Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E0863669B9D28BA3159D988AFC6BE82D244E8246.cer
File:                     E0863669B9D28BA3159D988AFC6BE82D244E8246.cer (raw, json)
Hash identifier:          lfBE3bddN66IcSuYxo6OCHzumjqkt7DA/GdjBQqxyek=
Subject key identifier:   E0:86:36:69:B9:D2:8B:A3:15:9D:98:8A:FC:6B:E8:2D:24:4E:82:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D9F5C8BA85367F4FBFB85B53FCB0382A72A67FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/E0863669B9D28BA3159D988AFC6BE82D244E8246.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2024 18:56:12 +0000
Certificate not after:    Wed 05 Mar 2025 19:01:12 +0000
Subordinate resources:    AS: 270804
                          IP: 200.219.60.0/22
                          IP: 2804:71ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9f:5c:8b:a8:53:67:f4:fb:fb:85:b5:3f:cb:03:82:a7:2a:67:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  6 18:56:12 2024 GMT
            Not After : Mar  5 19:01:12 2025 GMT
        Subject: CN=E0863669B9D28BA3159D988AFC6BE82D244E8246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:ab:38:8e:4e:d1:96:94:bb:17:b3:ea:24:
                    60:5f:03:33:6c:98:33:87:e8:88:4f:a5:d4:b5:f2:
                    53:28:58:26:58:ae:9f:9b:b9:b9:16:d3:ae:2f:f5:
                    e4:9b:9d:c0:c9:4a:26:74:9e:eb:0a:ee:41:0f:9c:
                    37:29:5f:40:70:fe:e5:2a:0d:6b:d0:f2:76:ad:8e:
                    a7:33:0d:22:77:12:00:00:1e:51:40:09:bf:43:09:
                    4f:36:2c:1e:b3:3a:ef:3f:03:bf:21:8d:7e:58:b6:
                    74:46:6f:9f:7f:9c:cf:1a:98:26:04:0f:76:33:8b:
                    11:0e:e8:83:a6:0a:4a:43:33:21:22:98:bb:92:fe:
                    d7:08:cb:27:f1:06:98:7a:be:67:10:a0:f8:a4:8d:
                    b1:82:a3:7f:2b:fa:61:e5:96:79:f6:ea:63:82:20:
                    a8:df:39:59:6a:52:87:b6:a2:d7:c0:b7:1b:48:fa:
                    12:b2:91:5e:33:02:e9:2a:ac:44:cd:71:6d:50:f2:
                    15:18:a6:27:c0:fc:cf:b4:c9:f5:4d:12:23:50:e7:
                    1e:74:2d:be:c1:b2:db:e2:e0:ba:14:10:0c:25:d9:
                    6a:21:d3:de:ef:20:9c:60:7c:25:11:94:a7:ff:a9:
                    5f:ff:8c:4b:c2:69:ec:eb:9d:cf:48:91:58:20:15:
                    6e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:86:36:69:B9:D2:8B:A3:15:9D:98:8A:FC:6B:E8:2D:24:4E:82:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/E0863669B9D28BA3159D988AFC6BE82D244E8246.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.60.0/22
                IPv6:
                  2804:71ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270804

    Signature Algorithm: sha256WithRSAEncryption
         19:61:26:92:78:5e:40:a9:d5:e3:76:91:56:33:8c:39:e3:a1:
         43:24:08:e2:c9:8d:f3:92:99:6a:c2:b4:5f:78:ff:7a:1f:6f:
         84:8d:84:9e:fa:62:b6:5a:22:c3:12:5a:74:79:5d:e6:58:a4:
         84:4d:a4:25:56:e3:df:3d:06:94:fa:c5:e5:56:c3:9f:25:9b:
         6f:f4:77:71:81:30:a2:5d:9c:b9:a5:5e:24:0e:34:b4:e0:80:
         bc:65:e0:c0:11:2b:b8:3a:1a:e3:81:c8:01:d0:ef:0e:46:c5:
         1e:9a:1c:b6:20:6c:37:7a:95:41:37:9e:ed:7d:01:1a:42:00:
         bc:77:fd:c4:2a:0d:c9:25:b7:9f:5f:0b:09:f2:b2:35:48:99:
         5d:ea:23:06:f2:7b:fa:65:89:68:8a:08:cc:d2:3d:6f:4e:72:
         8f:37:a3:f6:cb:39:e6:13:7c:e3:e5:5c:b9:b9:89:21:20:be:
         c5:e0:1d:64:89:c9:7d:65:cd:9b:2a:4d:ac:fd:00:98:3e:19:
         d8:32:8a:ae:8b:82:5a:de:71:33:ed:85:b5:6b:7e:b1:a4:a5:
         9f:f4:ae:fb:f4:65:78:4a:e4:6b:0a:35:ba:09:de:7c:d9:35:
         fa:7a:2f:e6:98:b7:67:aa:53:53:6c:84:40:5b:4c:f3:d3:26:
         40:d5:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----