Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer
File:                     D0FDDFD00693149E10422185188F22AE97C6A48A.cer (raw, json)
Hash identifier:          7by5hnKHAZ4I/t2TnL4OKPOzuXfLE518ASFWMrLz9cc=
Subject key identifier:   D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A0FC2E48D58280D21A30FBD53C29A4C353C70F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 12:25:58 +0000
Certificate not after:    Thu 11 Jul 2024 12:30:58 +0000
Subordinate resources:    AS: 270976
                          IP: 179.43.16.0/22
                          IP: 2804:745c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0f:c2:e4:8d:58:28:0d:21:a3:0f:bd:53:c2:9a:4c:35:3c:70:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 12:25:58 2023 GMT
            Not After : Jul 11 12:30:58 2024 GMT
        Subject: CN=D0FDDFD00693149E10422185188F22AE97C6A48A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:4c:b4:40:a7:ad:8a:7b:9b:cb:3d:d6:d5:
                    ea:5b:b5:90:10:94:04:22:f5:47:5a:88:a9:aa:5d:
                    a5:ed:25:f9:53:64:b2:b0:a8:db:ac:06:38:dd:8a:
                    f8:24:27:da:5c:47:f5:fb:45:70:73:9e:d6:98:57:
                    d6:5b:66:e3:7a:ba:47:b4:97:52:9d:f2:36:ed:70:
                    58:28:0a:08:ef:ce:bf:eb:0d:18:2a:b8:2a:0b:55:
                    7b:29:92:f3:66:16:2a:56:8b:ee:b8:f3:2d:6f:0a:
                    6f:a2:20:05:da:48:21:9d:5a:9d:88:3b:c5:d8:1e:
                    b3:89:85:53:c6:15:17:61:2a:e8:4b:c2:32:c8:3e:
                    4e:ca:5c:21:46:dc:a5:8f:3d:46:e7:f5:49:da:f2:
                    72:4d:9c:03:34:dd:87:16:9d:09:f5:01:e5:35:c2:
                    8a:b3:66:39:09:47:f7:f0:3d:43:d2:0c:26:b6:3b:
                    49:1e:e0:b8:af:f0:8e:0f:0d:9c:ec:08:b4:47:d8:
                    87:ea:40:0f:ed:02:ae:77:38:6d:92:2d:89:b5:e0:
                    ac:84:75:f0:0e:77:e8:71:f3:1f:c9:3c:fb:9f:e2:
                    f0:20:3c:9f:a4:76:01:c5:b4:c3:c3:f3:bd:5f:58:
                    c9:39:ef:40:7b:73:c3:de:3b:0f:04:e2:ea:0e:a1:
                    4e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.16.0/22
                IPv6:
                  2804:745c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270976

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:fa:3e:e1:ca:68:90:e7:9d:f0:3a:6c:8a:dc:12:7a:47:
         28:e3:ea:eb:df:3d:d4:2d:79:1f:8a:48:5a:03:81:84:a2:66:
         b6:43:f8:8b:69:ee:eb:86:32:bc:b6:d4:91:e6:ce:41:a7:05:
         3d:26:bf:53:76:96:0d:c2:cf:56:a8:56:9b:0b:10:7e:ae:26:
         40:f7:8f:77:91:9d:b5:27:17:b0:f4:19:8e:f3:d7:56:68:a8:
         d0:f0:a4:34:9c:6f:68:e5:77:9a:84:19:77:6e:ef:fc:32:07:
         c6:c4:3a:5a:d3:cd:ac:20:0f:2e:1b:75:9d:d6:2f:cd:3b:bf:
         bd:aa:8c:fd:74:3c:83:aa:69:29:8c:90:b2:de:11:bf:b0:bd:
         8d:43:7a:04:e4:f3:f3:0b:64:21:87:68:f0:2a:fd:16:c2:67:
         d8:54:95:82:37:8e:0e:b0:12:c2:0a:65:07:43:92:fb:d6:d1:
         9e:36:a8:34:6f:c1:79:23:39:fb:a5:0a:6f:3b:72:9b:60:36:
         28:78:09:8e:c8:ab:90:9a:b8:ee:40:a8:d6:09:2c:77:ec:63:
         1a:5a:ae:33:98:20:d1:ca:67:9b:61:6f:04:d5:1a:f9:23:f6:
         2d:6b:56:60:dc:55:bd:55:89:81:12:89:ca:b8:97:d3:dc:55:
         b4:ff:ce:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----