Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.cer
File:                     0249D40E0D1F259C584F5A52FCB768DD9F6D7982.cer (raw, json)
Hash identifier:          78SdjLWP54wLKq1ukp7q3imjK9HbEBpFXR1DbDJsAPw=
Subject key identifier:   02:49:D4:0E:0D:1F:25:9C:58:4F:5A:52:FC:B7:68:DD:9F:6D:79:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68C10C608E93C7884BA8BD7C6CFE5E93D00C5F43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 01:52:35 +0000
Certificate not after:    Fri 28 Feb 2025 01:57:35 +0000
Subordinate resources:    AS: 264042
                          IP: 143.137.152.0/22
                          IP: 2804:29e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c1:0c:60:8e:93:c7:88:4b:a8:bd:7c:6c:fe:5e:93:d0:0c:5f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 01:52:35 2024 GMT
            Not After : Feb 28 01:57:35 2025 GMT
        Subject: CN=0249D40E0D1F259C584F5A52FCB768DD9F6D7982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7c:62:b9:d2:ff:cc:06:40:e9:58:6d:3f:e2:
                    3f:ea:34:1c:f8:dd:3e:b2:d5:87:b0:e1:62:80:d8:
                    8b:a4:de:55:c8:68:ba:84:45:ea:38:b8:20:0d:07:
                    75:af:07:42:5b:2c:46:04:f7:6e:9c:f3:e2:53:08:
                    36:14:a2:39:ab:d0:98:04:01:8a:e8:dd:4f:a7:6d:
                    fe:9f:be:51:6b:b1:2b:df:ec:a3:f4:b8:21:1a:af:
                    12:25:5c:6e:1d:b4:d2:81:37:6e:56:5f:4c:43:bd:
                    95:2e:3c:54:fe:23:61:d4:a1:17:da:50:b4:88:67:
                    19:5f:6e:a6:2c:ef:5b:2e:e9:45:c3:94:fb:81:bd:
                    c5:ab:a0:e3:44:81:f7:08:1e:fb:44:bc:6d:9f:4f:
                    59:c4:03:5d:47:76:a9:20:b8:e3:e4:ad:88:19:89:
                    a0:0f:db:5d:55:3d:84:cf:b1:43:20:9d:61:41:54:
                    96:3c:9e:81:00:37:94:bd:05:a8:2c:67:1b:b7:26:
                    ea:a9:fc:b8:46:18:6d:3a:5d:92:42:bf:86:2e:5b:
                    a9:58:b8:c7:10:f8:0c:d3:39:4e:dc:f9:4b:bb:29:
                    89:ad:7c:c7:92:34:49:be:ed:0c:cf:c6:d6:12:26:
                    81:bc:15:c4:73:b8:07:e6:e4:6b:05:c3:a5:06:1c:
                    6f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:49:D4:0E:0D:1F:25:9C:58:4F:5A:52:FC:B7:68:DD:9F:6D:79:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.152.0/22
                IPv6:
                  2804:29e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264042

    Signature Algorithm: sha256WithRSAEncryption
         55:76:72:e9:f0:9f:90:7e:8b:87:98:44:61:76:8b:12:af:1c:
         d9:3c:f7:9a:04:0b:10:cc:84:73:b6:ea:ce:93:5f:ff:57:ef:
         6c:a6:28:29:4c:4d:fb:ae:96:6d:fa:8d:76:25:6e:e5:6b:30:
         f5:90:41:67:14:f3:0c:95:e4:dd:b3:a2:40:2b:61:97:2f:bf:
         af:ca:e2:6b:c6:dd:66:e9:7c:e0:66:a5:99:69:f7:6b:4e:86:
         bb:1d:54:41:a4:a5:58:68:83:45:a4:24:4d:01:9a:9c:33:a5:
         d0:b0:06:26:95:b9:52:d9:cc:c4:b8:96:1d:8b:73:56:7a:1d:
         26:73:87:ee:f6:8d:60:5b:da:01:94:13:6e:15:5d:fb:56:7b:
         c5:d6:32:e2:d2:13:fc:04:72:11:ed:82:5d:25:8d:55:c5:27:
         b4:4f:c8:19:ed:4f:f2:23:4e:e5:67:7a:c1:69:cf:47:f5:4a:
         90:e6:2a:50:d0:51:ac:72:84:c5:a4:de:9e:f0:6d:de:08:22:
         60:3a:8c:3e:93:29:77:02:42:87:cf:81:a2:76:4b:08:a7:81:
         4f:79:c6:db:cd:fd:6b:8d:02:4b:84:d4:1d:28:c0:dd:a3:5d:
         33:65:e7:09:75:4a:98:33:8a:38:62:d1:2b:1d:9d:9b:57:1e:
         70:5e:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----