Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CE7A3178DB016E104AF14BE894CD002DB3ED52A5.cer
File:                     CE7A3178DB016E104AF14BE894CD002DB3ED52A5.cer (raw, json)
Hash identifier:          9WrjuKPQOL0+JUfHKutmoL9nqWSm5zL77shHQqo3Khw=
Subject key identifier:   CE:7A:31:78:DB:01:6E:10:4A:F1:4B:E8:94:CD:00:2D:B3:ED:52:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1922A7B2F841B8D7CA36141E9ABE872FADBBFC2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/CE7A3178DB016E104AF14BE894CD002DB3ED52A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 31 Aug 2023 15:13:36 +0000
Certificate not after:    Thu 29 Aug 2024 15:18:36 +0000
Subordinate resources:    AS: 271602
                          IP: 179.63.156.0/22
                          IP: 2804:7e18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:22:a7:b2:f8:41:b8:d7:ca:36:14:1e:9a:be:87:2f:ad:bb:fc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 31 15:13:36 2023 GMT
            Not After : Aug 29 15:18:36 2024 GMT
        Subject: CN=CE7A3178DB016E104AF14BE894CD002DB3ED52A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:16:35:dc:ba:19:3a:5f:58:e8:90:b0:de:3a:
                    7a:46:6f:a7:9e:a2:f5:5e:9f:0a:e0:13:3c:1a:3c:
                    5c:e3:35:51:40:dc:f9:2e:f4:78:70:c6:e8:99:a2:
                    34:be:c7:74:68:11:96:11:cc:5c:bd:1d:b9:b2:da:
                    68:ed:23:9a:54:34:dc:4b:4b:26:c9:e9:a3:5e:e1:
                    21:50:5f:a9:f3:59:de:6b:f5:71:d9:cf:e8:4d:5a:
                    85:bf:26:38:6d:be:58:b4:2a:77:b6:78:f0:f8:1d:
                    fd:53:f0:85:85:91:fa:99:34:d4:99:ba:1a:43:7f:
                    fd:19:40:28:cb:e3:5d:0d:e9:cb:15:b7:bd:54:36:
                    ae:1f:67:12:4e:02:be:0a:2b:24:36:56:be:68:a4:
                    c5:3d:a0:0d:66:b7:c5:ab:e4:04:7e:48:9e:7f:eb:
                    8c:73:4c:2f:e7:56:ec:ec:b3:13:3a:b9:33:dc:29:
                    28:22:d8:3e:86:ce:79:61:f2:78:9f:4a:d6:55:c9:
                    20:58:7d:5b:56:91:80:3d:bc:2b:75:a9:08:9a:74:
                    6a:94:fb:0b:36:d4:3b:4d:ae:ae:d8:61:88:0d:2d:
                    f9:aa:da:34:70:66:72:ac:47:f6:6a:20:6f:7f:74:
                    cd:49:79:98:c5:6a:33:4c:3c:ee:ca:ad:4b:76:ae:
                    e8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:7A:31:78:DB:01:6E:10:4A:F1:4B:E8:94:CD:00:2D:B3:ED:52:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/CE7A3178DB016E104AF14BE894CD002DB3ED52A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.156.0/22
                IPv6:
                  2804:7e18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271602

    Signature Algorithm: sha256WithRSAEncryption
         69:33:f8:dd:1c:1a:0d:8f:ac:70:93:a8:46:f4:6b:da:ba:ff:
         ee:cd:82:6a:d1:11:7b:6a:5d:ad:be:fb:b0:79:a6:d4:ad:ae:
         ee:49:e8:3b:6f:3d:d0:52:3a:e8:b9:f1:ea:e5:8d:1b:f7:02:
         16:ab:59:94:ae:da:38:61:80:b5:25:e9:0c:3c:d9:e5:f4:a5:
         f9:ba:c6:a7:18:f4:c7:76:b0:33:39:04:0d:91:6b:f6:99:df:
         11:ea:ae:da:1f:98:d1:be:1d:48:24:b0:13:7c:f3:ba:b4:29:
         3c:78:f8:cc:21:e2:d1:05:b1:7c:92:87:57:e2:b4:d7:d5:37:
         41:f1:58:df:8d:77:e4:5c:29:d4:2b:8c:76:21:a4:95:db:a7:
         c1:77:d8:06:8b:f9:b1:06:60:76:ee:f2:7d:04:3b:8a:77:e0:
         9f:14:19:04:ba:d4:da:55:02:d2:ef:68:95:a4:5a:c3:0b:39:
         c8:46:da:a1:02:ed:80:a5:80:3b:0f:06:1b:13:b7:ef:eb:d4:
         34:5d:26:3e:7f:ec:9e:b5:57:11:db:b5:b7:e9:ea:e3:91:ea:
         d0:1d:da:6f:6e:6c:38:f2:b9:e3:89:d5:b4:d0:73:72:dd:fe:
         e6:d8:e0:68:3f:05:c0:cc:2b:a3:22:9d:f8:66:37:ae:75:2f:
         e0:1a:3a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----