Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.cer
File:                     E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.cer (raw, json)
Hash identifier:          7QOlvzQOFTec9SNyiXSd3LBDYVD8Lxew9U8TAHUs8gs=
Subject key identifier:   E5:A0:E2:BF:CC:7C:D4:B5:FF:FE:24:15:44:B3:CA:7F:46:35:6F:56
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       75F3B9F2E1EFDF21337A73B12E1570D37AF2C881
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 22:55:59 +0000
Certificate not after:    Wed 23 Oct 2024 23:00:59 +0000
Subordinate resources:    AS: 271172
                          IP: 177.223.136.0/22
                          IP: 2804:7758::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f3:b9:f2:e1:ef:df:21:33:7a:73:b1:2e:15:70:d3:7a:f2:c8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 22:55:59 2023 GMT
            Not After : Oct 23 23:00:59 2024 GMT
        Subject: CN=E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:12:cd:49:d2:24:2a:26:81:06:ba:0a:90:
                    74:e8:1b:c4:58:c1:82:e7:1d:d8:51:9b:fe:62:eb:
                    3e:13:71:af:8d:78:3a:65:e8:46:e0:e0:20:dd:df:
                    f2:b7:22:e9:26:8f:3c:1c:91:b8:6e:ac:b5:17:fa:
                    15:ba:a5:5e:72:d5:38:a5:85:08:e8:9c:67:01:f8:
                    9b:f2:9d:62:c7:77:a3:d6:11:a6:b7:a7:4e:3e:3a:
                    a1:65:90:0e:5a:4f:4a:19:1e:ca:34:36:41:47:eb:
                    61:6c:53:1a:52:65:c8:80:bb:94:d2:ea:4a:c4:5c:
                    c4:05:12:9e:54:99:d5:fe:61:8d:ec:43:81:34:19:
                    3b:b6:7a:48:f1:0b:ae:5f:2d:7c:7b:ef:a5:3f:8f:
                    8f:d0:88:51:30:d9:94:11:0c:fb:1f:be:f2:fc:71:
                    80:24:89:cb:23:df:34:ab:b3:91:2e:96:fb:af:02:
                    75:db:03:07:44:ab:22:de:16:27:61:f4:4b:6d:16:
                    28:d4:44:0c:d9:6f:70:96:2d:2a:33:82:85:96:2e:
                    80:11:2b:b3:b8:d1:c2:a0:5a:d2:3f:ca:46:46:32:
                    65:d8:5d:3d:b1:f7:92:9c:8f:f7:56:68:7c:b6:3c:
                    c8:d7:9b:82:d6:84:05:29:97:4a:70:bb:c2:6e:06:
                    c8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:A0:E2:BF:CC:7C:D4:B5:FF:FE:24:15:44:B3:CA:7F:46:35:6F:56
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.136.0/22
                IPv6:
                  2804:7758::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271172

    Signature Algorithm: sha256WithRSAEncryption
         00:67:49:6c:d2:df:be:28:ca:79:02:f1:a8:a1:d3:c2:f7:2c:
         95:1a:60:bb:69:6c:4d:6f:28:74:5d:48:b5:9f:d8:d0:b7:1c:
         99:7d:24:7f:8c:35:e8:ee:07:e2:ba:4e:a7:d9:e5:ba:07:e9:
         21:6e:0d:f0:67:8e:f7:2b:e0:6e:81:5d:81:03:79:8b:e2:ed:
         61:06:27:d2:62:c7:9b:3c:7a:04:d1:87:a2:18:7b:55:14:f6:
         d4:05:4d:9d:bf:ea:a1:c4:82:c8:04:d4:56:91:49:51:eb:f6:
         dd:46:da:fd:4a:9f:a0:01:b2:ba:80:fb:62:01:cf:ed:62:8c:
         6a:ff:3f:7b:3d:2f:d9:79:85:0d:f7:eb:14:de:ba:4c:09:84:
         b7:98:d3:44:c4:11:90:b0:21:63:9d:d9:37:45:64:2d:4f:df:
         76:bc:09:8e:fb:6b:48:60:66:2e:80:5f:a5:e6:73:3a:8b:64:
         f8:da:8d:b5:7b:64:5e:dc:65:6b:3a:c4:22:7c:56:0b:7e:49:
         1b:e4:5f:25:2f:83:39:df:47:4b:7f:4d:ef:8f:42:a6:00:81:
         da:36:79:44:1f:f9:2c:1c:81:c7:9d:de:ea:27:bb:bc:c6:84:
         c3:64:8d:e1:42:2e:9b:27:89:b2:52:a1:b8:40:63:59:2b:74:
         61:83:5b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----