Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CA7BD435419921E9B64C08B38696678579117B8F.cer
File:                     CA7BD435419921E9B64C08B38696678579117B8F.cer (raw, json)
Hash identifier:          Ey0oNPHWvcrkf9eK89YYM2Qjjkk0Uvz/Sj44OF1M71M=
Subject key identifier:   CA:7B:D4:35:41:99:21:E9:B6:4C:08:B3:86:96:67:85:79:11:7B:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       73C60BDD0427946B1614C772DC828F0AB32CD947
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/CA7BD435419921E9B64C08B38696678579117B8F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 09 Oct 2022 07:32:56 +0000
Certificate not after:    Sun 08 Oct 2023 07:37:56 +0000
Subordinate resources:    AS: 268138
                          IP: 45.168.64.0/22
                          IP: 2804:5898::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c6:0b:dd:04:27:94:6b:16:14:c7:72:dc:82:8f:0a:b3:2c:d9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  9 07:32:56 2022 GMT
            Not After : Oct  8 07:37:56 2023 GMT
        Subject: CN=CA7BD435419921E9B64C08B38696678579117B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:df:a4:cd:8f:3e:a3:bd:2f:9b:5c:76:95:
                    17:69:f6:a1:ed:eb:99:1c:d3:3e:e3:20:a0:53:67:
                    fe:c7:7b:df:21:17:3d:f7:da:45:4b:3a:bd:07:f8:
                    f5:db:46:97:b1:06:80:50:20:0e:0f:d7:1a:4c:77:
                    07:2c:19:b7:95:78:d6:0c:00:1b:f8:10:a4:2a:54:
                    53:9e:2c:99:36:69:7c:6a:de:f4:79:17:8c:bf:52:
                    15:b3:08:33:2f:75:8c:bf:4f:79:f3:3a:12:76:c1:
                    46:f6:90:40:f1:51:3a:0d:52:c9:cb:14:f5:fb:d3:
                    c7:41:0a:fc:1d:62:b1:67:ee:81:a5:d8:8d:c9:5a:
                    55:ba:54:af:7b:f9:bf:9c:5d:34:77:43:f4:64:b0:
                    29:a0:ea:67:5a:2e:54:e9:14:46:72:f3:f2:2b:6c:
                    34:c6:36:50:e6:98:bb:0b:5a:5d:40:fc:24:1e:f9:
                    8d:ba:8a:0a:65:6e:2b:2d:c2:cc:6d:41:54:58:5e:
                    62:ff:7f:d6:76:86:9c:59:48:80:15:0e:e7:01:c4:
                    f5:c6:bb:e6:51:30:5d:fd:29:fc:2f:37:0d:a7:67:
                    16:43:9b:97:e2:fb:cf:f1:a6:04:c9:2e:fa:81:ae:
                    c0:79:4c:72:07:28:b7:6d:6b:b5:36:cc:eb:cc:ab:
                    2a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:7B:D4:35:41:99:21:E9:B6:4C:08:B3:86:96:67:85:79:11:7B:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/CA7BD435419921E9B64C08B38696678579117B8F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.64.0/22
                IPv6:
                  2804:5898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268138

    Signature Algorithm: sha256WithRSAEncryption
         8a:f6:57:69:bd:e5:76:8b:20:6d:27:7b:46:2e:67:e2:3d:46:
         91:a4:82:a1:6f:5a:d0:dd:26:0a:a1:3d:49:4e:bf:f5:06:d6:
         8e:d5:06:f4:04:40:cd:c4:3f:1b:73:95:0a:42:ed:35:49:96:
         ad:15:66:19:0d:33:7b:4f:61:2b:ad:08:cf:47:10:48:05:84:
         f7:a8:79:ba:a4:b3:a0:ae:45:ae:30:2f:c4:e5:eb:48:62:e8:
         a6:3d:ec:16:ba:55:7b:b1:b7:f8:e6:24:cd:d8:be:6e:c7:1c:
         a3:00:8e:ee:12:2b:10:04:ba:d4:c2:4c:37:b4:3a:39:a1:47:
         90:4d:ed:f7:a2:6b:fe:4f:64:4e:7c:ce:b0:22:7e:08:aa:d6:
         6c:e5:23:6c:69:06:83:61:f1:55:08:d1:13:ca:e7:73:c6:55:
         7f:9f:cb:d6:b6:f8:3f:93:96:3e:db:df:97:1b:6f:6a:f1:3e:
         fb:03:64:77:b8:5a:62:e0:33:c5:ae:05:43:4d:07:4c:cc:03:
         70:70:b1:21:eb:0a:83:ab:80:5a:99:4c:ce:df:e5:a9:c4:1b:
         b6:4e:3c:0a:16:b0:89:4a:09:49:32:6c:ba:e6:f2:ab:d9:74:
         5d:92:72:48:24:73:1f:e6:63:1f:59:a9:9d:d5:82:2c:69:41:
         8b:b0:2c:af
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUc8YL3QQnlGsWFMdy3IKPCrMs2UcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEwMDkwNzMyNTZaFw0yMzEwMDgwNzM3NTZaMDMxMTAvBgNV
BAMTKENBN0JENDM1NDE5OTIxRTlCNjRDMDhCMzg2OTY2Nzg1NzkxMTdCOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Id+kzY8+o70vm1x2lRdp9qHt
65kc0z7jIKBTZ/7He98hFz332kVLOr0H+PXbRpexBoBQIA4P1xpMdwcsGbeVeNYM
ABv4EKQqVFOeLJk2aXxq3vR5F4y/UhWzCDMvdYy/T3nzOhJ2wUb2kEDxUToNUsnL
FPX708dBCvwdYrFn7oGl2I3JWlW6VK97+b+cXTR3Q/RksCmg6mdaLlTpFEZy8/Ir
bDTGNlDmmLsLWl1A/CQe+Y26igplbistwsxtQVRYXmL/f9Z2hpxZSIAVDucBxPXG
u+ZRMF39KfwvNw2nZxZDm5fi+8/xpgTJLvqBrsB5THIHKLdta7U2zOvMqypfAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKe9Q1QZkh6bZM
CLOGlmeFeRF7jzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ydloyYkd1TDRzRDI2cUR6RUVIV1NoYm4xa3BoQnkzYVI5
NWZaWEEzajJoUy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ydloyYkd1TDRzRDI2cUR6RUVIV1NoYm4xa3BoQnkzYVI5
NWZaWEEzajJoUy8wL0NBN0JENDM1NDE5OTIxRTlCNjRDMDhCMzg2OTY2Nzg1Nzkx
MTdCOEYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2oQDANBAIAAjAHAwUA
KARYmDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEF2owDQYJKoZIhvcNAQELBQAD
ggEBAIr2V2m95XaLIG0ne0YuZ+I9RpGkgqFvWtDdJgqhPUlOv/UG1o7VBvQEQM3E
PxtzlQpC7TVJlq0VZhkNM3tPYSutCM9HEEgFhPeoebqks6CuRa4wL8Tl60hi6KY9
7Ba6VXuxt/jmJM3Yvm7HHKMAju4SKxAEutTCTDe0OjmhR5BN7feia/5PZE58zrAi
fgiq1mzlI2xpBoNh8VUI0RPK53PGVX+fy9a2+D+Tlj7b35cbb2rxPvsDZHe4WmLg
M8WuBUNNB0zMA3BwsSHrCoOrgFqZTM7f5anEG7ZOPAoWsIlKCUkybLrm8qvZdF2S
ckgkcx/mYx9ZqZ3VgixpQYuwLK8=
-----END CERTIFICATE-----