Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer
File:                     C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer (raw, json)
Hash identifier:          TlqBpUkbJbyJP8Ais/Rq6vLNT8sfvqRDpk+r+gEzXp0=
Subject key identifier:   C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       325BF67025CB8F4DD6D552E2B8CE7C4E8344E852
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Mar 2023 21:15:12 +0000
Certificate not after:    Wed 20 Mar 2024 21:20:12 +0000
Subordinate resources:    AS: 262760
                          IP: 179.106.32.0/20
                          IP: 186.225.16.0/20
                          IP: 2804:414::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5b:f6:70:25:cb:8f:4d:d6:d5:52:e2:b8:ce:7c:4e:83:44:e8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 21:15:12 2023 GMT
            Not After : Mar 20 21:20:12 2024 GMT
        Subject: CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e4:b8:97:a8:20:f8:51:3b:38:85:38:ce:70:
                    c9:1e:29:a4:86:52:47:fe:e5:9d:53:33:ed:7e:d3:
                    4f:bd:a7:5f:35:e1:db:f0:d2:84:5e:e5:fe:0d:40:
                    64:ff:45:9c:d1:73:64:5d:27:38:ff:84:40:cf:f2:
                    aa:99:09:6b:f4:9e:80:3d:cb:66:9a:13:21:5e:01:
                    d2:d3:03:ed:8a:a3:09:60:0d:54:7a:60:ff:26:d3:
                    04:6e:92:94:c2:54:a9:31:eb:fd:44:78:f5:f7:ca:
                    54:b6:f2:c7:e7:63:fc:77:66:35:f5:2b:2e:7f:47:
                    9a:3a:9d:1b:f5:97:b4:f7:fc:32:57:2c:76:1c:aa:
                    aa:96:43:4c:2c:dd:27:63:23:2b:82:0c:ac:1f:e0:
                    5b:9e:28:81:8c:6b:1b:4f:78:51:a1:8b:53:f7:28:
                    14:c6:8d:91:de:95:09:17:5a:e7:ce:59:03:c0:a2:
                    17:da:3a:40:82:61:d5:f0:73:51:9e:fd:0e:e8:98:
                    48:f0:fe:2d:bc:f9:8c:72:d4:87:af:bf:15:b7:27:
                    75:ab:7a:d8:39:5a:5e:97:8a:02:f0:fc:79:12:e2:
                    8d:32:00:1e:59:d1:51:5f:51:72:d7:4f:ca:dc:8b:
                    f4:6d:92:84:b5:3e:64:9b:4f:fc:04:36:17:c9:b1:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.32.0/20
                  186.225.16.0/20
                IPv6:
                  2804:414::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262760

    Signature Algorithm: sha256WithRSAEncryption
         7b:8b:09:89:83:cb:94:31:c8:bd:21:4c:f8:01:af:ff:d3:de:
         4b:a4:63:2f:63:eb:05:05:ed:df:45:2a:73:d2:f3:78:fd:9e:
         d4:84:a8:17:ec:a8:dc:b8:9f:59:6a:e4:69:cf:11:82:c1:89:
         f6:7b:e2:5b:85:b3:a8:60:84:8f:95:43:f8:85:8b:eb:ef:8a:
         31:10:52:c4:93:95:8d:68:d9:10:a3:1d:2e:49:58:b1:b1:11:
         49:de:cb:46:e9:2c:aa:14:aa:aa:3f:43:46:75:82:c5:7c:8c:
         24:dd:82:f8:93:60:07:32:3b:85:f9:0b:c8:f8:2d:4f:05:c7:
         44:26:1d:88:55:8e:29:61:b4:7a:dc:a7:e4:36:55:5e:05:6a:
         0b:6b:8a:b8:ae:f5:4c:80:65:e4:1c:2f:81:8c:72:a1:c8:ce:
         42:e4:c9:11:df:be:94:ff:6f:80:ba:c8:1a:96:6a:f0:c4:87:
         d1:18:f6:8e:c4:1d:68:0b:99:70:1c:ef:5b:7b:4c:0e:4c:de:
         20:a0:ff:1b:50:41:54:40:7b:5e:a3:0c:df:fd:5e:83:10:73:
         98:12:b8:fe:83:75:d6:3f:1f:13:d9:52:a7:9b:b0:44:4f:ed:
         c8:44:1d:e6:b6:59:14:f9:4e:a7:b3:07:2b:aa:2c:35:f4:c6:
         81:93:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----