Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/59B05595198067D328BF9FBC8CFE877CCE3DD061.cer
File:                     59B05595198067D328BF9FBC8CFE877CCE3DD061.cer (raw, json)
Hash identifier:          nETR7VB2jF4qXYbxcwPbVgWhsrfycffZjj2jMhODyBs=
Subject key identifier:   59:B0:55:95:19:80:67:D3:28:BF:9F:BC:8C:FE:87:7C:CE:3D:D0:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4012375DF17AE328741615C34A37B708DB914906
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/59B05595198067D328BF9FBC8CFE877CCE3DD061.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Apr 2022 13:07:50 +0000
Certificate not after:    Tue 25 Apr 2023 13:12:50 +0000
Subordinate resources:    AS: 269261
                          IP: 45.182.16.0/22
                          IP: 2804:61dc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:12:37:5d:f1:7a:e3:28:74:16:15:c3:4a:37:b7:08:db:91:49:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 26 13:07:50 2022 GMT
            Not After : Apr 25 13:12:50 2023 GMT
        Subject: CN=59B05595198067D328BF9FBC8CFE877CCE3DD061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:87:17:21:9e:7b:85:d3:1c:5c:59:45:84:
                    47:d7:d3:11:3b:ad:bf:88:f9:fd:d4:71:8f:8a:7d:
                    f4:5e:94:60:ea:34:74:1a:c3:9f:a0:94:d8:21:b0:
                    86:f0:70:ef:4e:80:ff:5c:bd:3a:cb:16:42:c6:93:
                    d2:31:6f:23:10:71:6c:c7:49:ec:55:47:d4:f8:4c:
                    89:f4:d8:aa:3a:19:1e:78:2c:f7:0e:21:d8:2e:2a:
                    3e:e3:66:bb:73:df:60:d2:0e:a9:15:fe:54:ac:97:
                    5b:aa:7b:33:f2:f4:93:70:94:dd:7f:1a:99:51:13:
                    c7:e0:8d:82:a5:05:93:62:a7:0a:ee:14:ab:4d:25:
                    1d:70:d4:62:86:be:3f:cc:f7:15:04:25:11:c1:ef:
                    83:fd:8c:32:dc:40:06:2f:10:bf:0b:58:30:df:f2:
                    34:28:71:6c:85:68:ee:64:c8:e7:03:42:07:f4:ce:
                    f8:1c:af:e4:85:56:c1:f0:88:db:b3:cd:3d:d7:91:
                    ad:04:55:7e:dd:d7:ee:d5:bf:eb:42:e7:5c:4f:56:
                    bc:1a:6a:1e:2c:21:3b:1f:06:61:d3:e2:28:96:8b:
                    37:15:9d:3b:78:35:8e:8e:87:91:84:1f:77:91:33:
                    b3:9f:9e:a1:52:d4:bf:54:69:56:ca:cb:d7:00:b0:
                    22:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:B0:55:95:19:80:67:D3:28:BF:9F:BC:8C:FE:87:7C:CE:3D:D0:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/59B05595198067D328BF9FBC8CFE877CCE3DD061.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.16.0/22
                IPv6:
                  2804:61dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269261

    Signature Algorithm: sha256WithRSAEncryption
         b2:00:ae:97:79:cd:9c:e1:c7:7a:77:c4:ca:c5:1a:16:cc:7b:
         0e:23:cf:d0:b6:a3:f3:b3:38:da:2c:b3:f7:8f:f1:57:ee:9c:
         8b:6a:e6:ad:9c:48:25:69:20:43:69:23:6d:ff:82:da:14:09:
         de:ab:a2:21:f5:76:f0:cb:d7:fb:5e:c9:6d:ec:6b:f5:26:82:
         de:34:fb:09:a8:1d:cb:18:19:75:e8:85:53:38:4b:47:80:f2:
         4b:d2:f3:a7:25:56:93:3c:e8:37:56:41:17:df:cf:1f:84:6d:
         04:93:49:77:21:ba:06:43:ca:ea:c5:64:70:96:a1:c8:93:bb:
         04:0e:e9:05:16:f5:fb:a3:d6:24:e8:57:d5:3a:95:40:4a:75:
         2e:69:08:fe:47:a9:5b:1e:32:3b:40:fb:34:aa:eb:7b:c9:08:
         28:55:e0:f5:80:92:e6:91:a1:16:65:2f:dc:9e:27:80:55:b3:
         10:29:69:1d:71:54:f1:81:b1:71:a5:91:2b:d3:e6:21:c9:53:
         09:c8:46:6b:13:8a:2b:77:0a:c9:52:78:f5:5f:84:56:2c:fb:
         72:4f:31:8f:81:f8:1b:46:55:4e:30:cb:28:e0:80:5c:e0:2c:
         c0:1e:a7:9f:f8:b2:31:e7:3f:fb:4e:f2:c2:d3:ac:f0:e9:70:
         62:db:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----