Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.cer
File:                     E5754BC58952E3CFD46152E05FECC3D0D1B5429C.cer (raw, json)
Hash identifier:          F4fNIhoL2tthI7SXWk2KXx5Mg/eBBi3NI5dOnzFjGvg=
Subject key identifier:   E5:75:4B:C5:89:52:E3:CF:D4:61:52:E0:5F:EC:C3:D0:D1:B5:42:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C52741807A0964FF68EDB8E5E1F18FF7A0BE196
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Aug 2023 20:25:09 +0000
Certificate not after:    Thu 22 Aug 2024 20:30:09 +0000
Subordinate resources:    AS: 262883
                          IP: 138.99.20.0/22
                          IP: 177.22.0.0/20
                          IP: 2804:2324::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:52:74:18:07:a0:96:4f:f6:8e:db:8e:5e:1f:18:ff:7a:0b:e1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 24 20:25:09 2023 GMT
            Not After : Aug 22 20:30:09 2024 GMT
        Subject: CN=E5754BC58952E3CFD46152E05FECC3D0D1B5429C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:b4:91:2a:69:5b:e3:bb:97:df:f5:70:74:
                    a4:f7:39:17:ec:85:43:2d:37:56:0b:68:4c:3b:0c:
                    f4:9a:4b:b0:b9:be:fe:96:65:cf:71:99:e5:06:05:
                    4c:70:22:a9:13:71:2a:1a:04:61:74:3e:c9:24:4d:
                    5e:96:dc:b8:4b:de:f9:45:f3:51:5d:fe:a0:d0:bb:
                    0f:4e:75:f0:95:b7:01:d2:0c:a4:18:04:d1:40:14:
                    35:1b:11:96:5f:99:1d:45:0b:03:c7:01:33:12:5a:
                    db:cd:31:b6:98:24:80:45:07:38:8e:3c:e2:1c:62:
                    42:2a:fd:eb:22:a4:9f:8a:4f:83:81:6c:2c:6f:e8:
                    c2:1a:77:b3:b9:20:60:06:b2:26:cc:eb:5c:78:81:
                    e9:0f:de:65:44:88:d2:a6:ac:3b:b8:05:de:c5:68:
                    1e:24:6b:8b:a7:dc:6f:de:ab:2f:08:fc:fd:45:12:
                    a5:c1:d5:24:e3:19:68:16:7a:dc:e6:3d:75:8c:55:
                    43:1c:40:28:63:6c:0f:69:67:61:e7:d7:38:c4:79:
                    60:cc:3a:84:d6:75:05:a5:56:78:c8:9b:62:33:4f:
                    b0:7f:91:f0:3d:85:b9:38:37:a2:d9:c5:c2:2f:ae:
                    5b:12:cd:5b:2b:78:bb:1d:a2:73:8f:c8:56:1f:2c:
                    fe:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:75:4B:C5:89:52:E3:CF:D4:61:52:E0:5F:EC:C3:D0:D1:B5:42:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.20.0/22
                  177.22.0.0/20
                IPv6:
                  2804:2324::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262883

    Signature Algorithm: sha256WithRSAEncryption
         79:0f:84:f2:3f:40:ed:0e:6c:b1:38:19:9a:ea:89:90:44:4c:
         85:64:39:66:91:97:97:fa:06:20:9f:a6:ae:18:71:22:f0:e2:
         d0:cf:c0:62:a9:5d:da:f5:56:8a:9e:55:89:25:43:26:e9:e7:
         31:38:af:55:9c:51:cd:3c:3d:64:33:17:63:28:d4:08:f3:7f:
         14:ff:df:1b:05:4e:36:ef:54:04:77:4a:6b:18:dd:22:f0:00:
         b4:18:fe:9c:43:ba:56:93:c0:66:20:11:36:fc:a4:62:7b:49:
         1f:d3:b4:60:79:d7:eb:d4:aa:48:08:3f:05:5f:b8:46:ee:25:
         bd:5f:84:25:57:c9:a3:dc:74:c6:34:e9:bb:e7:e3:8e:be:3e:
         90:68:ce:7f:ef:b2:42:e4:6a:d5:db:dd:99:aa:fc:90:95:df:
         b8:63:d5:83:57:5b:7c:52:84:9e:d5:9e:42:ac:b5:78:e5:c1:
         e8:20:c2:f9:91:b2:ee:95:20:a1:18:33:4d:3b:91:82:3f:0c:
         eb:76:f1:bc:f6:fc:72:a2:18:97:b6:5f:de:41:0a:87:9e:dd:
         4a:25:f2:24:bc:22:7b:e5:7f:c4:5f:13:bd:c2:dd:27:ff:67:
         c5:c3:87:bf:e9:86:e7:85:96:03:73:16:98:a5:e5:66:c7:c8:
         08:e6:88:83
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUPFJ0GAeglk/2jtuOXh8Y/3oL4ZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MjQyMDI1MDlaFw0yNDA4MjIyMDMwMDlaMDMxMTAvBgNV
BAMTKEU1NzU0QkM1ODk1MkUzQ0ZENDYxNTJFMDVGRUNDM0QwRDFCNTQyOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3p7SRKmlb47uX3/VwdKT3ORfs
hUMtN1YLaEw7DPSaS7C5vv6WZc9xmeUGBUxwIqkTcSoaBGF0PskkTV6W3LhL3vlF
81Fd/qDQuw9OdfCVtwHSDKQYBNFAFDUbEZZfmR1FCwPHATMSWtvNMbaYJIBFBziO
POIcYkIq/esipJ+KT4OBbCxv6MIad7O5IGAGsibM61x4gekP3mVEiNKmrDu4Bd7F
aB4ka4un3G/eqy8I/P1FEqXB1STjGWgWetzmPXWMVUMcQChjbA9pZ2Hn1zjEeWDM
OoTWdQWlVnjIm2IzT7B/kfA9hbk4N6LZxcIvrlsSzVsreLsdonOPyFYfLP5VAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTldUvFiVLjz9Rh
UuBf7MPQ0bVCnDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ETmZxVGRGSk04VTVBWFR5UDQ2bjVIRDVZNVgxcXB5OGVC
VDNDc0VRTXZ3NC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ETmZxVGRGSk04VTVBWFR5UDQ2bjVIRDVZNVgxcXB5OGVC
VDNDc0VRTXZ3NC8wL0U1NzU0QkM1ODk1MkUzQ0ZENDYxNTJFMDVGRUNDM0QwRDFC
NTQyOUMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAopjFAMEBLEWADANBAIA
AjAHAwUAKAQjJDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAuMwDQYJKoZIhvcN
AQELBQADggEBAHkPhPI/QO0ObLE4GZrqiZBETIVkOWaRl5f6BiCfpq4YcSLw4tDP
wGKpXdr1VoqeVYklQybp5zE4r1WcUc08PWQzF2Mo1AjzfxT/3xsFTjbvVAR3SmsY
3SLwALQY/pxDulaTwGYgETb8pGJ7SR/TtGB51+vUqkgIPwVfuEbuJb1fhCVXyaPc
dMY06bvn446+PpBozn/vskLkatXb3Zmq/JCV37hj1YNXW3xShJ7VnkKstXjlwegg
wvmRsu6VIKEYM007kYI/DOt28bz2/HKiGJe2X95BCoee3Uol8iS8Invlf8RfE73C
3Sf/Z8XDh7/phueFlgNzFpil5WbHyAjmiIM=
-----END CERTIFICATE-----