Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EF704839B02B4F968478259FBC3FC05A3893883A.cer
File:                     EF704839B02B4F968478259FBC3FC05A3893883A.cer (raw, json)
Hash identifier:          yzAXvjlk8xSK+7Aw4WwjXh1DiSnOSn55UHGHBvCADV4=
Subject key identifier:   EF:70:48:39:B0:2B:4F:96:84:78:25:9F:BC:3F:C0:5A:38:93:88:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       56C954D67DB0FA113322980968E94048DBEF77EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/0/EF704839B02B4F968478259FBC3FC05A3893883A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 19:50:41 +0000
Certificate not after:    Thu 11 Jul 2024 19:55:41 +0000
Subordinate resources:    AS: 263329
                          IP: 191.7.188.0/22
                          IP: 2804:146c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c9:54:d6:7d:b0:fa:11:33:22:98:09:68:e9:40:48:db:ef:77:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 19:50:41 2023 GMT
            Not After : Jul 11 19:55:41 2024 GMT
        Subject: CN=EF704839B02B4F968478259FBC3FC05A3893883A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:17:17:3b:00:6d:fa:d7:0c:04:e6:72:15:52:
                    82:2d:11:0c:e7:6d:32:eb:af:7b:df:58:db:a1:d0:
                    e1:00:2d:85:c4:89:00:71:92:61:35:e7:69:6a:01:
                    18:21:cb:7f:01:57:44:b6:7e:28:d4:93:80:6b:36:
                    0e:77:b1:33:00:50:bf:56:c2:95:0a:4a:09:96:93:
                    8f:12:d5:fd:61:6c:8f:49:41:d4:f2:c5:9b:f9:d0:
                    77:e2:9c:6d:73:28:f9:3b:90:4b:b0:38:4a:1c:0c:
                    4f:f7:bf:75:91:a8:d2:55:df:15:d7:6c:50:b6:f4:
                    cd:9b:d4:cc:20:e4:12:1b:ae:1f:23:9a:fc:4a:dd:
                    e9:5c:d3:22:08:fd:e3:a9:5d:c3:95:2f:f5:c3:b5:
                    ee:fb:12:2c:70:bf:18:17:cf:57:c1:8e:1d:7c:5d:
                    6d:02:84:12:e8:12:88:0e:28:4f:41:17:ac:10:40:
                    5c:ff:25:6d:ab:05:a0:63:5f:fa:3c:74:ee:15:17:
                    be:d5:08:65:7f:9b:89:6b:c4:5c:1b:8a:6e:15:74:
                    41:eb:83:9e:8f:f0:4b:e6:f2:ae:47:2b:8c:e2:68:
                    a8:8b:72:eb:c5:30:c1:29:a5:15:6b:93:f0:63:ee:
                    ed:9f:4e:19:10:46:99:a9:25:84:c6:89:f5:be:c3:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:70:48:39:B0:2B:4F:96:84:78:25:9F:BC:3F:C0:5A:38:93:88:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/0/EF704839B02B4F968478259FBC3FC05A3893883A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.188.0/22
                IPv6:
                  2804:146c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263329

    Signature Algorithm: sha256WithRSAEncryption
         b5:22:38:f0:80:f2:31:9a:c4:96:75:b1:84:48:8b:4f:55:b6:
         97:48:0e:51:5f:2f:77:0f:80:46:d9:f9:cf:c0:e7:52:30:68:
         ab:75:a5:02:6b:d9:76:2e:60:1f:fd:30:12:c2:5d:dd:24:dd:
         75:d3:61:53:8c:61:b0:1f:68:de:d4:03:51:74:20:5f:7b:bc:
         8d:6a:fe:80:0d:03:65:8d:8c:68:28:f3:45:b8:56:9e:6c:c2:
         4b:46:79:d1:bf:b3:0d:a8:18:70:ec:6e:0b:c3:d6:8a:aa:48:
         8b:78:f1:8b:0d:e5:3e:82:a3:d3:8c:ab:1b:cd:91:10:25:59:
         2f:14:f4:61:59:7d:09:c7:62:ec:96:7c:e4:46:36:e2:4f:52:
         41:22:b2:24:93:30:a7:38:c2:2a:69:04:85:d8:a8:46:91:d2:
         bd:ed:03:f8:0e:a0:a3:33:b2:f2:b0:e2:eb:19:31:88:72:30:
         e2:20:df:c5:0e:5c:0d:e8:f1:d1:0b:1a:2d:5f:db:2f:52:ef:
         30:f2:99:26:14:9b:43:40:c3:66:20:ff:ae:7b:85:17:e2:dc:
         b6:f5:d3:1c:fb:c6:38:a3:ed:f0:bc:bb:9a:43:32:c1:1f:c1:
         06:6b:ef:fb:af:79:9e:7d:8f:dc:b5:39:ac:aa:82:ce:83:3c:
         14:64:fe:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----