Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0E37FE4650FAAA33DD07C6E72D356B996CF7AD1D.cer
File:                     0E37FE4650FAAA33DD07C6E72D356B996CF7AD1D.cer (raw, json)
Hash identifier:          D40HDcI5Ng5AqCWRpJmXvhYR5ZZuoepnNeOuS+qjc70=
Subject key identifier:   0E:37:FE:46:50:FA:AA:33:DD:07:C6:E7:2D:35:6B:99:6C:F7:AD:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20FAC776E23D7DF8A321F57656F7F99C25B7C8FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/0E37FE4650FAAA33DD07C6E72D356B996CF7AD1D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 22:21:05 +0000
Certificate not after:    Mon 10 Mar 2025 22:26:05 +0000
Subordinate resources:    AS: 269115
                          IP: 45.178.240.0/23
                          IP: 2804:5fa8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fa:c7:76:e2:3d:7d:f8:a3:21:f5:76:56:f7:f9:9c:25:b7:c8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 22:21:05 2024 GMT
            Not After : Mar 10 22:26:05 2025 GMT
        Subject: CN=0E37FE4650FAAA33DD07C6E72D356B996CF7AD1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:23:25:f4:83:77:0d:14:30:3d:78:c8:5a:
                    f7:a6:5a:90:c8:26:a6:3f:65:f6:f0:42:5f:5f:55:
                    db:8d:9c:9d:f1:77:3b:f4:fc:41:cc:42:4d:b4:e8:
                    e4:ff:fb:a5:e8:ba:fb:86:85:31:f6:63:29:96:b4:
                    89:85:a0:da:2c:02:56:87:1d:50:42:48:4c:12:47:
                    06:5d:15:e8:68:87:9a:b3:b7:32:b7:e3:13:1f:f3:
                    d5:ef:83:88:a7:93:36:db:dc:2d:93:83:73:93:e5:
                    7d:37:31:a1:a6:bb:b5:a8:ff:83:70:95:2c:b5:d6:
                    cc:60:81:02:37:70:41:c9:07:8b:0e:7c:60:4d:a1:
                    84:f8:4f:1f:c1:76:a4:a3:fa:dc:b8:cf:7b:a9:5c:
                    e5:b3:72:cc:9f:b3:0d:ea:70:91:5c:c4:ce:c1:85:
                    27:c9:2a:f3:28:d9:51:49:00:9e:aa:0c:a5:24:10:
                    85:dc:9e:7d:93:80:28:46:8d:4d:eb:b6:6d:ea:b4:
                    db:0f:44:48:35:e5:9c:ad:90:5e:55:0f:19:5e:ee:
                    b8:49:96:e6:59:a2:4e:5f:f3:1d:fb:16:2d:a0:e6:
                    eb:16:0a:e2:33:0d:2c:ef:5a:66:a4:df:7d:ff:05:
                    1c:ed:11:33:91:ac:fa:b9:03:e5:ea:69:7f:09:09:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:37:FE:46:50:FA:AA:33:DD:07:C6:E7:2D:35:6B:99:6C:F7:AD:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/0E37FE4650FAAA33DD07C6E72D356B996CF7AD1D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.240.0/23
                IPv6:
                  2804:5fa8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269115

    Signature Algorithm: sha256WithRSAEncryption
         96:d6:3d:77:05:32:19:a9:f7:e4:5d:75:db:6f:b8:26:39:01:
         fc:30:98:a8:b6:7d:d8:07:95:65:5c:5c:01:b1:22:17:84:b9:
         8f:c9:76:77:75:7d:f3:ff:cd:4d:f1:6a:1e:ac:8e:2b:1d:9d:
         c1:8f:25:37:12:3a:64:7f:b0:0f:60:98:10:bb:29:fb:7a:2f:
         23:05:79:f3:b3:c0:1f:ea:d7:d8:9d:3f:04:b0:61:24:d1:72:
         1e:77:9f:ac:3a:24:b0:21:15:98:9c:45:11:6d:7a:20:cf:cd:
         2d:7d:58:75:d4:56:30:37:e5:bd:67:db:e5:b9:f2:3b:63:16:
         5c:26:09:63:2e:13:8f:15:4d:d6:62:7d:b0:71:4b:5a:4d:44:
         4e:6a:45:85:0a:5b:ff:c5:bb:63:eb:37:df:39:df:26:c4:d3:
         88:02:f9:6e:21:2a:b1:cf:ad:de:d8:b5:72:05:a0:aa:e4:a8:
         7b:8b:a2:61:71:7d:d4:0c:cc:ed:8b:e7:bd:84:9e:52:ef:a1:
         9b:2a:b9:0a:7b:70:76:96:f7:26:da:ce:35:c7:46:1c:a0:13:
         a7:f0:de:95:e9:a3:fc:cf:d0:6b:6c:29:a7:55:ce:1d:8a:4c:
         1a:d3:36:ae:c5:2a:be:25:54:af:c7:ad:ad:ea:9c:36:00:45:
         c8:1d:09:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----