Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/590CB921D31788D4537CBF5A72ACB47A7E34BA34.cer
File:                     590CB921D31788D4537CBF5A72ACB47A7E34BA34.cer (raw, json)
Hash identifier:          9OJzJelBqSzyGZN+e4QdWJKuFIqR3Ns7kdcEWuLjQIY=
Subject key identifier:   59:0C:B9:21:D3:17:88:D4:53:7C:BF:5A:72:AC:B4:7A:7E:34:BA:34
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       26BF436CD2EF336D220F34AFB2B3E08D0C48FC4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/0/590CB921D31788D4537CBF5A72ACB47A7E34BA34.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Jan 2024 14:15:09 +0000
Certificate not after:    Thu 23 Jan 2025 14:20:09 +0000
Subordinate resources:    AS: 52893
                          IP: 177.37.48.0/20
                          IP: 2804:a64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bf:43:6c:d2:ef:33:6d:22:0f:34:af:b2:b3:e0:8d:0c:48:fc:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 25 14:15:09 2024 GMT
            Not After : Jan 23 14:20:09 2025 GMT
        Subject: CN=590CB921D31788D4537CBF5A72ACB47A7E34BA34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ad:18:40:71:3d:94:d8:08:9f:ef:9a:4e:de:
                    3e:60:79:e0:f0:fc:ad:43:e8:88:6d:15:59:f8:e5:
                    7f:e5:21:01:b9:d3:cb:33:04:79:e0:a9:b7:7f:28:
                    0e:21:e2:62:31:dc:77:09:96:b7:62:4b:a6:51:cd:
                    f4:99:50:6e:60:f1:30:4f:57:af:99:f3:cf:80:e0:
                    3b:9c:ab:82:75:cf:57:2f:41:ef:d0:5f:2a:e1:96:
                    6c:ba:bd:56:93:4e:cd:c1:d0:42:f4:c8:fd:c8:a6:
                    87:c6:ad:f1:da:52:15:f4:34:b0:68:d6:6f:2d:1f:
                    54:a5:1d:27:1c:09:6d:ec:ca:f7:6e:cb:66:c6:0a:
                    d5:e8:ac:28:4f:a8:e0:ca:c7:f6:bc:4c:01:cb:9c:
                    d4:e3:a4:8c:27:cc:80:c4:e6:24:c5:9b:1f:7e:06:
                    bb:71:00:f7:33:6e:4d:a1:44:59:92:a3:ba:7c:a9:
                    16:30:4a:19:bc:3d:0b:b8:71:90:2a:a6:52:89:6e:
                    1a:71:2c:29:d4:fb:25:d8:ea:ac:db:26:d4:26:ac:
                    5c:81:1e:28:d8:44:aa:ef:7e:83:7e:77:25:62:32:
                    1e:95:d7:81:cf:ea:e0:58:2d:23:ca:22:20:62:d1:
                    f5:6a:53:65:4a:f3:e0:f5:cd:d7:49:3c:ff:9a:b2:
                    3e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:0C:B9:21:D3:17:88:D4:53:7C:BF:5A:72:AC:B4:7A:7E:34:BA:34
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/0/590CB921D31788D4537CBF5A72ACB47A7E34BA34.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.48.0/20
                IPv6:
                  2804:a64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52893

    Signature Algorithm: sha256WithRSAEncryption
         b1:93:75:6d:cf:06:83:d7:67:f7:80:57:fe:35:17:26:00:ba:
         31:5b:11:3c:8b:e7:bf:e5:a3:39:8f:c1:af:fb:06:9d:2e:37:
         37:f4:b8:be:da:8b:07:76:d9:70:ed:68:0c:21:c1:f4:d6:c9:
         8f:a2:34:45:78:dc:af:9d:60:c8:cb:92:53:95:8f:7c:1f:bf:
         a8:12:9c:56:14:63:d5:e4:f5:01:69:12:7c:d0:b8:8a:f4:4c:
         c6:dc:eb:af:90:5f:78:20:e7:37:34:bf:78:62:49:b3:d7:c3:
         6c:79:ab:af:18:93:ea:fe:e6:d5:8c:04:e8:11:e9:a2:06:96:
         4a:94:85:ac:c1:e2:df:3b:db:ca:46:84:98:19:dd:0b:20:bd:
         00:10:50:02:2e:7b:50:f9:34:3a:b0:f0:33:cb:5e:04:f5:0a:
         ff:59:de:4f:03:48:fa:18:ba:c8:16:fb:58:3d:27:7c:3d:99:
         ea:b2:ba:74:0d:5c:1e:1c:87:70:51:fb:6f:18:6b:10:03:71:
         47:fc:33:c5:8a:02:23:89:e5:41:01:74:4a:b1:f4:a3:6a:67:
         8b:0a:a1:a8:94:7c:ff:95:a1:6b:be:be:fb:40:05:02:9c:b3:
         dd:9a:2f:dd:de:e2:68:b2:06:ee:39:b6:0e:da:e2:76:26:57:
         d1:ae:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----