Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E.cer
File:                     CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E.cer (raw, json)
Hash identifier:          QHGbMpvFqOWQrRsqDxZBiEpK/WEMUc0zjOGfhLHusWA=
Subject key identifier:   CA:87:DE:2F:18:93:3F:F9:F1:B0:1E:A4:EE:8B:82:0E:44:74:4E:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       70C54283FBABDEA8C4951F6B5DEB0E8F3E07FD8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Dec 2023 12:21:35 +0000
Certificate not after:    Sat 14 Dec 2024 12:26:35 +0000
Subordinate resources:    AS: 271622
                          IP: 45.163.48.0/22
                          IP: 2804:7e68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c5:42:83:fb:ab:de:a8:c4:95:1f:6b:5d:eb:0e:8f:3e:07:fd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 16 12:21:35 2023 GMT
            Not After : Dec 14 12:26:35 2024 GMT
        Subject: CN=CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:c4:4a:7c:c1:67:1d:18:db:b7:4e:f0:59:
                    17:d8:bd:01:d0:e3:21:fc:5e:a4:23:9e:84:7f:92:
                    fc:18:cc:39:c0:46:84:a1:df:e2:a1:ae:a5:b5:c7:
                    1f:cd:80:f0:09:54:71:b7:4b:87:8d:f5:e2:01:fd:
                    d9:60:f8:41:e1:73:1c:ba:1a:81:d7:eb:c7:f0:23:
                    2d:d4:25:9b:67:57:d0:39:75:f4:22:0e:96:b0:16:
                    eb:27:6a:e4:b6:2b:9e:2f:9d:15:63:4e:8a:57:e0:
                    44:59:4b:f0:4d:fa:5c:c3:81:6d:50:a2:99:07:8b:
                    20:0e:ac:de:c2:e0:f1:0f:ca:1b:74:4b:19:57:6a:
                    64:f5:d9:51:27:63:b1:63:13:d3:2c:f7:cd:e7:75:
                    80:18:99:a1:29:37:04:2e:e8:32:2d:b4:02:46:cd:
                    dd:da:39:e5:22:df:6d:b9:ce:b5:02:92:08:dc:bb:
                    86:55:c0:84:01:b5:7d:ca:be:ab:a9:72:4e:06:5a:
                    57:83:f8:98:1f:4c:df:7c:40:0d:ce:c0:b4:3d:47:
                    d9:59:a1:c1:47:be:22:3b:ce:33:7a:75:98:61:67:
                    19:9d:ca:24:f3:29:b9:07:3d:56:f5:ca:c9:6f:74:
                    6d:a6:ec:08:84:51:61:81:15:fc:a7:be:b8:07:55:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:87:DE:2F:18:93:3F:F9:F1:B0:1E:A4:EE:8B:82:0E:44:74:4E:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.48.0/22
                IPv6:
                  2804:7e68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271622

    Signature Algorithm: sha256WithRSAEncryption
         7f:e3:97:5f:f4:ce:d3:e4:a4:99:4b:ef:e9:80:09:76:7c:1a:
         59:c9:c7:cb:a5:72:13:40:b3:76:74:e9:d5:4b:b9:bf:1e:02:
         ad:c6:60:c9:bc:cf:19:d9:a4:f0:d2:06:6c:47:f0:d1:64:88:
         25:22:d3:88:93:b3:42:2d:40:f0:fb:4b:14:22:c5:03:fa:4c:
         c5:3f:9f:ad:42:9f:38:49:d0:c5:26:47:f5:55:94:48:11:ac:
         a3:7a:c4:0d:0d:1e:21:f6:bb:6a:61:6f:3c:df:89:55:58:24:
         cd:ef:2e:f9:ec:00:31:1d:5c:75:9a:30:ba:c6:85:4d:fe:41:
         6b:76:6c:65:71:9c:9b:30:72:bb:fb:86:99:07:4a:be:e3:27:
         9c:51:81:e7:c7:c6:30:28:a8:ab:c0:a1:04:5f:bd:4d:9f:bc:
         c1:be:4d:45:a7:d1:e6:89:e5:91:d3:4c:a0:89:d1:0c:79:cf:
         1a:a9:27:0f:f3:b3:ea:7a:59:c6:8c:6a:2d:79:28:a7:18:06:
         07:5d:ad:d0:a0:55:19:93:68:07:8a:f7:ab:7e:0f:6b:0f:c6:
         da:c7:6d:b2:75:68:19:1c:e5:8d:41:23:41:65:f9:06:ef:82:
         c1:f2:b6:5c:24:3b:99:39:92:37:17:aa:be:bd:88:85:e0:fd:
         4a:d7:4b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----