Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D46D9B53AD78E55F078DA7D69B411BF181E1973D.cer
File:                     D46D9B53AD78E55F078DA7D69B411BF181E1973D.cer (raw, json)
Hash identifier:          xQoz4WHn26v7ub720kg9hFo5CrHrp5SOZlWwrw86OAw=
Subject key identifier:   D4:6D:9B:53:AD:78:E5:5F:07:8D:A7:D6:9B:41:1B:F1:81:E1:97:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1058A98F40A4B9F93A69B388A6389FAEE40C5D29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/D46D9B53AD78E55F078DA7D69B411BF181E1973D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 07 Aug 2023 04:35:10 +0000
Certificate not after:    Mon 05 Aug 2024 04:40:10 +0000
Subordinate resources:    AS: 270824
                          IP: 190.115.196.0/22
                          IP: 2804:71fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:58:a9:8f:40:a4:b9:f9:3a:69:b3:88:a6:38:9f:ae:e4:0c:5d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  7 04:35:10 2023 GMT
            Not After : Aug  5 04:40:10 2024 GMT
        Subject: CN=D46D9B53AD78E55F078DA7D69B411BF181E1973D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:35:81:28:46:6b:1b:ea:e0:00:ff:4d:80:
                    a0:85:7f:d4:09:e7:98:2a:d0:bf:cc:0a:d7:81:a3:
                    03:15:04:30:3f:10:7c:58:44:9c:3f:a6:80:4b:c8:
                    87:9a:76:e6:5f:e6:c2:b0:48:9b:01:89:f5:9c:07:
                    29:ee:3e:ae:57:7e:24:7f:1a:06:e6:2d:9c:d6:4d:
                    c7:76:96:e1:8d:95:b0:71:cd:70:bd:1e:af:0b:ac:
                    47:dd:7f:c5:dc:82:7e:78:fc:31:b6:61:90:60:02:
                    74:3d:c0:72:4d:97:b1:c3:e5:ba:4d:c8:da:ee:3f:
                    77:3f:5d:19:6d:4d:4c:c4:a1:b2:be:a2:d5:1d:fb:
                    0d:a2:ff:45:10:67:eb:9b:9e:7f:ca:5c:17:ba:af:
                    c1:a8:2e:14:8a:75:07:1e:dc:5c:f3:a3:c4:84:72:
                    fb:e1:eb:94:d4:27:29:df:60:3a:49:a8:c2:c2:0a:
                    07:1e:f9:b3:b2:f3:1f:26:39:44:0d:8a:55:79:74:
                    63:2a:05:ac:ee:f8:e1:4d:90:bb:e3:37:2f:54:c9:
                    29:2a:1d:3a:63:e4:bb:33:ba:43:5c:8d:d8:26:a6:
                    0c:41:0b:01:a4:97:19:25:99:4f:90:80:6d:d6:19:
                    39:9c:1b:b9:ee:64:18:f7:c1:17:e8:33:a2:10:78:
                    0e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:6D:9B:53:AD:78:E5:5F:07:8D:A7:D6:9B:41:1B:F1:81:E1:97:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/D46D9B53AD78E55F078DA7D69B411BF181E1973D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.196.0/22
                IPv6:
                  2804:71fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270824

    Signature Algorithm: sha256WithRSAEncryption
         a8:1d:ce:4f:0f:43:d5:05:15:7a:2f:4e:d8:c1:e1:62:e0:4c:
         35:92:7c:f8:a3:8f:e5:60:37:14:0b:be:96:5e:d5:c6:e2:56:
         49:24:39:c8:4a:ef:ae:15:83:81:0b:7f:21:d0:09:5b:7c:bf:
         a0:c4:a3:32:3d:77:e1:6c:64:e0:4a:04:27:c2:98:83:33:8c:
         b1:10:cb:cc:5a:7c:1c:37:79:55:f8:96:bb:fe:32:c7:d0:c5:
         f3:8d:ee:bc:f3:8f:41:6d:d1:ee:46:3c:58:8d:41:ba:13:2d:
         b2:49:78:df:b1:12:f8:7b:1c:3b:f8:cb:db:ec:58:4a:53:d9:
         f4:63:dc:ef:9d:f6:e5:13:62:ed:58:62:ca:de:f0:f8:27:82:
         7d:92:da:d0:90:0b:ac:68:3d:36:6d:24:85:83:68:80:dd:07:
         a2:0c:b2:76:16:6a:c5:46:0c:cb:d6:24:50:15:cf:f9:27:83:
         f4:c4:56:2a:60:16:7b:9c:f9:fb:bd:f9:e9:50:08:18:95:3e:
         30:0d:d7:e6:5c:0f:4a:81:10:2d:2a:a6:6f:7c:44:b5:c1:8c:
         f2:97:e9:13:1e:72:39:8a:c2:4d:1f:51:22:e1:7c:81:e4:a8:
         6f:1d:cf:6f:fb:ec:36:f8:1f:b3:25:17:90:46:f2:69:15:64:
         9b:ed:0f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----