Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1.cer
File:                     0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1.cer (raw, json)
Hash identifier:          2CKgzPW3jj6aPZdho32Ur1sQMPTsdqbyPO3uFNkyEo0=
Subject key identifier:   0D:48:62:7D:50:F9:C4:D0:D9:AA:77:8F:24:6C:52:27:F7:AA:F5:D1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30A1B1127C37F0ED4F7EF5C112038C9EDEF92A0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Feb 2024 12:51:43 +0000
Certificate not after:    Sat 22 Feb 2025 12:56:43 +0000
Subordinate resources:    AS: 28639
                          IP: 177.129.68.0/22
                          IP: 191.6.232.0/21
                          IP: 2804:dd0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a1:b1:12:7c:37:f0:ed:4f:7e:f5:c1:12:03:8c:9e:de:f9:2a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 24 12:51:43 2024 GMT
            Not After : Feb 22 12:56:43 2025 GMT
        Subject: CN=0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a7:3b:41:e5:09:e5:68:28:14:91:4e:d9:a0:
                    f4:58:93:c7:21:e0:9c:84:6c:7a:3b:ea:b4:92:72:
                    4b:fc:bf:e1:ae:bb:db:c5:b8:e4:f7:aa:1f:30:2c:
                    9e:a8:8b:60:f6:90:89:0d:33:2d:73:e7:ec:11:fd:
                    56:bd:d7:8b:c8:e7:35:7f:b6:f2:4c:5b:af:3b:d4:
                    14:a9:16:10:a4:52:c4:fe:b5:ce:94:87:3a:0a:7f:
                    81:5a:f9:89:99:1a:26:26:8d:5f:94:3c:46:ce:af:
                    34:06:e1:4a:c9:d0:8a:84:e7:e5:d4:96:ab:0d:d2:
                    3a:9b:f0:b0:a8:8f:59:35:9e:27:d2:9c:0f:69:88:
                    30:a4:70:84:27:9b:a2:82:ae:30:2a:16:76:f3:29:
                    bb:c0:7b:f3:7a:44:af:78:c4:c2:97:bf:76:9a:2f:
                    1f:60:31:26:51:93:4f:48:2f:cd:a7:08:32:72:b8:
                    45:1a:ff:6e:84:36:43:63:ce:33:d5:b5:16:ef:06:
                    0f:d2:5b:31:62:fb:1e:fb:1a:ed:2d:8d:49:a2:8e:
                    33:b7:53:64:c7:01:25:7e:29:9a:1b:17:3d:49:03:
                    e1:c2:c6:f1:97:3f:b4:4c:1a:77:0a:71:76:c8:2a:
                    bc:98:b3:ad:25:93:81:13:0d:9d:32:31:02:9d:29:
                    fb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:48:62:7D:50:F9:C4:D0:D9:AA:77:8F:24:6C:52:27:F7:AA:F5:D1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.68.0/22
                  191.6.232.0/21
                IPv6:
                  2804:dd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28639

    Signature Algorithm: sha256WithRSAEncryption
         66:ce:b8:63:5d:8a:ab:9d:17:59:5f:09:35:09:a1:88:06:ea:
         17:51:d2:8d:e8:35:5e:e9:5b:0b:4d:e3:82:88:5d:d2:11:c0:
         ea:d8:76:9c:da:97:25:19:63:8b:ab:90:a4:80:7c:b4:75:9d:
         bb:b0:f9:54:28:86:ca:57:a7:f8:34:f7:cb:59:17:29:f0:74:
         38:6e:b8:fb:c1:17:a8:0c:00:cf:b1:ac:25:d0:18:17:18:82:
         e8:f1:fd:2a:67:75:3e:9e:7e:29:ba:20:83:ac:a9:b6:65:d9:
         07:20:01:30:a2:4e:50:69:6d:b5:1a:5f:97:92:13:c5:04:9f:
         4a:66:d2:95:a0:09:e5:af:68:f2:d0:38:52:a0:5d:ea:71:cf:
         8f:6f:c3:85:09:0f:8c:e8:83:56:89:1f:20:36:9e:9f:f2:be:
         56:d6:b7:03:fc:82:27:4a:89:9a:44:f3:ab:57:e0:b2:0d:78:
         d6:a0:64:64:7e:31:91:7e:80:db:ad:ca:b5:20:53:98:05:69:
         be:93:ed:35:bb:17:d5:46:f4:ae:b8:2f:d3:fe:65:f2:63:8c:
         43:50:e9:36:7c:5c:51:3e:f7:7e:f8:de:40:dc:20:19:dd:c3:
         59:0b:f9:e1:7f:78:20:e4:1d:82:13:23:5a:36:42:d8:f5:ca:
         fc:7f:8a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----