Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F910017DA6B3A447EEA3F28FEA637B6EE7E93862.cer
File:                     F910017DA6B3A447EEA3F28FEA637B6EE7E93862.cer (raw, json)
Hash identifier:          g6RqrZ+jTrpcz8fiKD7xirI6JsfLTyUY5eRJ7092ln0=
Subject key identifier:   F9:10:01:7D:A6:B3:A4:47:EE:A3:F2:8F:EA:63:7B:6E:E7:E9:38:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E67B2040B468111792A50BA731ABEB06CBC93A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/F910017DA6B3A447EEA3F28FEA637B6EE7E93862.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 21:11:41 +0000
Certificate not after:    Mon 07 Oct 2024 21:16:41 +0000
Subordinate resources:    AS: 265328
                          IP: 168.181.64.0/22
                          IP: 2804:2e28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:67:b2:04:0b:46:81:11:79:2a:50:ba:73:1a:be:b0:6c:bc:93:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  9 21:11:41 2023 GMT
            Not After : Oct  7 21:16:41 2024 GMT
        Subject: CN=F910017DA6B3A447EEA3F28FEA637B6EE7E93862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:ef:76:42:d0:8a:12:f0:4f:04:43:4b:f1:
                    d9:ad:83:cc:54:23:26:44:56:9a:9d:40:aa:52:d6:
                    b0:4c:80:e1:82:9e:53:2d:c1:9e:da:2a:82:47:6d:
                    81:b5:85:df:d1:a5:77:d7:6e:bb:42:8c:86:2f:80:
                    d3:7d:38:64:2d:ed:77:d9:f3:b9:de:1f:c2:1b:58:
                    8f:b1:46:45:9a:62:de:02:8e:58:71:d0:02:f2:f6:
                    8a:bc:6e:7c:bb:12:f5:91:86:db:66:55:81:71:49:
                    3f:a5:ea:c6:88:59:bf:73:e7:39:8a:da:59:6b:6c:
                    5c:16:ba:51:be:7f:d2:60:4a:95:67:93:45:ef:48:
                    8f:59:ec:96:4d:9f:57:af:85:75:ec:b8:b8:2b:f1:
                    88:d8:b4:99:82:ee:42:6c:45:c8:73:72:a3:b5:e9:
                    cb:17:19:c1:1d:17:02:af:f7:e5:9f:f2:7f:eb:04:
                    3a:a9:9b:76:be:b8:db:07:30:a2:1b:6a:51:c1:53:
                    93:60:bd:46:f0:ae:55:c9:c5:d0:76:a5:2f:3c:c1:
                    a8:b0:1b:46:5e:e2:fa:b6:2e:31:d9:4d:9b:a7:10:
                    c8:b2:45:61:7a:78:bd:3a:ff:55:d2:f0:f5:50:29:
                    16:02:1d:fe:92:2c:84:1f:62:21:32:7c:06:47:b1:
                    3e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:10:01:7D:A6:B3:A4:47:EE:A3:F2:8F:EA:63:7B:6E:E7:E9:38:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/F910017DA6B3A447EEA3F28FEA637B6EE7E93862.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.64.0/22
                IPv6:
                  2804:2e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265328

    Signature Algorithm: sha256WithRSAEncryption
         71:0a:38:d4:0e:08:16:b6:cd:4d:7a:ee:9e:c3:81:59:39:57:
         b2:37:d5:a9:50:7b:f4:a0:f0:1e:49:1a:65:c1:25:6b:15:2f:
         c3:e6:b5:9f:5e:bb:aa:b0:19:cd:a9:49:c0:d2:3d:1c:d0:f6:
         f4:a8:9a:ba:c7:53:26:89:b2:bb:5a:87:24:74:f0:a9:de:ad:
         d6:93:8d:76:6f:c2:62:37:bf:58:c4:cb:b3:e0:da:5d:b9:88:
         13:8a:79:8a:09:95:e5:07:d7:ba:5f:01:46:b7:85:f0:6b:36:
         01:46:f8:6e:32:2c:bc:d4:f8:87:21:08:8f:da:5e:36:e7:be:
         19:ec:7c:e8:e5:9c:80:be:eb:61:04:28:24:da:2f:cb:df:e8:
         89:1b:8d:42:c7:54:78:e8:d4:9e:90:8d:6c:fc:97:f2:a8:fd:
         84:88:29:8c:27:bd:41:9a:8f:a1:0b:cd:de:af:69:73:e8:20:
         77:5e:78:ad:a5:a6:15:dc:d7:13:2e:7e:fc:32:65:91:ec:1a:
         ca:c2:4c:2e:63:71:26:a3:60:7a:97:f8:77:50:cb:73:aa:f1:
         81:25:f7:a7:41:e7:de:98:c2:38:52:d0:69:5f:20:39:6b:fc:
         fe:72:41:f6:46:4f:f0:20:fc:e5:76:cf:80:22:19:0d:6c:b2:
         06:d6:eb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----