Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CA5C3CE8228F868189611C8BAB39E9818D40F794.cer
File:                     CA5C3CE8228F868189611C8BAB39E9818D40F794.cer (raw, json)
Hash identifier:          CeEaZ4RBkHBx3tuic/V75UVCD+gI5S8hqgb3S/ltvXQ=
Subject key identifier:   CA:5C:3C:E8:22:8F:86:81:89:61:1C:8B:AB:39:E9:81:8D:40:F7:94
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A9752B56C651A1E31521CC351D12A8D2CC32E97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/CA5C3CE8228F868189611C8BAB39E9818D40F794.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Feb 2023 16:07:02 +0000
Certificate not after:    Mon 19 Feb 2024 16:12:02 +0000
Subordinate resources:    AS: 272578
                          IP: 45.173.21.0/24
                          IP: 2804:856c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:97:52:b5:6c:65:1a:1e:31:52:1c:c3:51:d1:2a:8d:2c:c3:2e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 16:07:02 2023 GMT
            Not After : Feb 19 16:12:02 2024 GMT
        Subject: CN=CA5C3CE8228F868189611C8BAB39E9818D40F794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:70:fb:ba:83:58:d3:01:88:e4:a4:63:d4:
                    b6:ba:1f:06:22:b8:91:e8:38:9d:c2:91:d6:d5:ee:
                    8b:e8:e7:7b:60:a1:b8:e6:89:73:64:85:7e:a3:59:
                    8d:66:76:59:d0:6d:e1:c6:d3:da:5e:61:b3:a8:d8:
                    a5:4d:05:95:4b:74:3d:39:72:6e:c2:ba:86:0d:e6:
                    e5:6a:21:fb:1f:54:9d:1b:23:fe:3d:92:80:be:f3:
                    d6:bb:fc:32:37:a7:37:37:63:10:ec:7c:2f:da:d9:
                    4b:ee:f1:cf:d9:c5:15:93:fc:ab:fe:47:5a:28:f9:
                    f8:ff:b1:4b:83:cc:72:d7:84:08:db:9a:4c:1c:b1:
                    f6:8f:e4:6f:30:c1:c1:70:13:b1:4a:9b:7d:22:17:
                    a7:e1:92:87:57:b1:22:4c:d8:b5:af:9a:63:00:55:
                    a5:16:ac:f6:6d:e1:61:83:89:11:0d:1f:bd:a2:40:
                    62:16:ec:9c:d4:03:00:28:ee:be:6d:f7:c6:f4:5f:
                    2c:e3:b4:46:67:28:47:80:15:04:01:e2:56:4e:6f:
                    23:8c:1a:b9:41:01:a8:38:68:be:97:48:af:ec:55:
                    80:b4:42:55:20:3b:93:93:15:76:d3:df:f0:ff:e8:
                    53:9c:b0:95:c1:1b:77:26:1d:47:1e:13:d0:c4:14:
                    9f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:5C:3C:E8:22:8F:86:81:89:61:1C:8B:AB:39:E9:81:8D:40:F7:94
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/CA5C3CE8228F868189611C8BAB39E9818D40F794.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.21.0/24
                IPv6:
                  2804:856c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272578

    Signature Algorithm: sha256WithRSAEncryption
         57:62:fa:9d:1f:87:d1:09:ee:6b:13:b8:ea:be:71:20:a5:59:
         dc:1b:03:14:2a:a4:b7:f0:d4:8d:d5:9a:4b:0a:38:a4:da:5a:
         5b:7e:06:ac:29:f8:77:91:0e:19:2f:87:15:69:50:d1:f7:5c:
         9e:f5:b1:34:eb:ee:14:69:d9:59:a5:d7:2e:ba:15:ef:82:a7:
         07:30:76:62:b5:71:af:0a:4e:64:ae:76:77:d9:ce:bc:e3:af:
         98:74:e6:2e:c8:9b:c6:ee:cf:e3:fd:0b:70:49:5d:e0:76:ea:
         20:f0:36:3d:4f:76:32:b8:e1:b8:62:71:46:09:c2:9b:0c:0a:
         90:30:93:e6:87:9e:cc:39:cb:c5:b0:ed:9d:4b:84:f1:aa:bb:
         e0:1e:64:d9:fe:f0:22:5d:0f:06:dc:ab:7d:e5:a7:3e:5f:bf:
         ab:20:98:70:a6:dd:6f:e3:05:3c:07:f6:74:f1:64:9c:94:d1:
         98:81:6e:23:8d:ef:03:e3:71:e4:f9:70:fc:ad:a5:33:42:cc:
         04:cf:74:76:5a:7e:72:c3:48:86:25:2e:00:56:4e:13:4a:89:
         e8:ca:9b:53:65:47:31:82:99:e3:5a:ea:6a:f8:33:2b:7e:b9:
         79:22:a2:78:e9:7a:b7:70:8c:e4:aa:66:fd:49:73:38:7d:29:
         1e:f8:fb:de
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUGpdStWxlGh4xUhzDUdEqjSzDLpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMjAxNjA3MDJaFw0yNDAyMTkxNjEyMDJaMDMxMTAvBgNV
BAMTKENBNUMzQ0U4MjI4Rjg2ODE4OTYxMUM4QkFCMzlFOTgxOEQ0MEY3OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+nD7uoNY0wGI5KRj1La6HwYi
uJHoOJ3CkdbV7ovo53tgobjmiXNkhX6jWY1mdlnQbeHG09peYbOo2KVNBZVLdD05
cm7CuoYN5uVqIfsfVJ0bI/49koC+89a7/DI3pzc3YxDsfC/a2Uvu8c/ZxRWT/Kv+
R1oo+fj/sUuDzHLXhAjbmkwcsfaP5G8wwcFwE7FKm30iF6fhkodXsSJM2LWvmmMA
VaUWrPZt4WGDiRENH72iQGIW7JzUAwAo7r5t98b0XyzjtEZnKEeAFQQB4lZObyOM
GrlBAag4aL6XSK/sVYC0QlUgO5OTFXbT3/D/6FOcsJXBG3cmHUceE9DEFJ8JAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKXDzoIo+GgYlh
HIurOemBjUD3lDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EZEpnQWM5anJXdXlBcTFCNGtCVlVxWktwNDJxOWV2b0Fh
S296dEwzaWRUdi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EZEpnQWM5anJXdXlBcTFCNGtCVlVxWktwNDJxOWV2b0Fh
S296dEwzaWRUdi8wL0NBNUMzQ0U4MjI4Rjg2ODE4OTYxMUM4QkFCMzlFOTgxOEQ0
MEY3OTQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC2tFTANBAIAAjAHAwUA
KASFbDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKMIwDQYJKoZIhvcNAQELBQAD
ggEBAFdi+p0fh9EJ7msTuOq+cSClWdwbAxQqpLfw1I3VmksKOKTaWlt+Bqwp+HeR
DhkvhxVpUNH3XJ71sTTr7hRp2Vml1y66Fe+CpwcwdmK1ca8KTmSudnfZzrzjr5h0
5i7Im8buz+P9C3BJXeB26iDwNj1PdjK44bhicUYJwpsMCpAwk+aHnsw5y8Ww7Z1L
hPGqu+AeZNn+8CJdDwbcq33lpz5fv6sgmHCm3W/jBTwH9nTxZJyU0ZiBbiON7wPj
ceT5cPytpTNCzATPdHZafnLDSIYlLgBWThNKiejKm1NlRzGCmeNa6mr4Myt+uXki
onjperdwjOSqZv1Jczh9KR74+94=
-----END CERTIFICATE-----