Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/067CE47AFF9379B87D140CE4EA224BA652F3A1B8.cer
File:                     067CE47AFF9379B87D140CE4EA224BA652F3A1B8.cer (raw, json)
Hash identifier:          y8SXWwEvRq9yMp8lqoDHY1bwL4TcsMBb5z5pJwT5nEs=
Subject key identifier:   06:7C:E4:7A:FF:93:79:B8:7D:14:0C:E4:EA:22:4B:A6:52:F3:A1:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E9D646F3D72E15D9BD3DF07428EC50376169CF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/067CE47AFF9379B87D140CE4EA224BA652F3A1B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Mar 2024 17:16:38 +0000
Certificate not after:    Mon 24 Mar 2025 17:21:38 +0000
Subordinate resources:    AS: 273798
                          IP: 2804:8c5c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9d:64:6f:3d:72:e1:5d:9b:d3:df:07:42:8e:c5:03:76:16:9c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 17:16:38 2024 GMT
            Not After : Mar 24 17:21:38 2025 GMT
        Subject: CN=067CE47AFF9379B87D140CE4EA224BA652F3A1B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:1a:b7:51:f5:c7:b2:4a:0a:01:0d:7d:49:
                    41:56:5e:6d:b1:b8:18:64:4d:93:fc:4f:89:a2:45:
                    ff:c8:a4:58:2f:6b:84:50:f0:d8:45:1b:99:13:b6:
                    6c:5a:9a:a1:3a:42:92:bb:6f:b2:2d:40:fb:ea:23:
                    59:e8:6a:28:84:7d:27:46:8f:05:38:30:85:4b:8a:
                    2a:cd:32:0d:4e:30:ce:7e:26:03:90:bc:3a:c7:c4:
                    54:28:03:56:81:e6:6e:a7:43:f9:48:da:1e:00:c6:
                    0c:b4:25:32:4a:e2:aa:cc:cf:ae:7a:bc:ae:5b:fc:
                    ed:e6:95:50:1a:ba:74:58:0f:f4:a9:7c:b6:c0:2c:
                    ed:bd:8a:ab:00:39:a5:de:ea:b9:05:9f:70:29:2d:
                    c0:db:fa:91:79:b9:84:33:5f:58:5d:e2:b7:b0:46:
                    d8:9a:bf:4c:05:f8:aa:cf:51:58:ef:81:21:db:0d:
                    7b:6c:80:c2:63:6e:37:88:b4:d3:e7:fd:30:52:d7:
                    fc:f6:c4:ae:15:8b:0b:c9:2b:5d:93:dd:cf:60:e3:
                    19:37:c2:a4:06:e5:7b:62:be:6e:17:c7:e7:8f:7f:
                    c7:0c:a8:b5:3a:af:d3:f8:02:57:29:70:d9:0a:b7:
                    19:08:cc:92:89:cb:83:fe:1d:d9:c6:67:0c:21:d9:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:7C:E4:7A:FF:93:79:B8:7D:14:0C:E4:EA:22:4B:A6:52:F3:A1:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/067CE47AFF9379B87D140CE4EA224BA652F3A1B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273798

    Signature Algorithm: sha256WithRSAEncryption
         0a:60:0b:31:d0:9b:21:5e:52:42:31:19:8c:9c:a4:d7:a7:54:
         27:49:38:74:74:b4:44:a6:04:02:f1:df:cb:c5:ff:47:3d:67:
         1b:db:34:f8:3e:6f:82:98:43:94:df:d5:cd:90:dd:8b:07:62:
         b6:c7:45:9f:7c:c0:c7:c3:eb:a1:14:54:46:df:e1:27:bc:f9:
         17:b2:cf:76:25:d6:b9:c5:fa:79:67:8e:26:36:5c:fd:4a:43:
         47:79:ae:7c:5f:c0:9e:6e:7a:e5:09:01:81:fe:3f:5e:9d:04:
         b7:c8:c5:3c:58:fb:4d:65:65:dc:44:7d:09:49:2e:e8:6c:01:
         66:7f:43:77:d0:d6:6c:70:85:7a:e3:e4:7c:06:a5:ed:ca:85:
         bb:63:39:d8:42:2b:f3:68:86:ad:83:d1:57:79:4f:b5:42:81:
         89:88:0a:49:7f:a9:54:e4:40:8b:e1:c9:37:d7:3d:35:d1:6a:
         13:be:9e:a1:84:45:97:f1:ad:7c:72:b3:6c:9c:9f:75:9d:ad:
         99:13:f7:b1:5b:2e:22:af:fb:26:7e:3d:91:fb:76:33:d6:c7:
         d9:7e:38:aa:38:3a:31:b5:21:2e:00:bd:51:b5:8b:09:9c:c4:
         69:9c:f6:f1:c5:81:0e:61:2c:d0:89:ea:b8:bb:71:87:cc:81:
         2f:e8:0a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----