Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CAD1D2DF056D677A9269E37D134D100165F8CB7A.cer
File:                     CAD1D2DF056D677A9269E37D134D100165F8CB7A.cer (raw, json)
Hash identifier:          ByZQQmoXljXenRgp0iVB3xgFQZDebjD/R/UrgD6HyN0=
Subject key identifier:   CA:D1:D2:DF:05:6D:67:7A:92:69:E3:7D:13:4D:10:01:65:F8:CB:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       555B5EB67A19535973AE631ECBDBC817CD959913
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/CAD1D2DF056D677A9269E37D134D100165F8CB7A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 12:50:28 +0000
Certificate not after:    Tue 12 Nov 2024 12:55:28 +0000
Subordinate resources:    AS: 272707
                          IP: 2804:8768::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5b:5e:b6:7a:19:53:59:73:ae:63:1e:cb:db:c8:17:cd:95:99:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 14 12:50:28 2023 GMT
            Not After : Nov 12 12:55:28 2024 GMT
        Subject: CN=CAD1D2DF056D677A9269E37D134D100165F8CB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:8c:df:18:7a:e2:e3:a1:29:24:9f:02:a2:
                    94:cd:b8:0e:63:50:e6:86:b0:45:06:e9:06:6f:22:
                    0f:df:70:35:a2:a5:dc:a2:d6:8f:1b:4d:a8:45:88:
                    39:1e:7d:e6:7a:98:bd:5b:80:b4:d8:67:44:63:b0:
                    3d:3c:cf:f2:7c:29:5f:ff:e4:8c:a2:8a:73:3c:91:
                    68:f5:dd:02:e9:9c:a3:d2:99:b1:0e:36:03:81:81:
                    20:99:60:38:76:29:84:a6:9c:4d:a8:a1:c1:29:d8:
                    a2:4a:f4:e9:41:33:45:e6:51:cc:0c:eb:ee:3a:c8:
                    40:24:db:7c:c7:0e:30:eb:11:88:c8:d9:44:94:73:
                    b9:67:4e:32:6b:5d:ce:3a:2b:db:ce:c6:b2:8a:f6:
                    2c:8d:6f:d1:11:76:58:ff:d6:79:fe:e3:09:5e:37:
                    d6:6e:75:33:13:4c:da:6f:31:81:d8:32:a7:33:0b:
                    f1:e2:e9:79:01:3c:18:c3:bd:d7:5e:67:10:78:13:
                    68:47:02:31:fb:26:1f:ac:04:0b:bf:c5:40:c7:17:
                    fb:63:19:f0:57:4c:53:39:66:e4:4c:85:e9:94:57:
                    6b:8a:08:ec:06:75:fc:92:74:8b:ac:ae:77:ee:3a:
                    3b:2e:b7:c1:79:77:e1:f3:9d:eb:c2:25:fc:e6:14:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:D1:D2:DF:05:6D:67:7A:92:69:E3:7D:13:4D:10:01:65:F8:CB:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/CAD1D2DF056D677A9269E37D134D100165F8CB7A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8768::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272707

    Signature Algorithm: sha256WithRSAEncryption
         63:f9:98:38:c1:f3:64:1c:4c:fa:9c:9e:fd:c3:e2:35:a5:03:
         94:87:17:c2:0a:99:59:be:05:57:03:34:58:df:4c:08:14:23:
         6a:c0:3c:a5:67:b1:21:da:7e:fe:c1:73:10:48:fe:2e:04:75:
         db:d9:b9:af:2b:fc:6f:b1:ea:a4:27:61:63:e7:ef:6a:d9:c3:
         cc:11:e7:62:41:34:85:5c:79:fd:5f:de:40:55:52:a3:a3:1a:
         2b:f4:1b:c9:f1:c9:71:2c:5b:72:de:6f:e0:c9:e7:ca:63:3c:
         f0:94:d6:14:2a:87:8d:40:9b:df:2f:24:2f:31:d7:26:1e:48:
         59:9b:fc:94:ff:7c:21:a1:4f:af:5a:70:26:79:5b:47:44:91:
         c9:d1:12:2a:b7:58:9a:0a:e4:eb:e2:fc:f0:0d:eb:9b:02:ef:
         39:1e:4a:f1:59:cc:29:b2:a9:86:d6:f8:3e:90:c2:c2:0a:d1:
         a7:d1:8b:5d:0c:b9:15:85:2f:e9:2a:38:0e:e2:3f:b2:03:8e:
         2a:77:f7:fe:b1:c7:9f:59:84:8a:73:dd:f6:4a:a4:06:36:47:
         7a:27:33:7d:cc:a9:39:95:e3:0b:58:cd:e3:c1:13:04:f8:c2:
         79:40:2b:89:ff:f2:a3:b0:40:7f:76:07:86:eb:a5:3d:aa:5f:
         f7:1c:d7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----