Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.cer
File:                     E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.cer (raw, json)
Hash identifier:          CLMHQZ/H5wzU2bm1UDPltFgIMqTei/F21DWe8Wjl/Ys=
Subject key identifier:   E1:2A:4D:AF:B4:E8:BE:DC:6B:15:AD:55:AA:C7:A0:38:A4:28:75:CD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       715C992D0D4FEEED9FA4C68440B5A9C9535DF18F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Aug 2023 17:55:10 +0000
Certificate not after:    Thu 22 Aug 2024 18:00:10 +0000
Subordinate resources:    AS: 271285
                          IP: 200.80.104.0/22
                          IP: 2804:791c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5c:99:2d:0d:4f:ee:ed:9f:a4:c6:84:40:b5:a9:c9:53:5d:f1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 24 17:55:10 2023 GMT
            Not After : Aug 22 18:00:10 2024 GMT
        Subject: CN=E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:08:25:33:9c:c8:a6:27:e9:f6:a3:9e:8e:
                    e2:71:e1:8a:d0:f5:fe:a5:9d:ef:68:e9:40:df:4c:
                    f6:89:81:b0:08:bd:73:ca:6d:5d:86:c3:5b:42:90:
                    0f:ba:fe:2a:86:7a:c2:17:31:f4:b1:f9:09:0b:e6:
                    59:f9:dd:18:42:cc:dc:a9:20:1c:68:28:c2:bf:7a:
                    e9:e5:4b:1b:a0:89:3b:d7:d1:83:3f:2c:57:5e:39:
                    88:d9:68:8b:31:2f:9a:96:52:f8:da:5c:55:a4:fa:
                    6f:04:59:fb:86:40:4f:d8:e4:31:e8:7f:9d:14:70:
                    ed:1d:36:57:db:a5:e1:72:86:90:79:f8:49:78:4b:
                    60:ab:1d:38:f3:3b:50:0a:78:c7:39:53:48:34:47:
                    39:b1:d1:7b:aa:52:b5:6f:15:4f:b8:5c:72:32:1f:
                    a4:2e:53:ff:fa:b5:16:5c:a1:3a:20:64:26:78:aa:
                    0e:54:78:5a:c5:36:d2:43:26:c3:1e:e7:17:c8:38:
                    9c:b8:6b:07:c6:c3:93:d5:6f:ad:9a:bb:16:3a:c1:
                    0b:0b:24:35:b6:0f:80:e7:b7:bd:3f:01:11:d8:b8:
                    85:a2:62:b7:9a:9b:72:25:74:e2:a7:c4:9e:c4:7e:
                    e7:92:9f:49:f7:ef:66:19:e9:64:10:6f:88:c3:43:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:2A:4D:AF:B4:E8:BE:DC:6B:15:AD:55:AA:C7:A0:38:A4:28:75:CD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.104.0/22
                IPv6:
                  2804:791c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271285

    Signature Algorithm: sha256WithRSAEncryption
         b6:06:36:94:6c:57:86:d8:31:ea:04:3d:8a:5a:66:bd:a8:cf:
         a1:d1:50:1c:05:d7:db:0d:7f:06:10:5b:ad:91:3b:72:e3:bf:
         ba:8a:86:a3:5c:fa:22:0e:0c:86:2d:e0:4d:3e:5d:48:cd:c2:
         7b:93:d5:b4:58:c7:81:c4:8f:89:40:f3:30:b2:3d:b3:12:2f:
         18:3a:6e:8a:a8:e5:11:0f:0e:05:e7:ca:ae:b4:7d:a8:cf:4f:
         06:b6:ef:4d:b1:2c:f0:6c:30:e8:28:fb:90:63:2c:92:32:f5:
         55:9a:39:e0:43:23:77:b1:6d:55:54:fa:1a:3e:f9:3d:9a:5f:
         fc:b0:74:37:80:e5:aa:41:0d:8a:e5:c0:3f:64:bb:ad:a0:27:
         78:77:cf:81:be:c0:ba:12:f2:a9:4c:15:82:c9:c6:91:97:92:
         37:20:97:15:5d:5e:bf:af:a7:44:b9:4b:aa:5a:35:4e:c8:cc:
         38:51:78:49:46:52:65:83:21:fa:76:09:f5:c3:c5:89:25:1d:
         ac:e9:3b:90:31:09:19:eb:f3:c4:85:15:61:e4:a8:43:87:86:
         62:86:7f:1d:aa:4c:59:71:9b:98:db:4d:64:ca:f9:f9:9f:3f:
         74:94:ab:df:c8:c3:5e:72:d7:24:ec:e2:71:87:a9:02:e6:bc:
         6c:45:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----