Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1.cer
File:                     DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1.cer (raw, json)
Hash identifier:          aeWOgXxD/Ak4fmPaZEAorOgFDUwCtc0CQxBz+cPTLSw=
Subject key identifier:   DF:4A:B5:F9:B9:65:30:45:23:F2:CE:BC:86:6B:AF:3C:C8:3D:E7:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E5900E48C54AA2BCD86ADEF89B1278FA17F25CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 27 May 2023 10:02:18 +0000
Certificate not after:    Sat 25 May 2024 10:07:18 +0000
Subordinate resources:    AS: 271456
                          IP: 181.233.112.0/22
                          IP: 2804:7bd0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:59:00:e4:8c:54:aa:2b:cd:86:ad:ef:89:b1:27:8f:a1:7f:25:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 27 10:02:18 2023 GMT
            Not After : May 25 10:07:18 2024 GMT
        Subject: CN=DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:fb:3c:b7:4b:18:64:02:35:98:74:7c:0b:
                    c2:c5:45:68:fd:cf:a7:2b:66:c7:91:23:a5:5a:42:
                    0c:5f:d4:99:a2:d5:d7:4b:21:56:a1:50:d6:14:22:
                    a7:0f:a2:d5:95:3f:ea:3e:81:53:de:53:43:80:b2:
                    80:ab:03:a6:3f:6c:17:4f:e0:2f:d5:dc:21:a7:5c:
                    47:48:45:c6:e4:0a:e2:7d:dd:a2:79:87:ae:e1:30:
                    f7:df:c6:8f:99:11:07:a0:ed:52:c6:61:a2:5b:5c:
                    91:3d:b3:96:58:eb:94:10:3c:ba:04:8c:2d:c0:a3:
                    55:67:a4:39:ee:84:a0:03:97:b6:4d:06:c7:2a:14:
                    e0:1c:58:f9:80:04:df:ab:94:ac:f7:29:ca:0c:a8:
                    62:de:d2:94:48:7c:e7:12:42:94:d3:2a:d9:1b:cb:
                    9f:9a:4b:8e:ec:d3:82:0d:44:32:90:8e:c3:83:c8:
                    ec:ad:d4:32:58:52:46:62:3e:e1:6a:ad:7a:ee:39:
                    55:cf:ab:9b:b1:45:ef:61:97:7f:8f:5a:9d:10:69:
                    d8:55:8f:ff:5e:8f:f8:7b:aa:d0:52:1e:7d:76:d1:
                    a1:cd:5f:61:64:d0:ef:73:7d:33:65:d3:12:67:84:
                    ca:72:1a:2b:c2:a3:04:96:ed:e2:5a:dc:b6:de:44:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:4A:B5:F9:B9:65:30:45:23:F2:CE:BC:86:6B:AF:3C:C8:3D:E7:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.112.0/22
                IPv6:
                  2804:7bd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271456

    Signature Algorithm: sha256WithRSAEncryption
         7e:50:ef:cc:04:e8:5e:7e:97:47:ef:56:82:19:7c:be:4e:64:
         85:fb:2b:fa:e2:c0:6d:c9:52:61:2b:ae:89:1a:09:d8:1a:d5:
         44:eb:32:e9:1f:90:f3:85:55:b8:f5:72:4a:be:c3:6c:91:68:
         3c:a7:0d:ea:b5:72:c7:0f:8a:75:87:8b:c0:c4:75:45:e0:30:
         56:74:76:12:11:11:34:d0:cd:6b:1d:65:57:3b:72:32:86:89:
         34:81:6e:78:6d:e7:50:44:62:b1:18:63:03:46:25:86:21:87:
         8a:7e:3d:91:36:4d:3c:81:1c:5b:92:f2:7b:11:c6:8c:1b:73:
         3c:21:33:6a:0b:ed:79:3b:93:59:1f:21:70:17:17:b6:93:b7:
         09:91:34:27:6c:fb:c8:e7:d2:14:81:d2:d3:b7:59:2b:52:41:
         cb:8a:52:e0:82:5c:09:71:84:62:fb:12:d0:6f:b6:90:74:b2:
         2f:45:58:45:c9:13:94:0a:9a:e8:0b:be:e2:b0:c0:c2:68:03:
         de:2b:5b:7d:ef:b0:19:5c:e9:4b:76:81:25:2b:03:d4:9b:69:
         62:9b:8c:ac:11:80:6d:9f:65:60:b9:8b:5c:9b:43:f1:cc:01:
         f7:1b:1e:28:b5:c9:b2:d4:ee:b5:7f:09:e0:72:56:11:84:aa:
         ca:85:74:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----