Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.cer
File:                     F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.cer (raw, json)
Hash identifier:          OFqjp2s5rp/kuXzee7QbyjR8E+EBDbEEJIu2SFRaMuI=
Subject key identifier:   F6:33:EC:1D:98:41:26:CD:6B:D3:A7:EF:2F:04:BC:6E:15:F2:61:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E905259A08C7FA4D877E8EFA12FD0181CAFDCF5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Jul 2023 13:05:15 +0000
Certificate not after:    Thu 04 Jul 2024 13:10:15 +0000
Subordinate resources:    AS: 271011
                          IP: 190.8.172.0/22
                          IP: 2804:74e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:90:52:59:a0:8c:7f:a4:d8:77:e8:ef:a1:2f:d0:18:1c:af:dc:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  6 13:05:15 2023 GMT
            Not After : Jul  4 13:10:15 2024 GMT
        Subject: CN=F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:27:5c:55:02:5b:bf:56:24:1b:53:d0:d4:
                    ab:0b:6a:6b:e3:06:38:75:ec:7f:98:b5:38:cf:2e:
                    f6:9c:df:65:1e:56:29:a9:4c:9f:40:16:18:7d:15:
                    d7:74:dd:56:36:60:53:75:66:fe:a1:8a:3b:5d:0d:
                    f8:ac:1e:11:69:f9:22:98:f4:5f:5b:0e:ca:c6:ba:
                    63:22:af:6b:0b:6b:93:cc:4d:93:5b:97:82:44:4e:
                    2a:28:60:f2:5f:97:34:3c:95:b6:f4:eb:23:22:60:
                    d4:27:20:ba:bd:7f:aa:2c:b5:dc:75:9f:95:7b:f3:
                    53:37:f4:49:40:15:7d:72:25:06:a2:5c:86:14:ab:
                    10:1c:61:7d:ff:5a:62:c0:f8:18:35:78:e6:36:af:
                    4c:89:f5:2e:21:de:bd:d3:11:27:15:8a:d3:8e:05:
                    78:bd:ff:db:1b:fb:ee:90:01:d9:95:7c:3d:a5:18:
                    ad:1f:dd:eb:fc:50:35:db:22:f0:57:8f:2d:55:79:
                    5d:ed:f6:41:e0:c7:be:69:75:e8:f6:6e:ae:b4:41:
                    52:a5:32:0d:ac:16:2e:c2:77:26:8a:28:2a:c1:f5:
                    e1:39:90:04:fc:85:47:30:21:8d:34:cb:a3:ae:21:
                    36:0f:3a:79:35:8c:49:75:95:4e:50:33:76:2b:ac:
                    58:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:33:EC:1D:98:41:26:CD:6B:D3:A7:EF:2F:04:BC:6E:15:F2:61:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.172.0/22
                IPv6:
                  2804:74e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271011

    Signature Algorithm: sha256WithRSAEncryption
         1e:b0:2a:e8:b7:d2:30:b6:b0:f2:6b:9f:45:68:34:f6:bb:32:
         5a:04:c6:37:0d:61:78:9c:39:1c:38:f2:20:12:b0:0e:a5:34:
         7a:4d:12:ba:03:82:0e:9e:0c:d0:d4:dd:60:63:92:69:a9:a4:
         35:d1:63:25:c9:4f:3f:3d:78:a2:63:44:80:00:a3:64:28:d7:
         b0:82:f3:5b:87:56:8f:b3:3b:3e:dd:39:4b:d4:fc:bc:22:a4:
         53:41:a9:85:3b:dc:08:af:b6:b1:a6:1e:6f:08:7e:ea:70:aa:
         42:08:89:16:e9:44:be:66:51:2b:ee:d8:32:db:5b:5e:a1:c5:
         f5:30:08:99:5f:16:95:29:98:b4:d8:6d:0f:4b:46:77:89:3b:
         98:35:06:08:f9:0c:0f:68:3d:08:1a:22:b6:f8:c2:cc:79:fc:
         fe:f7:4f:93:50:70:1c:ab:ca:44:4b:58:61:a4:80:3f:ca:a5:
         26:69:41:fa:a4:a4:02:85:33:b8:00:4b:df:59:98:7e:4e:5a:
         39:a5:34:27:17:d4:d3:9a:7c:2f:68:89:e6:05:af:82:27:4a:
         75:a2:67:24:22:d3:cc:d4:29:c9:df:aa:9b:40:6b:48:ea:ad:
         7e:a5:0d:db:8b:3e:f6:76:f1:c4:9f:5b:f3:ed:89:98:66:2e:
         ce:1b:73:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----