:71:4e:2b:e7:99:4e:50:36:b6:7e:2f:61:75:21:41:27:
         5b:c3:63:a6:00:fe:e2:f5:e3:cf:3e:05:e5:98:98:53:11:1c:
         ad:5e:38:97:26:03:d7:c5:f9:59:9d:da:4d:5b:64:cc:6e:d9:
         09:10:b0:c3:e8:3c:4a:ce:3a:a7:a6:2e:d7:84:e7:78:05:c3:
         7f:57:11:7f:23:1f:8f:3d:f5:d8:87:4e:0e:4b:b3:32:7a:c3:
         df:a4:b1:4b:2b:0d:5f:3d:23:27:ad:ba:15:8f:23:95:a6:07:
         70:a3:a8:c5:95:f9:ed:7e:62:6d:a7:62:a2:16:b0:01:e8:46:
         9b:65:29:ef:41:94:cf:2c:83:02:b3:37:f4:82:5c:59:76:0c:
         4e:cc:0b:1a:6c:0c:66:29:ba:df:85:b4:09:ac:77:c2:85:71:
         6e:16:31:a4:cc:45:a9:32:b8:be:bd:65:ad:a1:9e:13:25:b8:
         1c:d8:b1:e3:54:63:3c:78:32:7f:d5:8c:c3:66:9e:81:45:ee:
         3e:97:06:be:23:7b:a3:1d:4e:22:17:28:35:8d:f2:02:56:98:
         67:96:d1:c6:09:30:6a:45:71:55:90:b9:9f:e6:78:bf:2a:14:
         5a:a9:bf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----