Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0504345023EFC15C3D01D89B97881FD18D235AA8.cer
File:                     0504345023EFC15C3D01D89B97881FD18D235AA8.cer (raw, json)
Hash identifier:          PIePQWtI3yrUaXdUYwwoOIOCBb8nVz/fnL9Il+/1RV0=
Subject key identifier:   05:04:34:50:23:EF:C1:5C:3D:01:D8:9B:97:88:1F:D1:8D:23:5A:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25D25E21C07AF58CB73BFA7CE919DA5D9AD6B67F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/0504345023EFC15C3D01D89B97881FD18D235AA8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 20:50:12 +0000
Certificate not after:    Thu 20 Feb 2025 20:55:12 +0000
Subordinate resources:    AS: 272677
                          IP: 179.63.84.0/22
                          IP: 2804:86f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d2:5e:21:c0:7a:f5:8c:b7:3b:fa:7c:e9:19:da:5d:9a:d6:b6:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 20:50:12 2024 GMT
            Not After : Feb 20 20:55:12 2025 GMT
        Subject: CN=0504345023EFC15C3D01D89B97881FD18D235AA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:21:b1:1e:34:9b:95:c5:a7:47:f1:ca:b9:
                    0e:3a:73:91:f9:e7:30:e8:d6:3f:88:0b:ff:5f:8b:
                    53:67:ec:63:8d:d6:d5:94:74:25:b4:4f:c2:71:bd:
                    c2:fe:84:2a:a5:90:40:54:bf:32:7f:00:67:6c:4a:
                    91:5a:4a:ad:8a:84:53:13:69:4b:5e:76:e0:98:fd:
                    eb:29:a0:fb:2e:57:a1:af:0d:0d:52:46:76:f2:bc:
                    27:b2:cf:1c:e8:5b:1b:9d:ce:52:e3:b8:8d:e5:b6:
                    35:5e:db:ae:f7:75:39:ea:c6:6f:7f:9f:43:52:fe:
                    f6:fe:62:ef:5b:9a:c1:db:b0:6e:e5:c5:80:b7:01:
                    2f:ab:c4:2d:36:46:5d:57:24:d5:fb:e9:e7:6b:1d:
                    b3:c2:38:cd:fd:9a:19:f5:8c:f2:66:3a:fc:f0:a8:
                    d7:47:dd:c2:1a:cb:1f:f0:be:83:ae:80:89:1a:4b:
                    f5:5b:f6:10:98:6e:3b:e3:13:f4:85:60:c5:ef:d9:
                    67:a8:10:cc:c3:10:df:ed:bb:c1:f7:31:82:00:07:
                    7c:e0:a3:c0:77:ba:ee:d8:f7:cb:46:08:2e:e8:3f:
                    73:f6:e8:2b:8c:e1:d4:f9:1b:eb:33:f2:a0:32:c4:
                    a1:13:d3:2a:3e:46:47:e3:6a:53:5a:5e:b1:ea:be:
                    da:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:04:34:50:23:EF:C1:5C:3D:01:D8:9B:97:88:1F:D1:8D:23:5A:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/0504345023EFC15C3D01D89B97881FD18D235AA8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.84.0/22
                IPv6:
                  2804:86f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272677

    Signature Algorithm: sha256WithRSAEncryption
         2a:a7:d7:c8:83:73:86:36:f8:23:98:aa:aa:d6:91:79:04:c4:
         7e:64:8e:fe:5e:75:53:28:ac:f5:18:83:26:af:30:9d:e5:da:
         5d:4a:79:17:4a:cf:1c:e3:e5:ee:61:20:60:28:20:2d:b4:f2:
         9a:18:b3:6b:a7:a4:4c:6f:d5:fc:f6:9d:09:02:30:71:f8:61:
         a2:b0:1f:98:34:77:69:04:79:f4:63:26:23:4a:3b:12:3d:1e:
         4e:47:d9:3d:05:18:48:00:6a:0b:b3:43:a0:38:91:59:b0:33:
         fb:c3:0b:6b:c3:e9:0e:01:82:eb:59:09:f7:d8:a0:5d:c2:a1:
         83:d0:7f:67:1a:ee:ee:74:a0:99:0c:87:3d:97:fe:1c:7f:da:
         e8:fc:ee:1d:89:78:b4:9f:72:5e:68:c5:46:d9:42:00:3d:c3:
         9c:39:c8:a3:b5:c4:87:7b:b0:f6:3d:ca:2c:1c:64:be:56:75:
         dd:1a:4b:23:0a:cc:8b:12:70:2f:88:7d:5c:10:a8:a0:a5:c6:
         86:7c:00:f6:16:4b:e1:57:74:1d:aa:ef:62:08:17:f3:9d:9f:
         ea:c6:96:1c:13:76:8c:78:d7:aa:40:02:05:51:a3:09:43:ac:
         2f:3f:1b:0e:e0:9d:ab:2f:43:f5:97:4e:8e:f1:4f:3f:e9:f3:
         f3:bd:a5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----