Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D05DBE5248CB8C880A34D01683308EF146CC9819.cer
File:                     D05DBE5248CB8C880A34D01683308EF146CC9819.cer (raw, json)
Hash identifier:          lhWB0MQBkHomjFqrTbkYiE0wkuk/u8wzv6pSgZFp2ew=
Subject key identifier:   D0:5D:BE:52:48:CB:8C:88:0A:34:D0:16:83:30:8E:F1:46:CC:98:19
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6894D54B5A07AED21630445D7DF315CA0B075714
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/D05DBE5248CB8C880A34D01683308EF146CC9819.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 20:25:08 +0000
Certificate not after:    Thu 01 Aug 2024 20:30:08 +0000
Subordinate resources:    AS: 268131
                          IP: 45.169.188.0/22
                          IP: 2804:5878::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:94:d5:4b:5a:07:ae:d2:16:30:44:5d:7d:f3:15:ca:0b:07:57:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 20:25:08 2023 GMT
            Not After : Aug  1 20:30:08 2024 GMT
        Subject: CN=D05DBE5248CB8C880A34D01683308EF146CC9819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:d8:4c:45:42:1e:23:5a:aa:08:15:f4:0c:
                    f9:05:e0:32:ac:ec:cb:2e:cd:b6:ba:c4:7d:b5:09:
                    de:96:eb:9c:3d:fa:67:cb:1a:0e:84:77:38:06:d5:
                    ea:da:ef:b6:b8:1e:34:dc:3b:df:ea:1e:50:04:ed:
                    1b:42:5c:7c:eb:a2:02:76:13:6f:28:e7:4f:c6:e7:
                    39:bb:92:e7:8a:31:e5:16:52:69:57:48:33:a6:f0:
                    61:28:d0:9d:fd:02:1e:f6:b7:0a:67:7e:67:4e:6b:
                    4d:5d:6f:1a:09:0d:31:59:66:c5:08:d0:40:c0:1b:
                    37:8a:8e:33:86:20:9b:77:87:41:94:9a:fe:27:43:
                    b7:17:6c:0d:a3:76:2e:19:08:65:2b:e5:36:0e:76:
                    2b:50:d3:73:8e:0c:ae:4e:2e:54:f7:05:95:aa:87:
                    2e:1c:7c:a6:73:07:50:89:98:37:14:51:4f:2a:e3:
                    f0:0d:04:8d:da:ca:11:0f:af:f1:10:40:f9:5b:8a:
                    ad:12:87:f1:c5:c8:fa:82:4c:54:7f:87:81:ad:63:
                    c8:fb:18:a5:19:5f:dd:d1:53:82:09:85:ab:df:58:
                    98:fb:3c:01:98:af:8c:14:ea:f2:17:7f:11:2e:43:
                    c7:c1:28:52:53:13:d0:48:22:52:bd:07:37:51:bd:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:5D:BE:52:48:CB:8C:88:0A:34:D0:16:83:30:8E:F1:46:CC:98:19
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/D05DBE5248CB8C880A34D01683308EF146CC9819.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.188.0/22
                IPv6:
                  2804:5878::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268131

    Signature Algorithm: sha256WithRSAEncryption
         9b:4d:86:9c:f3:12:99:b0:49:2c:b4:a0:e6:f8:35:23:6b:30:
         6e:e1:8f:a6:e8:32:ae:4d:41:fc:0d:0e:5e:83:7d:1d:8b:a6:
         91:f2:d4:7c:84:00:77:3c:8b:c5:d8:12:7f:b8:d0:b2:de:05:
         32:f2:91:df:8c:ec:f3:6e:55:03:0c:eb:86:60:1b:37:a1:98:
         db:da:1d:8f:1a:91:91:b9:8a:54:2e:73:b9:a3:83:e9:e5:2d:
         bd:e5:33:bd:8f:53:a5:c9:db:77:4c:b7:ab:af:31:89:ad:54:
         7d:52:fb:c7:51:49:93:2a:95:ad:de:7c:35:32:06:dd:6d:ab:
         17:74:28:bd:16:e1:a2:f0:e5:62:08:a8:52:5e:35:53:65:61:
         27:7a:75:7f:74:c7:dd:5d:48:af:ea:20:7c:91:06:36:ce:b0:
         3d:94:45:f1:4e:e0:5e:19:f2:a1:77:11:48:47:c4:06:06:11:
         4e:3e:ba:07:b0:50:69:94:69:d1:f6:f3:50:ce:f4:cd:51:a5:
         da:bc:c8:12:59:7a:36:9a:70:43:bd:54:c2:29:2b:f8:3d:fa:
         ab:fa:10:9e:1e:fc:51:a3:72:46:b0:29:07:f9:f7:84:b7:9a:
         0e:2f:3c:50:dc:29:cf:54:f0:a4:fe:69:79:fb:26:dd:9a:73:
         25:3e:c2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----