Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EE39F969F652DDE3D0F5A3F062A71D5D27381C17.cer
File:                     EE39F969F652DDE3D0F5A3F062A71D5D27381C17.cer (raw, json)
Hash identifier:          Qjqp6lm/YXiac0VmWUMJJfdJX5sKG335KkHEyS8R9xs=
Subject key identifier:   EE:39:F9:69:F6:52:DD:E3:D0:F5:A3:F0:62:A7:1D:5D:27:38:1C:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       480D4A175E8530521573083BB9931BB3381283F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/EE39F969F652DDE3D0F5A3F062A71D5D27381C17.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 19:25:10 +0000
Certificate not after:    Thu 01 Aug 2024 19:30:10 +0000
Subordinate resources:    AS: 265942
                          IP: 131.196.152.0/22
                          IP: 2804:402c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0d:4a:17:5e:85:30:52:15:73:08:3b:b9:93:1b:b3:38:12:83:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 19:25:10 2023 GMT
            Not After : Aug  1 19:30:10 2024 GMT
        Subject: CN=EE39F969F652DDE3D0F5A3F062A71D5D27381C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:c0:3d:b5:e1:4e:f7:b6:34:72:9f:21:6a:
                    07:fc:85:b6:d2:42:55:c0:55:42:25:3b:98:5a:93:
                    bf:d3:23:a6:d2:7e:60:fc:6b:b8:8c:ca:5c:24:60:
                    8c:ec:a4:f6:02:f2:a0:2b:f7:f4:0d:74:70:5d:14:
                    70:fc:57:6d:58:23:a8:a8:31:e8:34:01:88:10:8b:
                    16:f8:5b:b6:bd:c9:1f:dc:30:f7:1c:39:ca:da:be:
                    26:c4:15:6c:a7:3f:5c:70:0c:b5:9e:90:99:f7:13:
                    9a:49:60:0d:d8:e2:09:f9:96:52:6d:7a:5c:7d:17:
                    48:f3:e2:8e:09:00:b5:e8:1a:00:1a:b9:d3:e1:5f:
                    52:b4:75:61:d6:a8:3e:2b:af:fa:e0:48:7d:f9:ed:
                    1e:e2:59:3e:db:0b:c4:e0:f1:5a:34:69:80:f6:f4:
                    ff:1b:79:02:b3:c2:2b:0f:89:69:34:1a:d8:21:11:
                    94:32:49:a8:72:09:2b:3e:99:bc:b5:aa:52:db:78:
                    ca:92:7f:be:dc:24:04:bf:94:19:da:65:b3:fd:6c:
                    f1:d7:f3:c2:10:0f:f8:86:a8:60:a2:06:65:4e:0a:
                    a0:cf:75:7c:dd:9c:33:c5:f1:83:03:5e:ec:7a:6a:
                    ee:93:84:1d:09:a0:41:cb:3b:75:4f:5e:c1:6d:00:
                    55:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:39:F9:69:F6:52:DD:E3:D0:F5:A3:F0:62:A7:1D:5D:27:38:1C:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/EE39F969F652DDE3D0F5A3F062A71D5D27381C17.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.152.0/22
                IPv6:
                  2804:402c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265942

    Signature Algorithm: sha256WithRSAEncryption
         72:64:6b:1c:7b:aa:e9:e2:0f:07:f8:d3:f0:3e:2d:32:cf:d8:
         d0:1a:69:1c:b6:25:08:b1:bb:26:22:35:34:3e:be:fa:69:21:
         99:92:ed:b3:3f:ed:a1:7a:fd:3b:4e:70:97:87:07:ef:16:5a:
         fd:08:78:a8:08:a4:ad:99:28:f5:64:37:8a:d5:2b:39:d8:13:
         c2:14:d7:dd:7e:1f:32:d6:29:7f:22:b9:e7:40:6e:80:a4:d0:
         02:a2:44:c0:01:6c:04:b4:01:44:c4:9c:9b:b4:9d:0d:91:46:
         26:f3:87:4d:c7:69:37:a6:0b:60:f8:d8:63:80:95:46:be:bf:
         f3:ba:fd:fd:6b:3b:da:55:d6:0d:ad:79:46:77:19:3c:4c:52:
         a8:d7:36:54:5c:28:2f:c5:f6:6e:13:a8:01:db:36:3b:dd:e8:
         4f:a5:c2:94:e5:a5:23:a3:97:f5:b2:cc:f2:8e:1c:ad:87:f3:
         d9:3e:14:8d:b9:c5:71:00:4d:a2:6e:61:d5:ca:92:cf:b2:3c:
         81:e3:ad:4a:29:ac:de:43:0d:5d:24:6e:1d:a2:d6:04:0c:b6:
         87:64:af:d4:54:66:dc:16:7b:09:bb:3a:66:c9:a0:97:74:78:
         69:95:b1:95:b3:2c:75:ef:d3:1a:8b:49:32:04:87:d0:8d:b9:
         b2:ab:67:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----