Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A.cer
File:                     C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A.cer (raw, json)
Hash identifier:          9+NisOZpTGPpw3LAsKI3DGeNaUe4NhgPzCi27tZIEAc=
Subject key identifier:   C7:B9:97:B2:4F:DE:6C:2E:BF:7B:46:89:9A:8F:BB:AB:48:CB:63:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       036EE67B3E4B8E81BE9671E37FE22EB9BC8B2FC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Nov 2023 16:51:15 +0000
Certificate not after:    Fri 22 Nov 2024 16:56:15 +0000
Subordinate resources:    AS: 268537
                          IP: 45.162.176.0/22
                          IP: 2804:52b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6e:e6:7b:3e:4b:8e:81:be:96:71:e3:7f:e2:2e:b9:bc:8b:2f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 16:51:15 2023 GMT
            Not After : Nov 22 16:56:15 2024 GMT
        Subject: CN=C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:61:8d:94:98:32:4d:e9:c5:8b:a5:d2:ef:
                    4c:aa:a9:1a:c3:37:64:ca:66:ec:87:ff:69:25:76:
                    18:e2:5c:9e:6d:b1:44:d1:eb:35:60:47:a8:27:9f:
                    b7:43:0b:6d:2e:3e:fa:7b:f3:40:eb:df:b4:2a:b8:
                    b0:f6:47:f2:6d:fc:8f:a2:2b:ca:1a:27:08:bb:62:
                    71:66:29:16:2f:be:4b:22:5c:c3:04:f8:63:68:4a:
                    55:b0:98:e9:54:18:44:f9:a2:ec:f7:27:72:23:3c:
                    21:05:4b:37:75:d8:6f:ae:09:77:ea:59:07:5b:be:
                    0b:9f:28:54:21:c2:fb:86:af:9f:85:2b:45:f8:9d:
                    b5:70:a9:70:23:63:0e:58:8f:d2:35:06:8c:1a:42:
                    f4:f0:62:c4:8d:e4:c7:7a:f8:5e:40:d9:88:56:8a:
                    f3:c4:fe:57:df:b2:ab:44:96:84:44:ba:49:6f:7c:
                    80:e9:52:5f:96:e2:7c:51:d7:69:24:bd:ad:01:86:
                    38:e9:e5:80:26:18:bd:f1:79:d8:08:9d:55:39:6d:
                    1b:96:7f:96:20:38:57:9c:17:c1:85:03:80:ba:92:
                    13:c5:2d:38:dd:58:3e:b3:9b:45:54:86:c5:77:92:
                    d2:97:d5:bd:96:ed:44:b2:14:78:c1:a6:ba:8d:69:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:B9:97:B2:4F:DE:6C:2E:BF:7B:46:89:9A:8F:BB:AB:48:CB:63:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.176.0/22
                IPv6:
                  2804:52b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268537

    Signature Algorithm: sha256WithRSAEncryption
         39:ec:b1:1a:11:f0:ef:07:4d:a8:33:c0:9d:56:56:6a:11:34:
         b3:11:0e:52:a6:65:9c:4c:08:5a:6f:d1:93:ab:92:08:c5:c7:
         2e:4b:00:8b:37:33:39:2f:37:0e:c5:6e:55:0d:aa:6c:ab:7d:
         3d:4a:b9:89:44:30:a8:f9:ac:7e:d9:e4:4b:19:05:1d:86:4d:
         38:26:22:a3:a1:c8:0c:0c:74:17:95:22:b0:44:9b:19:26:95:
         68:e8:2d:54:22:6b:23:7b:cd:08:2b:24:c1:01:71:1d:84:a7:
         5c:61:6b:23:3d:00:7f:61:ec:26:99:06:72:68:5a:ae:1e:54:
         12:6e:10:bf:cf:b9:a9:35:c8:53:8d:68:18:09:95:ea:03:4a:
         33:c0:79:e0:19:1f:6d:46:88:31:f3:32:01:91:4e:07:94:79:
         5a:23:cb:e9:67:79:4f:38:2f:60:5d:c6:7e:b4:e2:66:c5:d2:
         92:23:e0:d4:4b:25:10:c0:75:03:d6:f4:0d:b6:ee:aa:6d:99:
         ec:3e:f9:79:04:de:4e:b2:61:ff:59:44:21:96:ec:d3:1b:8d:
         b4:ad:15:ba:5a:b5:68:d0:69:74:dc:4a:6e:6c:e1:9f:dd:df:
         02:93:84:82:8b:b4:61:5f:1a:6e:e6:e9:cc:95:33:d9:1f:e3:
         71:d5:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----