Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.cer
File:                     09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.cer (raw, json)
Hash identifier:          cZ6MCxnxTo+ZEB5+/L+ErXAKN2zaHr/C8S34OsurmOY=
Subject key identifier:   09:F8:FC:D6:DF:30:EE:8E:51:B0:8B:F2:0A:61:B5:C9:16:23:6B:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       73657DE38CBD68B5938995D78C9C50C8E7C76818
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 12:14:09 +0000
Certificate not after:    Thu 06 Mar 2025 12:19:09 +0000
Subordinate resources:    AS: 269546
                          IP: 45.187.56.0/22
                          IP: 2804:6648::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:65:7d:e3:8c:bd:68:b5:93:89:95:d7:8c:9c:50:c8:e7:c7:68:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 12:14:09 2024 GMT
            Not After : Mar  6 12:19:09 2025 GMT
        Subject: CN=09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:1d:47:fe:28:78:d0:7f:96:9a:a5:d1:3f:
                    7a:30:92:eb:2b:19:94:aa:76:e1:2c:45:4f:93:4e:
                    db:5c:6e:e5:3a:08:a8:07:03:d8:f8:a3:d0:7d:6a:
                    f6:3b:a1:d9:96:93:13:2a:c3:58:de:f6:7b:46:aa:
                    f2:d9:5b:46:4a:00:0d:bd:2e:d4:2d:3e:20:95:4c:
                    44:99:88:18:c5:e9:42:e1:be:a2:11:66:15:4b:c3:
                    c0:11:f1:83:c5:48:b8:d6:fc:4a:1c:1d:86:bc:86:
                    a6:9a:33:4e:5b:1d:4e:61:fc:d9:1a:71:62:d3:2e:
                    2d:c6:99:bc:c4:bf:55:1e:f0:ae:00:69:d0:0f:58:
                    b2:01:6b:ac:10:62:95:93:d8:ac:ff:d0:be:fc:6e:
                    73:6f:40:1f:7a:30:a2:26:63:42:ae:6b:4e:84:de:
                    f2:bd:a4:7f:d9:c8:f0:69:f0:30:e8:63:b4:73:1e:
                    e6:41:b0:fc:a2:b3:95:71:dd:25:db:57:90:3e:1f:
                    37:96:22:d3:f6:f9:8e:9e:03:cf:1b:4c:2c:50:a9:
                    a2:7f:b4:fa:d5:05:37:ed:a9:80:33:a8:d4:db:22:
                    8f:bd:8e:68:7f:d3:40:93:c4:15:bb:12:92:f3:cb:
                    5b:96:bf:a7:0c:42:02:66:1a:57:f1:3b:31:38:49:
                    85:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:F8:FC:D6:DF:30:EE:8E:51:B0:8B:F2:0A:61:B5:C9:16:23:6B:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.56.0/22
                IPv6:
                  2804:6648::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269546

    Signature Algorithm: sha256WithRSAEncryption
         57:5d:b7:04:62:38:d6:29:50:67:5a:ed:b1:20:15:de:98:14:
         33:c2:79:fb:c7:cc:19:7d:c8:bb:64:d1:22:8b:74:fc:b6:f4:
         cb:a1:d6:ac:f9:27:07:1f:96:45:7f:eb:b2:cb:ef:1f:64:50:
         c4:e9:ca:19:f8:8a:7a:40:d5:e3:3c:83:ad:c7:ee:85:d4:74:
         11:16:50:8b:41:54:4a:15:3b:bd:19:2d:fd:a5:55:89:47:1c:
         96:f3:a2:6f:44:bc:98:89:a7:bf:8a:38:b8:c5:e7:88:82:29:
         04:7b:d4:58:4a:24:84:d2:69:d5:cb:f7:7b:e1:ad:cb:aa:85:
         bd:25:c7:7f:14:76:01:40:4b:fe:27:8a:d6:d9:01:a0:63:89:
         15:5b:dc:0f:bf:83:3c:2f:60:a4:fa:24:ab:93:a3:22:24:25:
         80:97:d4:86:00:a3:ed:61:e6:30:a9:7f:b3:84:94:8c:90:a7:
         15:d4:b1:f7:78:a0:b0:48:3b:0c:2a:b9:e5:bf:22:63:43:ea:
         a8:0b:7e:3c:b2:ff:ba:d0:16:dc:e4:74:f3:72:d8:14:21:bb:
         5a:47:3e:fb:a5:52:8c:6d:da:a5:b5:d8:84:3f:93:51:8d:d7:
         66:0d:b8:3f:43:bb:1d:80:f9:aa:d9:eb:8a:1e:f2:c3:99:16:
         49:96:c3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----