Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E57428CD781F4DD43EE8A9D9B65ED50D8FA05505.cer
File:                     E57428CD781F4DD43EE8A9D9B65ED50D8FA05505.cer (raw, json)
Hash identifier:          XFSf5kr+zebo9d51oUCL57zbtrgn5alqf2G4POGJNGM=
Subject key identifier:   E5:74:28:CD:78:1F:4D:D4:3E:E8:A9:D9:B6:5E:D5:0D:8F:A0:55:05
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       600475810638B4EF1A367DC2BE81BB39419741D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/0/E57428CD781F4DD43EE8A9D9B65ED50D8FA05505.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 13:29:29 +0000
Certificate not after:    Wed 29 May 2024 13:34:29 +0000
Subordinate resources:    AS: 269373
                          IP: 45.185.112.0/22
                          IP: 2804:63a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:04:75:81:06:38:b4:ef:1a:36:7d:c2:be:81:bb:39:41:97:41:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 13:29:29 2023 GMT
            Not After : May 29 13:34:29 2024 GMT
        Subject: CN=E57428CD781F4DD43EE8A9D9B65ED50D8FA05505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:c5:86:2b:79:dd:35:b7:28:b2:15:bf:12:
                    15:d3:51:98:a0:88:92:d7:6e:3d:4e:92:a8:fd:5c:
                    fe:0c:8c:28:8b:79:e2:ec:8d:a4:6e:07:df:ec:20:
                    70:93:d7:f0:da:fc:e0:4a:2a:95:ae:e4:31:ab:25:
                    a1:35:af:d6:1f:cf:6d:55:0c:dc:d7:82:d3:c5:3e:
                    2a:d3:33:2d:cd:51:a4:7e:19:8e:88:a4:64:f7:9e:
                    f8:48:ca:08:44:53:89:00:f8:bf:08:15:91:73:03:
                    96:fb:3e:10:9a:77:8d:12:36:64:60:9e:71:7b:ac:
                    fc:7c:25:1e:12:f8:ae:52:21:98:8a:b5:87:cb:ea:
                    fe:fd:70:21:99:2c:b1:23:65:5c:54:84:43:8d:00:
                    fb:78:1d:b5:c3:fe:3d:f5:c6:a7:ed:c5:67:6b:95:
                    41:30:94:55:93:49:88:0e:b6:45:87:ac:c7:1b:a6:
                    a2:fb:9c:ac:6c:76:91:a8:b1:14:f8:0a:85:23:7c:
                    b2:dd:9f:76:46:8c:cc:70:c5:11:c8:b9:1e:bd:fe:
                    47:9b:ee:30:52:ec:44:19:20:c5:e8:dd:fe:b4:13:
                    2d:7d:95:e2:50:2f:70:4c:d4:33:37:3b:41:88:ef:
                    03:b8:95:0c:15:d1:12:d4:db:68:95:39:d8:1d:cd:
                    c0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:74:28:CD:78:1F:4D:D4:3E:E8:A9:D9:B6:5E:D5:0D:8F:A0:55:05
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/0/E57428CD781F4DD43EE8A9D9B65ED50D8FA05505.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.112.0/22
                IPv6:
                  2804:63a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269373

    Signature Algorithm: sha256WithRSAEncryption
         12:44:6c:ae:f1:3b:27:92:c3:49:24:9d:47:f3:93:e1:38:fc:
         05:4c:bd:64:36:0d:53:0a:ed:ef:98:44:ed:36:e1:4d:c7:c9:
         31:c9:9a:b7:01:3c:f3:b5:47:49:b4:ad:92:77:0e:ee:64:1c:
         11:3c:1f:72:df:78:61:d8:26:dd:0c:2c:31:cb:21:21:26:4b:
         74:a6:2f:32:d3:8c:e4:73:1b:96:dd:ed:a3:96:fb:5a:61:a9:
         53:ff:16:f3:77:58:1c:13:cf:65:9f:24:ba:52:50:cb:c9:0b:
         f4:67:a6:f5:fe:a3:0b:d9:0a:42:df:5e:f7:90:b5:a7:14:b0:
         d2:cb:e8:b4:64:9d:a9:45:39:d5:9a:2f:62:66:5c:f3:68:c5:
         5c:41:0c:df:8f:70:72:f4:66:53:0a:c1:bc:d9:61:a2:1f:a2:
         fc:22:02:41:50:58:ca:6d:52:95:a5:bc:0e:71:c8:d4:b1:83:
         28:9a:c0:c5:62:de:71:38:c1:eb:ed:c4:56:27:21:ae:bf:32:
         25:f5:13:62:da:a7:90:da:cd:f9:0a:d6:8d:f1:cd:c2:08:1b:
         c2:ca:20:cb:14:1a:7e:42:f8:27:1a:55:4d:92:3b:a6:24:00:
         90:20:a6:39:10:fc:a2:1a:30:85:da:e5:d5:83:bd:d4:a6:83:
         c1:d5:26:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----