Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C315074D1111C870AB23650B003D0F2F0CA577E0.cer
File:                     C315074D1111C870AB23650B003D0F2F0CA577E0.cer (raw, json)
Hash identifier:          BuKOW+sdAFSTBjL59uclUyinWo9xtt3xs2ud7+laC4Q=
Subject key identifier:   C3:15:07:4D:11:11:C8:70:AB:23:65:0B:00:3D:0F:2F:0C:A5:77:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51FF4F118A5FB0CD3E5CB35CF19F04142426AA5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/C315074D1111C870AB23650B003D0F2F0CA577E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Jan 2024 09:40:45 +0000
Certificate not after:    Fri 10 Jan 2025 09:45:45 +0000
Subordinate resources:    AS: 268243
                          IP: 45.236.200.0/22
                          IP: 2804:4e28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ff:4f:11:8a:5f:b0:cd:3e:5c:b3:5c:f1:9f:04:14:24:26:aa:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 12 09:40:45 2024 GMT
            Not After : Jan 10 09:45:45 2025 GMT
        Subject: CN=C315074D1111C870AB23650B003D0F2F0CA577E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e1:6c:4c:a9:78:8e:ca:ad:1f:1a:da:c7:01:
                    2c:ee:84:b4:d8:0e:ae:63:27:35:88:af:ab:84:e8:
                    30:d9:f0:26:6b:5f:06:7e:0c:a4:60:07:0e:16:c6:
                    42:8e:8c:7c:c0:fe:5a:24:e7:88:80:1c:1c:b8:fe:
                    fb:33:be:e8:28:47:3b:75:1c:71:b2:bc:34:b4:d4:
                    d0:ea:96:3a:27:1c:79:e7:d2:45:b4:c9:35:be:cb:
                    c1:69:80:96:81:c9:a9:29:62:88:89:c0:85:a6:ff:
                    32:9a:63:df:17:46:19:b7:f3:6b:58:b3:42:1b:28:
                    c1:f1:c1:4e:dc:11:84:62:9b:55:d6:f4:f8:55:62:
                    bb:5c:51:d3:66:3c:34:23:dc:c3:14:ad:70:9d:fe:
                    7e:46:75:12:4b:0e:9e:89:8d:6b:d5:b6:92:24:12:
                    4f:51:52:56:77:f0:fd:62:eb:a0:2a:79:c4:ba:98:
                    58:01:9a:2a:85:54:86:b0:c8:69:a3:a4:53:64:9f:
                    29:e1:f0:19:aa:f8:7f:00:89:75:ec:cb:06:fd:39:
                    5a:0a:49:f9:1f:24:bf:49:24:cf:7d:28:67:8a:01:
                    ee:6c:f7:7c:4c:1b:d1:ea:0d:3a:db:d6:6c:b0:83:
                    84:50:f0:83:64:c6:09:d2:2b:17:10:2a:13:cf:68:
                    5b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:15:07:4D:11:11:C8:70:AB:23:65:0B:00:3D:0F:2F:0C:A5:77:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/C315074D1111C870AB23650B003D0F2F0CA577E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.200.0/22
                IPv6:
                  2804:4e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268243

    Signature Algorithm: sha256WithRSAEncryption
         5b:70:06:52:8b:91:19:17:71:06:88:da:a2:75:16:60:dd:18:
         32:92:11:a6:d0:a0:41:45:38:85:54:ac:48:36:9e:d3:17:b9:
         47:ca:a9:18:28:df:56:51:37:9a:fc:b7:15:70:8b:b9:9d:6c:
         c3:d9:dc:fc:51:09:74:71:56:01:73:9b:dd:2c:2c:3f:16:8a:
         9c:70:12:7b:58:72:5f:90:b5:9f:37:5a:51:c4:e1:c6:99:4b:
         04:1b:c1:8b:38:13:50:c8:69:73:44:ca:e3:8e:9e:79:bc:93:
         0c:9f:3f:b3:9c:92:23:48:e4:8c:8a:8f:2f:75:5b:8c:24:11:
         95:3d:60:65:61:48:4d:c6:dc:57:d2:86:ea:e4:83:2f:d9:e4:
         5b:72:65:f5:17:d4:68:54:7a:af:ec:da:48:c0:13:63:b1:be:
         63:cc:64:ac:1b:18:3d:50:d9:d7:9e:71:94:2f:dc:76:5d:ff:
         ea:6d:e6:c7:a9:8d:f8:f5:7e:06:f6:49:d4:35:2b:f4:66:e5:
         d4:4a:39:09:48:f0:0b:38:3f:29:8b:3d:f0:2d:4e:6f:c3:57:
         4f:8e:41:1e:0d:50:11:ee:e7:16:40:f4:a0:d4:b6:3f:84:b2:
         30:dd:0a:2b:e8:7b:05:54:80:7d:4d:d5:07:b0:8a:f5:ce:d3:
         78:2d:dd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----