Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D26E7859637838C307DBD25C2CD76C8A7BDA08D4.cer
File:                     D26E7859637838C307DBD25C2CD76C8A7BDA08D4.cer (raw, json)
Hash identifier:          3eRxYnbWHb8nQzQNI05BL6grio+6M8kqDztMumfF8WA=
Subject key identifier:   D2:6E:78:59:63:78:38:C3:07:DB:D2:5C:2C:D7:6C:8A:7B:DA:08:D4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3AC31DAEF52B7EFDC0CD9065C6AC1632B8AA9DF3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/D26E7859637838C307DBD25C2CD76C8A7BDA08D4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Dec 2023 01:02:19 +0000
Certificate not after:    Fri 06 Dec 2024 01:07:19 +0000
Subordinate resources:    AS: 269497
                          IP: 45.187.204.0/22
                          IP: 2804:6588::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c3:1d:ae:f5:2b:7e:fd:c0:cd:90:65:c6:ac:16:32:b8:aa:9d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  8 01:02:19 2023 GMT
            Not After : Dec  6 01:07:19 2024 GMT
        Subject: CN=D26E7859637838C307DBD25C2CD76C8A7BDA08D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f6:72:8b:fb:d7:92:50:1a:f3:33:10:d8:6b:
                    ff:03:9b:53:15:8d:f0:d4:a4:b3:e5:fb:a2:a8:0d:
                    91:f2:91:7f:ae:73:3d:13:d4:58:2f:f1:20:63:1d:
                    ea:e8:83:f7:35:99:cd:69:91:79:75:6a:bc:b6:75:
                    31:ac:6c:2c:fb:e1:d3:40:b9:fd:66:3d:24:b1:f2:
                    b1:fe:c8:2a:fb:06:a0:e7:76:28:a5:f6:68:da:a2:
                    7d:44:61:82:c4:84:07:29:3a:ad:d9:76:f1:65:ab:
                    52:00:7c:35:8f:76:7f:44:ba:ff:bf:cd:ad:c1:02:
                    01:c0:8d:14:7d:a4:92:1a:33:8b:65:4f:b5:66:a3:
                    8d:46:43:4b:08:52:32:8e:ce:d0:35:f6:8d:61:31:
                    1a:60:58:29:11:79:ae:90:12:4e:34:4c:66:78:f5:
                    ec:98:2d:c2:f7:96:68:c7:be:7d:07:38:3b:23:f6:
                    cf:0e:95:62:da:a6:02:46:c6:db:7c:96:6e:a2:19:
                    66:13:40:18:b5:d8:db:15:70:81:8e:ca:ea:c9:9a:
                    63:df:4b:1b:a9:dd:db:c2:7c:ea:71:06:36:33:7a:
                    4c:d6:be:25:55:f7:bf:b2:5d:43:34:73:f6:aa:72:
                    80:fc:60:c9:e9:1e:f1:b6:96:86:fc:c0:ab:b0:41:
                    0c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:6E:78:59:63:78:38:C3:07:DB:D2:5C:2C:D7:6C:8A:7B:DA:08:D4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/D26E7859637838C307DBD25C2CD76C8A7BDA08D4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.204.0/22
                IPv6:
                  2804:6588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269497

    Signature Algorithm: sha256WithRSAEncryption
         3b:fd:17:a1:82:6c:52:16:27:52:3e:81:cc:f7:db:a2:4e:0b:
         fa:59:c3:44:6a:23:57:ee:15:4a:7a:41:82:8f:5d:d0:6f:39:
         ba:d1:b5:29:ad:34:33:52:38:1b:bb:7e:25:9a:9e:8d:dc:8a:
         3a:23:66:ee:a3:06:bd:58:81:8f:92:4e:98:cb:9e:74:4d:3a:
         67:8c:28:46:22:ba:dd:80:9b:8e:8a:16:ff:fe:36:61:4b:35:
         f4:74:15:1c:91:05:e9:dc:ea:51:30:be:5b:ea:24:d7:17:f4:
         aa:49:ca:8e:97:01:d2:ab:be:cf:4e:d6:91:d6:0c:ae:94:2f:
         b2:1f:ce:3b:07:b6:2a:5e:61:d3:db:fa:3c:72:6d:9f:a0:d5:
         41:4b:ca:b8:fa:15:b3:df:a4:b0:48:c1:bb:4c:32:e9:5c:06:
         02:a2:4f:d0:97:b1:8b:fe:9b:af:45:3d:b4:5d:ae:3a:a7:18:
         08:70:26:65:3a:55:7a:8b:a3:4c:49:6a:69:8a:1c:0f:80:e5:
         2b:c9:39:83:da:5e:54:72:9b:50:be:85:78:e6:03:e5:ae:e8:
         e0:5b:7b:c1:f0:f3:82:e7:02:da:53:80:ad:1f:04:74:e6:4b:
         d1:b2:d2:fb:97:d9:d1:29:f0:2f:aa:c2:8b:4a:3a:ec:c1:69:
         b0:89:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----