Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1155ED4A4F28927449D37954744DFB224A4EC662.cer
File:                     1155ED4A4F28927449D37954744DFB224A4EC662.cer (raw, json)
Hash identifier:          PgQKreUMXv+0V/hQSP5j7lWzQQiFz/nzzK4Fk3ET1h0=
Subject key identifier:   11:55:ED:4A:4F:28:92:74:49:D3:79:54:74:4D:FB:22:4A:4E:C6:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F4C6589F20E5EA6AF122AA207E650DD29748430
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/1155ED4A4F28927449D37954744DFB224A4EC662.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 19:49:54 +0000
Certificate not after:    Mon 10 Mar 2025 19:54:54 +0000
Subordinate resources:    AS: 270882
                          IP: 186.194.4.0/22
                          IP: 2804:72e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4c:65:89:f2:0e:5e:a6:af:12:2a:a2:07:e6:50:dd:29:74:84:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 19:49:54 2024 GMT
            Not After : Mar 10 19:54:54 2025 GMT
        Subject: CN=1155ED4A4F28927449D37954744DFB224A4EC662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:78:e5:29:24:77:8d:89:78:ef:6f:dd:be:
                    c9:82:f3:93:13:26:37:19:a5:2c:88:45:69:05:fb:
                    dc:4b:ed:a2:54:da:33:25:61:3d:56:42:58:b1:af:
                    8f:f8:56:a1:61:5d:92:11:cf:c4:52:ff:ee:9b:6b:
                    27:eb:62:40:7f:df:f2:85:8e:8c:94:03:d6:e2:19:
                    e9:9e:a9:fc:f2:73:6a:1a:b9:90:98:d5:0d:ca:13:
                    bf:5f:8e:c1:fc:21:4d:8e:0c:ef:e2:4a:51:28:cb:
                    d6:f4:94:2e:0a:43:0e:0e:58:d2:a9:0d:14:1e:77:
                    59:1e:70:91:76:ad:c5:b3:f6:a2:c9:51:79:34:06:
                    f7:be:e6:db:5c:dd:7a:9e:2a:18:81:77:a3:14:09:
                    8a:e6:ff:c4:c5:f0:1d:ff:7e:8e:e4:3c:69:93:d4:
                    06:33:7b:e2:36:5a:4f:cd:58:0a:f8:a3:ce:83:74:
                    9c:38:85:96:5e:c0:34:b3:94:ca:f0:e1:f3:fc:0c:
                    7e:7a:a2:6e:8c:23:6a:b7:27:ce:70:13:ac:08:92:
                    19:ce:88:d9:3c:ba:5b:35:91:d7:21:ff:36:08:d2:
                    be:74:ed:e1:49:f5:d0:be:91:e3:02:5c:74:c5:b6:
                    48:05:65:be:f0:81:00:a9:4a:a4:a1:58:76:4a:bc:
                    7e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:55:ED:4A:4F:28:92:74:49:D3:79:54:74:4D:FB:22:4A:4E:C6:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/1155ED4A4F28927449D37954744DFB224A4EC662.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.4.0/22
                IPv6:
                  2804:72e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270882

    Signature Algorithm: sha256WithRSAEncryption
         36:f0:2d:5a:f6:91:93:48:d9:91:e2:39:00:ad:fd:97:b3:12:
         d1:b9:83:98:25:66:e3:fc:b1:e6:33:55:ca:e8:c5:7f:ef:ad:
         7e:c7:b9:ac:a0:27:18:be:5d:a9:15:6b:1f:ea:d9:76:c4:ff:
         82:f2:ed:5d:99:6c:1f:60:24:a0:40:b2:9d:01:81:18:8c:c9:
         99:3a:e1:50:64:12:53:67:5f:c0:2c:6b:6e:a1:79:6e:dd:48:
         4e:a5:76:69:43:0b:7d:62:de:b4:56:a7:ac:c1:29:f7:ed:10:
         ce:4b:3b:50:42:05:b0:d1:57:d5:49:f6:ac:95:2a:ae:68:f5:
         4c:97:9a:87:32:da:d3:17:9e:5e:3e:88:00:f1:5b:62:a8:b5:
         f8:e2:28:dc:19:19:4e:89:e4:de:b3:1f:3e:b7:0c:b6:b1:53:
         02:7d:45:b0:2d:e0:4d:61:91:4c:b4:ad:57:69:bc:3c:b3:27:
         b6:d8:5b:3c:4c:fd:d8:a6:8d:d4:9d:8a:fd:f6:d6:60:2e:2d:
         93:3b:7e:b9:c9:f4:e9:7a:73:e8:95:2c:63:cf:dc:7a:cb:b2:
         80:9c:b6:8a:d0:2a:a4:1c:91:14:b2:49:a0:2d:ce:ad:ca:82:
         3f:97:04:63:0c:9f:0c:51:f2:0c:c4:a7:e9:c3:5f:c3:c5:ec:
         aa:11:fb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----