Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.cer
File:                     08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.cer (raw, json)
Hash identifier:          6smZnSPGB7FsIWlOZvCrGPmMCg3jjVVgL3YN81lKY9Y=
Subject key identifier:   08:C1:AA:05:5C:47:7D:F9:A2:16:4D:FC:71:4B:69:AE:9F:AD:4A:CD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       63799C3C576DA1DB2AE1420C4DEF3F606DE4E890
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 12:39:47 +0000
Certificate not after:    Tue 11 Feb 2025 12:44:47 +0000
Subordinate resources:    AS: 265397
                          IP: 168.194.184.0/22
                          IP: 2804:3374::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:79:9c:3c:57:6d:a1:db:2a:e1:42:0c:4d:ef:3f:60:6d:e4:e8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 12:39:47 2024 GMT
            Not After : Feb 11 12:44:47 2025 GMT
        Subject: CN=08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:72:a1:e7:c3:0f:9d:45:13:71:8b:3f:66:e2:
                    04:6f:8b:e1:20:36:27:ea:b6:30:f9:95:8a:0e:a8:
                    46:58:4d:5f:68:d6:9a:08:7a:68:a7:8c:9a:fa:dc:
                    fa:0e:c5:ea:e0:a0:b6:32:e5:fe:aa:7e:6d:45:90:
                    d4:18:95:2c:a6:a0:2d:da:9b:31:03:74:55:1a:eb:
                    52:5f:85:ad:1e:f2:cb:22:9d:4d:0e:bc:a5:24:00:
                    8a:3f:c8:fe:a5:fb:e7:bd:35:42:51:ac:7f:fa:39:
                    ea:90:91:53:fa:75:66:33:7d:07:fe:4e:63:67:e9:
                    ea:e7:55:5f:cd:eb:9f:79:aa:25:e4:bc:b8:34:64:
                    fb:29:22:15:83:61:f6:60:36:23:71:85:b9:9e:f3:
                    e3:68:a6:96:8e:27:f8:90:46:c9:c0:cb:61:b8:88:
                    3f:56:af:34:0a:de:e4:47:2e:1a:31:99:5d:cd:7f:
                    be:cc:d1:d4:39:38:a7:ed:7d:b7:27:bd:52:0d:eb:
                    d7:49:34:3f:c1:96:f6:25:23:ee:90:61:c3:a6:79:
                    4c:cb:46:f6:41:c8:98:93:05:3b:ed:12:7c:b8:a7:
                    6f:b6:9c:ed:b4:8e:0d:f0:d4:ff:4c:48:34:5d:de:
                    38:e9:b5:a1:c6:06:69:1a:df:41:29:cc:84:1a:e2:
                    af:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:C1:AA:05:5C:47:7D:F9:A2:16:4D:FC:71:4B:69:AE:9F:AD:4A:CD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.184.0/22
                IPv6:
                  2804:3374::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265397

    Signature Algorithm: sha256WithRSAEncryption
         a8:f1:11:73:0e:d6:4a:67:0e:21:9d:66:74:8e:9c:01:90:15:
         da:41:c6:84:7c:fd:88:2b:35:c6:74:36:7e:c0:97:45:c1:9d:
         58:63:7a:32:78:e3:c4:4c:82:b6:dc:40:5a:ea:ba:f6:90:3f:
         04:89:6b:96:c8:8e:6d:4e:61:8a:f6:1e:9f:13:2d:d6:c7:5d:
         ca:a0:de:1f:3f:0d:ef:8e:8e:98:05:71:a3:51:59:d8:fc:3e:
         df:f5:b7:fc:96:dd:9f:fc:4d:ae:9f:e4:83:e7:48:30:b3:5a:
         e4:b6:cb:12:25:8b:4c:63:7c:99:53:65:1c:a6:87:c9:c4:3e:
         2a:ee:b2:62:28:bd:11:ae:78:55:03:b0:8e:d0:9b:4d:fe:f5:
         f4:5b:ce:6d:83:d9:36:c8:e0:79:7b:31:83:94:b6:7f:4d:af:
         9a:4d:0f:65:1a:29:7d:e7:45:e2:4c:5f:a2:f5:2b:5f:4f:6a:
         29:b6:85:16:61:ab:be:bc:e8:16:53:68:6e:aa:b3:a9:1f:ee:
         0a:bb:a4:24:53:6b:6e:c2:5d:5a:bf:a1:4d:cb:24:5f:3b:13:
         8a:6a:ac:ef:65:c1:61:59:3f:79:78:4b:11:62:24:61:a0:cf:
         95:6e:29:57:a5:fd:25:77:c3:72:92:72:1e:0d:f5:41:3e:dc:
         ce:87:33:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----