Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4FB17D6B476EA1DAC3EBCED07CD52AEEF1422F00.cer
File:                     4FB17D6B476EA1DAC3EBCED07CD52AEEF1422F00.cer (raw, json)
Hash identifier:          EnFqX5oywMuLJI8qjka5uVFb0UDTl/Hev4lmDshNg38=
Subject key identifier:   4F:B1:7D:6B:47:6E:A1:DA:C3:EB:CE:D0:7C:D5:2A:EE:F1:42:2F:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1962687512ACA1A40450E7E8AA99E2DDFE6D8D68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/4FB17D6B476EA1DAC3EBCED07CD52AEEF1422F00.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 13:26:37 +0000
Certificate not after:    Tue 09 Jul 2024 13:31:37 +0000
Subordinate resources:    AS: 263360
                          IP: 191.37.136.0/22
                          IP: 2804:14f0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:62:68:75:12:ac:a1:a4:04:50:e7:e8:aa:99:e2:dd:fe:6d:8d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 11 13:26:37 2023 GMT
            Not After : Jul  9 13:31:37 2024 GMT
        Subject: CN=4FB17D6B476EA1DAC3EBCED07CD52AEEF1422F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:aa:46:95:19:80:99:ba:20:1c:95:ce:fa:
                    c9:8b:d5:40:4d:4c:7a:53:73:a1:a2:e9:74:1c:e8:
                    c8:54:c7:ca:cb:11:37:48:c0:ba:6e:6c:71:26:3e:
                    42:66:fe:39:86:01:4e:34:7d:04:3e:28:13:49:ad:
                    cd:8c:ce:3e:3f:5f:4b:08:b9:01:40:a8:a3:4b:f8:
                    aa:1a:d0:e3:b5:c2:d6:14:f8:c4:9f:a7:50:30:57:
                    ba:2a:64:bd:53:68:16:6a:90:c4:72:5b:28:56:c8:
                    2b:14:b1:96:19:86:2b:9c:8e:a3:76:47:ef:fa:b8:
                    fa:53:1f:e3:8e:ce:8c:40:8f:0d:77:a5:f4:29:b3:
                    49:1c:ce:ac:c9:d4:fe:95:bc:7b:bd:56:ff:f8:f0:
                    6d:d0:f3:28:3d:9d:4d:d2:b6:a8:ec:f6:ef:86:f5:
                    21:80:a4:3d:ab:b9:06:96:50:b3:5f:b1:1d:05:e6:
                    51:39:53:de:bb:cf:87:81:15:d8:d0:00:e0:91:17:
                    1b:30:50:49:90:28:86:d9:62:5f:97:c4:de:24:5e:
                    b8:c7:1e:7b:81:4b:71:c0:4a:9f:45:50:3a:60:c8:
                    fe:62:33:c6:54:37:ec:42:4f:9a:36:48:58:35:ed:
                    06:8e:a7:db:5a:29:4f:b8:7c:f7:24:2e:31:b9:df:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:B1:7D:6B:47:6E:A1:DA:C3:EB:CE:D0:7C:D5:2A:EE:F1:42:2F:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/4FB17D6B476EA1DAC3EBCED07CD52AEEF1422F00.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.136.0/22
                IPv6:
                  2804:14f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263360

    Signature Algorithm: sha256WithRSAEncryption
         36:ae:76:19:e8:d4:f9:60:29:ae:2d:97:6b:ea:21:52:0f:e8:
         7c:4d:0f:c1:d2:cc:db:9d:a7:30:d0:80:15:6e:2f:85:7c:08:
         02:f9:ee:0f:e3:5f:a3:8d:46:5a:93:d3:e0:22:27:ad:3d:2e:
         6b:6c:88:b1:c0:fb:95:a8:64:78:0a:09:74:92:ef:b8:3d:96:
         8b:d9:ef:7c:35:c8:90:30:a0:22:1d:b3:e7:37:77:f1:a5:44:
         ed:0b:65:d4:29:12:68:2a:42:f0:16:8e:be:33:05:65:b6:aa:
         ee:46:fe:98:7a:5f:d7:cd:91:1c:75:1f:4b:07:37:50:53:31:
         d2:81:08:02:f8:4b:d2:62:67:2a:03:a8:48:2c:e3:45:bd:f5:
         24:ab:30:59:1a:79:89:87:98:69:47:8f:30:a9:61:0e:eb:8e:
         c7:c5:8b:fb:74:29:cf:47:30:bd:8c:55:aa:b2:73:8a:6d:c8:
         ab:a7:0b:a3:dc:12:24:bf:58:60:19:d5:52:b9:a1:52:c5:c6:
         a1:73:6d:5e:7a:45:9a:a5:2a:9e:ae:5b:82:4a:da:c1:3a:93:
         ec:16:e1:7d:1d:ee:6f:55:40:ce:b1:ee:6f:ad:f1:80:0f:8d:
         4d:51:8a:36:2f:4b:5d:4a:d4:c1:96:68:05:07:65:37:6a:f4:
         3e:89:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----