Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer
File:                     C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer (raw, json)
Hash identifier:          W+SDwtvVIeYJ5BkU8PX6zrdqt82ct/+O2VmTW9xXSHQ=
Subject key identifier:   C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       300D1E2DEBC52C3472147D60BAC8D0DE17CA394E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Jun 2023 19:01:25 +0000
Certificate not after:    Fri 14 Jun 2024 19:06:25 +0000
Subordinate resources:    AS: 269539
                          IP: 45.187.160.0/22
                          IP: 2804:662c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0d:1e:2d:eb:c5:2c:34:72:14:7d:60:ba:c8:d0:de:17:ca:39:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 16 19:01:25 2023 GMT
            Not After : Jun 14 19:06:25 2024 GMT
        Subject: CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:73:62:dc:22:7a:d9:b5:97:44:3c:d7:91:f9:
                    73:d8:ad:60:4a:ad:1b:69:f9:70:f3:de:25:b1:34:
                    a8:81:77:2f:8e:9d:61:bd:ef:36:f9:e7:38:56:a2:
                    d0:35:ed:4a:88:85:84:75:62:a8:6f:e7:37:79:e9:
                    9b:93:67:e8:3b:59:f3:6e:2a:9d:13:ec:6d:22:f8:
                    6a:23:05:5f:c8:b7:39:2e:d7:99:45:dd:e3:d1:74:
                    d4:93:bd:ff:a7:d2:67:c8:2a:0c:83:73:89:e8:25:
                    36:66:13:db:8a:4d:26:6e:fd:7c:a3:55:6c:bf:00:
                    9e:63:e6:76:60:8e:5e:82:9b:22:a5:3e:2b:31:63:
                    01:38:af:6d:e7:2a:98:ee:bf:92:50:b2:3e:34:d8:
                    a5:1b:20:64:0a:d5:6d:fb:98:3f:cd:0c:60:76:ef:
                    76:0c:f8:13:e8:14:9a:3b:ff:8d:06:5b:8e:2b:1a:
                    f2:d4:f8:07:50:32:e1:9a:1a:64:49:c3:f0:1c:35:
                    a1:e0:38:73:25:ad:7e:b6:cf:9d:4e:0e:2a:36:4f:
                    11:1f:c4:10:80:e9:2f:6c:03:ad:7c:1e:07:8b:a3:
                    d1:7b:b2:f8:a7:ad:3e:df:fe:60:05:c5:bd:7d:06:
                    bc:71:71:b4:d4:19:c3:a1:f0:bc:d7:3b:fb:b7:cb:
                    fc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.160.0/22
                IPv6:
                  2804:662c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269539

    Signature Algorithm: sha256WithRSAEncryption
         63:aa:a0:49:60:d0:f3:78:98:e4:41:b3:fb:6d:ec:23:ac:9e:
         fc:a0:15:c1:6d:da:04:36:8c:04:d7:03:84:ee:96:94:7d:0f:
         9c:35:b8:f5:67:ea:ea:e4:7c:db:0d:69:dc:36:31:ab:e8:c8:
         ab:5b:35:f6:16:90:dc:f2:75:10:bf:c7:95:2f:9d:cc:4a:ec:
         37:e0:1d:0c:f2:11:fa:00:49:06:e7:b6:ed:d8:dc:2c:11:4f:
         5f:51:cc:8a:ff:01:37:f1:81:85:68:a9:1c:01:f7:cb:c1:70:
         21:4c:e5:b8:c4:dc:71:a2:a1:5b:79:7c:2e:f4:b0:64:aa:08:
         33:6c:e0:d3:74:71:fa:52:ac:7a:0e:dd:a2:66:dd:ef:e6:44:
         1c:ef:82:d8:87:ed:28:9f:44:14:39:64:c4:86:86:83:57:53:
         5d:59:52:dd:81:b5:85:3d:96:24:a6:2e:a4:2a:1b:fe:73:76:
         31:14:03:89:eb:34:3e:b5:a7:f5:90:44:32:c6:4e:48:4f:21:
         f3:b2:85:74:01:38:93:07:83:b7:f3:d6:66:a8:e1:60:6e:96:
         0f:69:59:4c:69:bf:92:66:09:d1:c2:bc:08:06:ea:e1:0a:79:
         81:5d:e3:c1:75:8b:c4:9e:ef:3d:f0:c2:e6:12:86:3e:e8:6e:
         59:40:ee:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----