Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D09EDB279CC828D0E3DC91224F7FBB0E69BCB194.cer
File:                     D09EDB279CC828D0E3DC91224F7FBB0E69BCB194.cer (raw, json)
Hash identifier:          gG+xiqbQyBlw1inYxm83tnQCD0YCnnUJwy0bC7O2gFc=
Subject key identifier:   D0:9E:DB:27:9C:C8:28:D0:E3:DC:91:22:4F:7F:BB:0E:69:BC:B1:94
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7198C2F86B313B2B7BD07392E09EF874CE44CE5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/D09EDB279CC828D0E3DC91224F7FBB0E69BCB194.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Aug 2023 12:08:11 +0000
Certificate not after:    Tue 20 Aug 2024 12:13:11 +0000
Subordinate resources:    AS: 266607
                          IP: 45.7.192.0/22
                          IP: 2804:3e94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:98:c2:f8:6b:31:3b:2b:7b:d0:73:92:e0:9e:f8:74:ce:44:ce:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 22 12:08:11 2023 GMT
            Not After : Aug 20 12:13:11 2024 GMT
        Subject: CN=D09EDB279CC828D0E3DC91224F7FBB0E69BCB194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:56:f1:05:35:83:4a:b6:16:47:d2:ff:ac:
                    13:47:32:e4:19:e2:e3:9a:ee:6d:87:e2:29:af:62:
                    a7:c0:f8:0a:ec:12:76:9d:45:3b:e2:9c:a9:e0:7f:
                    c4:f4:b0:64:c7:53:ec:d6:e4:92:32:4f:ae:af:bc:
                    d3:26:a3:9a:67:20:84:e4:71:ad:62:36:da:e0:d4:
                    a5:45:e2:26:68:85:55:41:08:8d:86:0a:3b:da:a6:
                    6e:40:f5:0b:e9:13:1a:36:7a:dd:7f:28:49:fc:14:
                    d2:fb:d5:df:28:4e:34:5d:75:ae:01:46:c2:58:4b:
                    21:a0:75:6c:e6:90:46:e9:5b:a4:b5:a7:60:46:98:
                    b2:52:26:73:e6:13:62:2b:c2:33:f4:aa:be:b1:16:
                    96:1c:2e:4a:e5:54:89:89:12:94:b0:13:fb:ee:b0:
                    a3:b4:81:d1:66:21:a7:7e:18:b9:68:2e:f3:a7:81:
                    96:14:dc:91:0f:36:2c:58:86:2b:9b:9e:98:14:77:
                    f6:e1:a1:58:46:ea:39:a8:3f:3d:95:02:5e:5b:2d:
                    c2:22:be:09:e7:80:53:63:8a:3a:fd:ef:61:8f:15:
                    23:4f:e9:dd:a5:f4:02:be:9c:43:96:c2:9e:9d:88:
                    88:27:b4:0f:49:41:42:84:a1:ea:7a:db:9f:e8:fa:
                    06:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:9E:DB:27:9C:C8:28:D0:E3:DC:91:22:4F:7F:BB:0E:69:BC:B1:94
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/D09EDB279CC828D0E3DC91224F7FBB0E69BCB194.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.192.0/22
                IPv6:
                  2804:3e94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266607

    Signature Algorithm: sha256WithRSAEncryption
         15:42:8f:9b:04:66:11:c9:48:c0:58:ef:69:ee:c4:61:7a:16:
         1c:dd:1b:59:a4:06:b8:98:da:97:3c:ee:1d:ca:e1:c4:99:b9:
         7b:89:4d:36:fc:84:b9:31:c0:c8:93:68:53:c5:bd:6a:e3:99:
         a5:a9:02:de:e1:37:e0:4b:92:bf:ee:09:bd:cd:c9:9b:d4:47:
         cf:d9:e4:76:18:20:ae:ad:bc:26:8c:de:c9:58:13:7e:61:f6:
         2f:4a:d1:82:58:3b:f9:56:29:7d:d2:5b:06:35:92:b9:98:3b:
         07:21:da:2d:14:56:41:34:66:8b:ad:d2:4e:9b:47:25:d4:f0:
         bc:2e:77:47:b5:9c:47:42:8d:03:c4:d8:fe:2c:ed:ed:30:f0:
         45:0d:0a:b2:7a:03:c5:e3:65:d8:00:0c:3a:d3:cc:6d:df:ab:
         54:24:03:b9:47:98:fa:b3:ab:35:d8:e7:c1:9c:b9:35:f9:5a:
         36:06:29:50:1d:50:a9:8b:a5:db:6b:4b:5c:8d:b4:ab:7e:03:
         a7:b4:bf:d4:e4:e8:e8:e2:cd:4b:fa:fb:b1:41:6f:90:7e:f8:
         4d:f1:90:d1:bb:03:df:e0:fd:b3:df:0d:6e:07:df:50:50:f9:
         e0:de:49:57:62:05:26:b4:a0:d3:25:e5:18:24:eb:58:c6:30:
         ce:88:3e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----