Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D78AB6EBF2B6BF018794346C88788B0C3780E915.cer
File:                     D78AB6EBF2B6BF018794346C88788B0C3780E915.cer (raw, json)
Hash identifier:          QYTAsF/Y8orFdaclWQ+NGDj+XVOpZ75nuN2H8mOWKpw=
Subject key identifier:   D7:8A:B6:EB:F2:B6:BF:01:87:94:34:6C:88:78:8B:0C:37:80:E9:15
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       503A6EB37C2DDC645F6589AC4483D46610AE12E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/D78AB6EBF2B6BF018794346C88788B0C3780E915.mft
caRepository:             rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 12:54:55 +0000
Certificate not after:    Wed 04 Dec 2024 12:59:55 +0000
Subordinate resources:    AS: 266310
                          IP: 170.79.196.0/22
                          IP: 2804:35d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3a:6e:b3:7c:2d:dc:64:5f:65:89:ac:44:83:d4:66:10:ae:12:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 12:54:55 2023 GMT
            Not After : Dec  4 12:59:55 2024 GMT
        Subject: CN=D78AB6EBF2B6BF018794346C88788B0C3780E915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:ee:02:28:db:8c:f7:9f:0b:ab:49:ba:1f:
                    f9:73:e1:a4:50:98:59:9b:b2:fb:19:2c:43:c8:b3:
                    f1:e6:63:20:6c:a2:10:7b:ee:8b:44:7f:4b:40:dd:
                    3a:72:58:c4:6a:b8:a3:21:21:21:50:ef:f4:31:fd:
                    33:d6:bc:1a:1a:a7:57:09:7d:7c:05:e0:fe:5e:f4:
                    35:ee:21:5d:d7:6f:e5:85:7c:76:94:b6:9c:16:97:
                    3d:df:0a:a3:74:e8:df:3f:73:50:6e:66:f5:57:c5:
                    75:b0:24:25:8f:be:61:85:ff:be:0c:63:da:ee:04:
                    bc:c9:18:6b:55:00:23:90:b8:e4:5a:7e:0f:cf:b4:
                    90:14:d7:55:79:08:67:c4:83:c1:d2:b1:e2:a3:9e:
                    66:b1:4c:8a:17:c2:4b:5c:d0:b8:d8:a5:15:77:f7:
                    2c:4b:82:49:39:fe:70:5a:4d:f8:32:0c:e0:31:b3:
                    80:f1:be:98:1a:13:02:24:ac:7c:0a:d6:4a:92:35:
                    77:54:75:9f:5c:d9:ec:97:da:d0:e8:4c:94:aa:97:
                    4a:8f:25:fd:e3:98:c2:8c:3c:46:c3:d5:c3:00:5c:
                    ce:17:a3:61:18:c9:07:2b:20:c1:97:ee:dd:d5:79:
                    dc:ec:77:92:7a:66:55:34:48:bb:e1:ce:1d:b2:de:
                    6f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:8A:B6:EB:F2:B6:BF:01:87:94:34:6C:88:78:8B:0C:37:80:E9:15
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/D78AB6EBF2B6BF018794346C88788B0C3780E915.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.196.0/22
                IPv6:
                  2804:35d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266310

    Signature Algorithm: sha256WithRSAEncryption
         11:bb:c2:b3:2d:54:13:99:e8:34:91:46:f0:94:4c:d2:79:fe:
         c0:8f:b4:8f:d3:41:e9:1c:93:ed:8a:72:1b:88:91:26:6a:fe:
         be:19:13:60:68:ef:51:85:f8:f5:9d:63:19:2f:97:f8:1e:04:
         5d:cf:a1:2b:b0:66:aa:65:6e:8c:f4:6f:30:7c:28:7e:60:5f:
         17:e8:09:bd:e9:d6:4c:b1:ca:23:4e:a0:06:86:cc:59:bf:3c:
         b4:4f:be:a7:6d:4e:23:9a:d0:00:e7:94:9e:71:b4:9d:1e:8c:
         a8:e3:5e:67:8a:d8:17:57:94:5d:98:aa:68:ea:6a:9f:c5:a2:
         33:8a:93:e6:7f:9a:2b:87:37:f4:b9:cd:07:37:e6:81:0d:c6:
         88:3b:94:cd:94:16:bd:04:ab:ac:c6:ab:44:57:74:94:f7:08:
         43:6d:d6:0d:82:67:56:66:b3:8f:80:8a:4b:60:0a:b4:f8:fd:
         6b:24:1d:ed:c8:67:df:ef:bf:98:50:30:0d:c2:3c:40:dc:50:
         10:7a:07:b4:cb:1b:27:cc:16:46:74:a2:8a:46:ad:98:e3:65:
         aa:4f:99:f5:40:2d:6b:11:97:57:de:93:72:5a:84:46:98:7c:
         bf:25:7e:8f:86:fc:0e:16:47:46:e6:6d:0e:d9:61:0c:19:3f:
         cd:79:e5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----