Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D824C23121EFD846C683EDEED166C5C40784AE04.cer
File:                     D824C23121EFD846C683EDEED166C5C40784AE04.cer (raw, json)
Hash identifier:          CYberHVRa5ea3hDnWMxzx6BNYYbGpsxk4/4N6A7tl+c=
Subject key identifier:   D8:24:C2:31:21:EF:D8:46:C6:83:ED:EE:D1:66:C5:C4:07:84:AE:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       310B7D24A6869E583F88945A17240E35E99D22CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/D824C23121EFD846C683EDEED166C5C40784AE04.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Jul 2023 17:12:38 +0000
Certificate not after:    Thu 04 Jul 2024 17:17:38 +0000
Subordinate resources:    AS: 266044
                          IP: 45.4.32.0/22
                          IP: 2804:39b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0b:7d:24:a6:86:9e:58:3f:88:94:5a:17:24:0e:35:e9:9d:22:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  6 17:12:38 2023 GMT
            Not After : Jul  4 17:17:38 2024 GMT
        Subject: CN=D824C23121EFD846C683EDEED166C5C40784AE04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:6e:bd:99:c3:1b:6f:4b:82:c4:f4:b6:6f:
                    aa:c1:ba:ba:55:c7:f0:34:f1:34:19:8e:b3:70:d1:
                    46:3f:bc:c8:0a:74:af:bc:96:a6:5f:89:7a:9e:93:
                    8c:9c:ff:7c:95:cb:d4:7c:93:eb:69:e5:19:fc:fe:
                    3c:13:60:13:88:30:65:62:a9:7c:96:66:4c:ab:b1:
                    16:1c:6e:58:a8:a3:12:56:95:17:79:73:bb:a1:2b:
                    d7:fd:11:af:fc:81:db:ce:8d:54:ca:66:dc:90:b1:
                    3c:92:4a:aa:ed:57:1c:87:4f:b9:c7:a2:57:fe:b9:
                    83:83:38:c0:98:4a:1c:dd:71:7f:40:9f:1c:51:14:
                    d3:91:f4:01:9f:3b:11:8a:e9:ac:3d:2a:13:bb:3e:
                    f0:8c:2f:4a:a6:61:e9:e4:86:11:4b:6d:01:f4:24:
                    45:5e:19:7f:53:db:4e:84:d5:a0:6d:a1:16:b6:e6:
                    d4:4a:1b:51:b5:6e:63:c9:ca:f4:5f:4c:5b:a4:09:
                    0d:e7:fc:69:28:3d:de:de:60:13:91:8e:a6:8e:90:
                    82:29:f7:31:74:73:e9:ef:fb:26:29:15:1c:44:b5:
                    b8:c1:8e:1f:f7:6f:55:6f:8d:3b:81:d9:ba:a8:fd:
                    34:ab:5a:71:a4:d3:71:c0:e1:93:12:2d:72:4e:ef:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:24:C2:31:21:EF:D8:46:C6:83:ED:EE:D1:66:C5:C4:07:84:AE:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/D824C23121EFD846C683EDEED166C5C40784AE04.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.32.0/22
                IPv6:
                  2804:39b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266044

    Signature Algorithm: sha256WithRSAEncryption
         82:12:ec:eb:0c:6f:77:a7:2e:2e:69:10:ae:98:d3:17:1a:17:
         fc:44:47:39:12:93:8c:42:b9:4f:37:19:73:a6:d1:68:8c:98:
         6f:75:15:c7:d9:f9:20:f9:1b:c7:fb:92:47:5f:1f:d0:e8:db:
         b6:b7:e0:b5:f8:1d:63:1a:8c:0f:ee:af:f9:d5:8c:f4:6e:e5:
         a9:a2:90:98:de:70:d1:f6:d5:6a:1c:6d:a0:7c:45:97:19:5d:
         6e:e7:d8:69:f2:61:54:00:02:d8:f9:05:cf:28:ad:7d:6a:c2:
         a1:87:f0:03:1c:e8:e5:e9:10:66:d2:35:a3:b5:87:a2:a1:d8:
         f9:e3:de:74:af:d0:b5:6d:7d:64:b5:ea:f3:89:9d:62:64:92:
         64:41:54:7a:08:e7:04:6e:79:25:8a:60:56:28:0b:97:29:cd:
         35:f9:36:b7:56:a6:ad:93:96:d4:d4:db:50:58:64:a8:5b:ed:
         66:9b:df:dd:bc:68:e3:95:f3:03:fb:a4:c4:3d:bc:ff:1d:92:
         56:c1:58:26:3e:9f:06:33:3a:20:92:a1:0c:fa:70:d2:6c:9c:
         d6:60:ad:bd:39:95:4f:cb:7e:11:d0:a3:34:b8:b3:09:f3:fa:
         fe:82:38:87:7d:71:d4:ba:c6:8e:d9:c5:46:52:e6:7d:18:32:
         a9:85:d4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----