Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1E0349BD8AC96858192D8C4A7465AA31900B4440.cer
File:                     1E0349BD8AC96858192D8C4A7465AA31900B4440.cer (raw, json)
Hash identifier:          pWmAeD3H+pWGh+K2UHFCiFpBjkKlLOMFZI7g7KcSAUM=
Subject key identifier:   1E:03:49:BD:8A:C9:68:58:19:2D:8C:4A:74:65:AA:31:90:0B:44:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0781C385DACBFB78F3C5AD83866824C0321ED2FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/1E0349BD8AC96858192D8C4A7465AA31900B4440.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 15:14:11 +0000
Certificate not after:    Mon 10 Mar 2025 15:19:11 +0000
Subordinate resources:    AS: 265264
                          IP: 168.90.48.0/22
                          IP: 187.95.128.0/22
                          IP: 2804:2d28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:81:c3:85:da:cb:fb:78:f3:c5:ad:83:86:68:24:c0:32:1e:d2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 15:14:11 2024 GMT
            Not After : Mar 10 15:19:11 2025 GMT
        Subject: CN=1E0349BD8AC96858192D8C4A7465AA31900B4440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:41:b3:d2:22:a7:e0:57:c1:b0:48:b3:f6:d5:
                    f7:77:79:95:04:9c:bd:33:f2:39:00:26:bb:f5:32:
                    db:4f:9c:8f:39:51:02:c9:c9:b5:3d:3a:39:4e:b8:
                    5a:81:fa:1c:57:59:f5:1a:28:b1:86:1b:91:b4:b3:
                    4d:f0:a7:fa:3e:90:80:4b:b3:09:63:c1:97:4a:99:
                    23:ad:d7:2d:23:2f:8d:91:6e:06:be:e7:37:03:52:
                    0b:b1:d2:6a:8d:8c:d2:6f:ca:ba:9b:b2:2a:90:d1:
                    48:fe:42:e6:41:2d:a0:7c:39:04:d6:0c:3b:d1:bc:
                    16:81:fe:5f:cc:96:ba:7b:fc:13:fe:66:9f:de:32:
                    0d:7f:01:62:f5:ee:d4:3b:db:13:55:52:a5:7a:73:
                    bf:0d:96:81:3f:76:5d:d2:29:92:d6:d7:ee:61:83:
                    30:88:bf:61:08:c0:1c:ab:05:09:5c:de:5c:46:25:
                    54:25:4d:5d:f7:87:bd:bc:7f:9d:1e:bf:5a:30:2d:
                    79:8c:85:29:d3:3b:9d:ca:d4:22:ea:48:56:fe:1e:
                    7b:86:7f:97:5d:e6:c2:d8:08:86:05:61:2f:31:38:
                    34:13:a9:fb:50:a9:20:8b:bb:2c:b4:3f:53:53:e7:
                    1f:d2:9d:cc:02:13:5d:ac:df:1d:af:d4:ce:7e:56:
                    a7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:03:49:BD:8A:C9:68:58:19:2D:8C:4A:74:65:AA:31:90:0B:44:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/1E0349BD8AC96858192D8C4A7465AA31900B4440.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.48.0/22
                  187.95.128.0/22
                IPv6:
                  2804:2d28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265264

    Signature Algorithm: sha256WithRSAEncryption
         31:a2:7f:e8:82:d5:d8:e1:9b:0c:0f:df:7c:4e:1d:97:4c:02:
         94:fd:08:65:38:18:14:39:0e:1e:81:71:98:8e:5c:e8:13:47:
         ab:b2:83:b9:63:b4:00:bd:dc:6a:f7:b5:a1:01:c0:71:03:4d:
         92:33:9c:cc:be:7f:aa:8e:b4:45:aa:b6:10:54:11:b7:ec:16:
         e5:c6:4b:0a:9a:f9:f6:27:cb:49:e1:e0:38:72:d5:d8:f3:ca:
         a1:e4:11:dc:60:b9:9f:6a:19:42:58:19:92:fe:66:91:bb:8c:
         b3:b0:f2:f0:14:3a:e1:3b:ef:f2:41:79:4c:31:5e:08:9b:ce:
         9b:75:c2:28:1f:e5:6e:67:0a:45:05:fd:ee:3d:43:10:49:f2:
         9a:96:08:3f:33:10:88:c1:ed:dc:a0:fc:ca:4e:e3:31:02:06:
         2b:08:4d:b3:41:10:a3:60:d0:55:63:b0:44:ef:d4:a6:7c:9f:
         29:c5:1d:b0:ca:15:5d:ca:4f:c5:8c:7b:d5:6b:bb:2c:7e:be:
         0c:42:ab:32:9b:35:c8:7a:5e:21:8e:6b:f2:0c:f8:de:d3:46:
         14:1f:09:80:d3:c3:54:8d:38:79:09:36:62:3b:be:b5:25:61:
         3c:1c:3f:55:4c:01:8a:1f:0f:0e:33:00:10:1f:23:0f:8f:1d:
         42:62:75:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----