Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0DB41CB7646BE6A5416F1099EF03A767F8EB51C9.cer
File:                     0DB41CB7646BE6A5416F1099EF03A767F8EB51C9.cer (raw, json)
Hash identifier:          eEJbDLaZWAq9dNWP0fHbWQm3jNuvVucDz+rf1VRoXuc=
Subject key identifier:   0D:B4:1C:B7:64:6B:E6:A5:41:6F:10:99:EF:03:A7:67:F8:EB:51:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A9C7501E8BE8759D43C59DE3FAD3E1CFEC9B6B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/0DB41CB7646BE6A5416F1099EF03A767F8EB51C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2024 23:20:30 +0000
Certificate not after:    Fri 24 Jan 2025 23:25:30 +0000
Subordinate resources:    AS: 266599
                          IP: 45.7.180.0/22
                          IP: 2804:3e7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9c:75:01:e8:be:87:59:d4:3c:59:de:3f:ad:3e:1c:fe:c9:b6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 26 23:20:30 2024 GMT
            Not After : Jan 24 23:25:30 2025 GMT
        Subject: CN=0DB41CB7646BE6A5416F1099EF03A767F8EB51C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:37:e7:5c:73:13:a4:57:4a:62:74:0f:40:
                    f8:d7:5a:aa:3c:4c:83:51:7f:86:a3:93:43:0e:b6:
                    24:b0:8d:a5:16:83:1f:5a:92:ab:f4:a4:ea:94:47:
                    0f:01:3c:18:ca:c5:3d:44:13:8f:fd:76:40:12:7c:
                    6b:2f:9b:f3:e6:06:19:d4:54:b3:a9:a5:0b:d7:f1:
                    cf:f0:47:ec:cf:bf:db:89:c0:de:32:62:19:d2:21:
                    b6:1e:7c:4f:02:7b:24:9c:33:a0:af:1a:b9:f5:20:
                    7c:33:64:e2:02:cd:4f:3c:ed:85:25:9f:81:ef:73:
                    7f:c0:6f:23:c8:d8:f7:75:4a:39:c5:2f:56:1c:6e:
                    92:89:ef:f8:8a:86:ca:f3:83:7c:ed:d7:1b:e5:bb:
                    1b:3a:9c:de:20:9d:01:2e:4b:7c:c4:e2:04:33:16:
                    a2:8b:46:09:36:74:b4:8a:b2:5b:fb:87:7a:a6:d7:
                    13:fb:6f:60:1a:b8:19:93:8a:5f:f7:f9:ca:3c:03:
                    cf:48:33:1d:71:61:2a:ff:a2:e8:70:03:78:b0:81:
                    e3:75:aa:e2:5b:01:3d:40:87:f0:37:d6:c4:b9:44:
                    bc:97:99:99:b5:94:9c:9d:28:77:35:2c:22:c8:1b:
                    81:1b:d1:19:36:6b:18:18:0d:7b:42:1d:b4:e2:b6:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:B4:1C:B7:64:6B:E6:A5:41:6F:10:99:EF:03:A7:67:F8:EB:51:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/0DB41CB7646BE6A5416F1099EF03A767F8EB51C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.180.0/22
                IPv6:
                  2804:3e7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266599

    Signature Algorithm: sha256WithRSAEncryption
         0d:92:1c:d0:8c:d6:69:bc:cd:ab:51:b4:02:74:63:d5:ef:f1:
         09:29:cb:05:00:6d:11:20:b2:75:7d:af:86:fc:5b:0e:16:b2:
         80:8c:f4:b9:95:cc:2e:1f:33:c4:d1:97:b9:b9:d8:ee:26:f4:
         3e:65:b1:b7:70:69:f5:58:eb:25:55:2f:f9:84:65:69:1b:3f:
         e5:90:ad:af:46:85:5c:0e:32:e6:68:da:5e:bc:8b:f3:b2:5a:
         88:b3:fd:f8:0d:d6:81:d5:32:23:40:9f:7e:42:f8:4d:40:07:
         08:e0:a3:0d:01:9e:24:5b:d9:c8:05:4a:35:ac:9b:a1:90:57:
         33:95:da:d7:8c:f9:5d:b4:e0:24:86:11:37:6e:e0:a0:ec:b0:
         05:11:7b:e7:d0:6d:6e:a7:a3:71:1d:01:30:fb:3a:76:d8:e3:
         49:c8:e2:30:82:72:56:29:b9:7b:2b:7e:98:a1:fa:67:1f:bc:
         e7:01:38:1c:19:eb:6c:04:10:a6:e5:e9:fa:b4:aa:21:37:02:
         57:e1:1b:d3:6b:4a:57:ef:6d:a9:3b:72:63:90:6f:ce:6c:66:
         5d:b4:79:38:30:6f:f6:97:d5:22:69:ee:ef:17:ff:04:2b:90:
         e7:c2:58:83:05:ba:e0:11:e7:55:5c:29:60:21:d3:1b:51:04:
         d7:6e:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----