Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509.cer
File:                     F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509.cer (raw, json)
Hash identifier:          Qc5kkQXp6PWDdr9vQNg3OePKAdE+x6i6p/HJAIbQBbs=
Subject key identifier:   F7:6E:FD:7B:AD:5D:AB:91:CE:5C:0A:F7:13:AE:CD:EB:26:84:C5:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1CC2AA6D44FAA498CD0FFBDB4843156554B75369
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/0/F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 20:25:11 +0000
Certificate not after:    Thu 01 Aug 2024 20:30:11 +0000
Subordinate resources:    AS: 268675
                          IP: 45.165.100.0/22
                          IP: 2804:54e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c2:aa:6d:44:fa:a4:98:cd:0f:fb:db:48:43:15:65:54:b7:53:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 20:25:11 2023 GMT
            Not After : Aug  1 20:30:11 2024 GMT
        Subject: CN=F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:b9:53:a7:b0:06:df:2f:26:b0:18:6c:39:
                    d0:a8:d1:f2:49:b1:54:55:30:d1:81:1c:37:23:c9:
                    80:f6:8a:00:c1:da:15:1c:76:5c:60:fa:d9:94:97:
                    02:18:c5:78:20:58:0f:bb:fd:38:20:f5:cb:87:21:
                    55:a1:d2:b6:bb:b2:ad:eb:30:9e:39:ba:ee:1f:52:
                    07:bf:07:ab:77:f3:c1:f3:b3:a6:27:95:be:ab:89:
                    75:87:4f:18:e4:3c:49:05:35:30:3b:78:b2:3e:2f:
                    b8:f6:06:a2:95:46:86:cd:ad:5c:9c:5c:7b:cb:b4:
                    ce:cd:3d:af:ae:40:96:8e:77:1f:98:f7:bc:fe:07:
                    b0:f1:6a:d9:bf:5e:ef:0c:80:85:21:8b:0d:f7:14:
                    46:ef:83:c1:60:fb:be:ab:ef:79:fb:0f:8b:68:79:
                    41:24:b5:5a:e8:0d:3f:70:5d:5b:c1:ea:7c:da:36:
                    7a:2f:90:cb:b6:77:1d:2d:02:b7:01:94:48:9f:37:
                    91:6d:16:37:0d:b6:e2:d3:2e:b3:f9:3b:57:1e:4b:
                    28:e5:d2:c7:0f:0a:cc:ac:c5:48:fa:98:02:a0:91:
                    9e:02:23:32:7b:db:ef:ba:41:6e:be:88:9f:c0:54:
                    60:48:09:ab:2d:0f:f7:14:8f:8f:b1:58:ad:f9:ed:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:6E:FD:7B:AD:5D:AB:91:CE:5C:0A:F7:13:AE:CD:EB:26:84:C5:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/0/F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.100.0/22
                IPv6:
                  2804:54e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268675

    Signature Algorithm: sha256WithRSAEncryption
         81:12:b2:9d:bd:67:48:40:4c:68:2f:c0:c9:5d:1b:ea:c5:c6:
         d6:35:7e:80:aa:e2:32:68:ec:3e:69:3c:aa:3e:70:03:23:e8:
         bf:7a:e2:89:00:6c:f6:a4:6b:0a:1e:d4:99:ad:6f:e3:6f:65:
         f6:57:1c:85:c9:b8:a4:6f:41:10:b3:ab:76:38:4c:4b:3d:d8:
         be:f7:35:08:d1:4a:49:ce:f9:00:1f:2e:78:4c:c8:b5:ca:e1:
         07:d5:9a:ec:64:87:ea:e4:85:43:27:56:9e:30:9f:af:14:44:
         c4:57:e3:64:18:ca:e0:89:42:78:22:62:e5:5d:97:49:b6:f3:
         69:f0:cf:ba:86:69:49:ab:a6:cb:6b:8e:58:5f:a3:67:00:3a:
         0c:7e:96:b1:ac:85:94:4f:fb:1d:cd:2a:2e:a1:4c:c2:63:d2:
         d2:7e:9d:9b:91:c7:42:c0:78:a2:f7:20:18:24:2c:23:6b:5d:
         af:fc:3d:9c:d9:7c:5a:c4:a5:21:1e:f8:96:07:62:f1:63:02:
         b4:fe:2f:f9:3b:0c:5e:23:e7:71:e1:d6:a5:73:f6:e7:d8:a7:
         4c:4d:ae:7d:69:f2:47:c0:42:25:b9:e7:cd:c5:46:73:96:b2:
         ba:c2:a8:5e:75:8d:aa:3e:f4:4b:6a:8e:08:ea:40:23:e4:04:
         bc:11:79:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----