Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C92D5FCE29D814D1C5C7388649DA4FBA2E5E356F.cer
File:                     C92D5FCE29D814D1C5C7388649DA4FBA2E5E356F.cer (raw, json)
Hash identifier:          fX30bKggCyPmrk0l9WUKFEUZK7dOIRrk0jsuuuE9+MM=
Subject key identifier:   C9:2D:5F:CE:29:D8:14:D1:C5:C7:38:86:49:DA:4F:BA:2E:5E:35:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3392E396DDDCD0CE5D7DC89E347C84A0E0EC3BE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/C92D5FCE29D814D1C5C7388649DA4FBA2E5E356F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Jan 2023 14:44:53 +0000
Certificate not after:    Thu 11 Jan 2024 14:49:53 +0000
Subordinate resources:    AS: 267219
                          IP: 45.231.212.0/23
                          IP: 2804:4a1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:92:e3:96:dd:dc:d0:ce:5d:7d:c8:9e:34:7c:84:a0:e0:ec:3b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 12 14:44:53 2023 GMT
            Not After : Jan 11 14:49:53 2024 GMT
        Subject: CN=C92D5FCE29D814D1C5C7388649DA4FBA2E5E356F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:25:90:48:e1:c7:64:b7:89:03:3a:e0:dc:50:
                    0e:e2:28:94:7e:9c:28:c2:c2:64:89:4c:f3:67:d3:
                    df:8b:16:0b:ca:81:c3:c7:43:a1:f4:47:7b:4b:74:
                    bc:a4:c6:50:83:7f:b0:88:96:1e:52:6f:3b:87:3b:
                    a6:e2:e9:8a:0c:9c:69:e1:cd:b2:19:15:f1:c0:c0:
                    f1:38:a3:63:18:65:8e:66:38:7f:96:9a:68:43:0c:
                    ff:a1:cf:50:72:b8:d9:59:62:f6:ee:59:3f:a6:18:
                    26:54:f1:0e:b5:ec:32:f3:0b:99:ed:b1:59:17:99:
                    19:b0:f0:65:64:8a:14:08:80:92:1d:f4:b9:ad:ea:
                    90:4e:84:9a:7c:5c:48:17:d5:23:52:35:42:88:f4:
                    f1:d1:f7:99:1f:40:c1:fe:8d:77:8d:d6:f3:03:8c:
                    dc:98:fc:10:d5:38:17:82:dc:b7:1f:b4:d7:63:92:
                    5a:91:c3:e4:3c:4e:2d:87:ae:ed:23:3b:68:73:8d:
                    f5:1e:cd:68:70:59:3f:08:f5:f0:8d:56:e6:a6:f3:
                    a5:d6:80:1c:4a:e3:e7:0a:4f:57:88:a5:a1:6b:a8:
                    47:a5:f5:b7:f6:da:5e:a6:ce:d3:24:bb:a0:75:5f:
                    50:2a:59:44:44:64:c4:cf:5c:2a:7e:d5:ac:22:00:
                    e2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:2D:5F:CE:29:D8:14:D1:C5:C7:38:86:49:DA:4F:BA:2E:5E:35:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/C92D5FCE29D814D1C5C7388649DA4FBA2E5E356F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.212.0/23
                IPv6:
                  2804:4a1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267219

    Signature Algorithm: sha256WithRSAEncryption
         86:de:b7:fc:2c:42:28:e7:92:0a:6a:20:f7:ae:85:bf:21:f7:
         e4:83:94:62:da:40:df:f6:d9:68:93:7c:f2:60:cb:e2:9b:30:
         77:63:2c:4e:b3:ed:17:1e:a2:e6:62:c6:50:5b:cf:c1:73:77:
         fa:d6:34:84:d1:b8:40:30:8e:8b:5c:b8:6b:ef:d3:70:54:f3:
         a9:78:1b:cc:5b:f2:d2:3a:72:1e:e7:da:57:89:11:29:9a:96:
         0c:97:1f:59:d2:d4:58:f9:ae:4c:8f:c2:cb:90:1a:ce:33:29:
         b5:96:30:73:0f:8b:a5:0d:e5:b4:d5:76:c6:ee:86:43:b3:01:
         45:39:48:71:0e:3c:26:ce:a2:e8:48:2d:49:d1:88:22:de:52:
         c1:3d:37:b9:ba:c3:1a:b8:36:28:cb:fe:9a:42:20:49:0b:e1:
         6a:52:b1:8f:5f:99:38:51:2e:38:1c:2e:2f:bb:3c:83:73:0a:
         19:28:c2:f0:b1:2b:46:07:56:dd:e0:4c:05:7e:0e:df:61:a9:
         c7:bf:4e:f7:ce:d2:5f:79:45:b2:24:26:c2:53:27:8e:27:a2:
         8a:87:03:45:aa:86:07:d8:42:66:c5:53:b4:ca:1f:2e:b3:15:
         86:5e:88:1c:58:2c:06:61:e0:b5:9c:56:9f:08:6c:47:46:57:
         16:9c:c9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----