Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/12D5E6753F0953AA0492298DB65F4F16200D508E.cer
File:                     12D5E6753F0953AA0492298DB65F4F16200D508E.cer (raw, json)
Hash identifier:          dFGW1VtIFCCLgsxt7v5xptfwSSeY5YxAKvdpu36aAnU=
Subject key identifier:   12:D5:E6:75:3F:09:53:AA:04:92:29:8D:B6:5F:4F:16:20:0D:50:8E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       496EB62AB65C234CE9F3C8FA4EDA8FA1EEE67792
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/12D5E6753F0953AA0492298DB65F4F16200D508E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Mar 2024 23:16:01 +0000
Certificate not after:    Fri 14 Mar 2025 23:21:01 +0000
Subordinate resources:    AS: 263573
                          IP: 170.231.240.0/22
                          IP: 177.184.216.0/22
                          IP: 2804:f40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6e:b6:2a:b6:5c:23:4c:e9:f3:c8:fa:4e:da:8f:a1:ee:e6:77:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 15 23:16:01 2024 GMT
            Not After : Mar 14 23:21:01 2025 GMT
        Subject: CN=12D5E6753F0953AA0492298DB65F4F16200D508E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:ce:6e:dc:dc:98:19:f5:b3:4d:fb:95:0b:
                    23:e7:d8:19:a6:00:be:3d:03:e7:3d:1a:cf:2c:36:
                    41:19:49:1e:57:82:43:89:b2:9b:b9:7f:52:fa:d7:
                    45:0c:5d:78:eb:0d:f3:e1:29:c2:6c:76:ad:7b:9b:
                    f3:7b:bf:d0:a6:4e:97:d6:ec:40:09:70:04:51:6b:
                    59:8b:28:97:aa:ec:09:3c:e7:cf:d0:bb:ae:dd:7f:
                    c8:22:4d:3b:54:1e:60:c9:b8:70:a3:74:fb:d9:75:
                    24:ec:0a:79:f9:05:ea:15:de:c8:02:d5:32:4b:73:
                    64:cd:68:cc:92:a6:9c:f3:3b:f9:99:57:38:a3:7d:
                    21:f0:74:00:6e:52:1c:c5:3c:04:35:5a:0a:86:9b:
                    2c:c0:3b:f6:ea:d6:a6:51:35:70:46:4e:1d:dd:78:
                    9b:59:3c:41:a0:0d:99:6b:5d:bb:a5:33:a7:01:63:
                    76:b1:e4:1c:5d:09:b0:7f:f5:12:a6:1f:53:e4:f3:
                    b9:fd:e0:d0:c0:df:5c:94:a4:09:9d:87:15:a1:21:
                    49:2c:d3:19:96:47:ed:ac:0d:ec:d1:42:b7:69:27:
                    d6:da:f2:4a:13:23:49:89:d0:27:7a:6a:71:b9:ee:
                    96:71:3d:7c:03:5c:d3:29:d5:db:8d:ea:51:40:c8:
                    bc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:D5:E6:75:3F:09:53:AA:04:92:29:8D:B6:5F:4F:16:20:0D:50:8E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/12D5E6753F0953AA0492298DB65F4F16200D508E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.240.0/22
                  177.184.216.0/22
                IPv6:
                  2804:f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263573

    Signature Algorithm: sha256WithRSAEncryption
         7d:36:ef:7b:1e:a3:5a:df:10:09:c4:40:d0:6b:62:bf:0f:e0:
         cf:ed:fe:5e:03:6c:82:73:e8:17:52:e8:1d:a0:44:c1:b3:8a:
         a0:6f:e0:56:b5:f7:32:84:d7:50:bc:d7:1e:92:80:69:25:d5:
         dc:04:83:32:99:88:e2:7b:f2:03:88:69:5d:22:14:7d:73:39:
         56:dd:dc:89:35:bd:6f:6a:71:93:d2:60:b9:b7:23:63:6f:28:
         2e:05:de:9d:58:c3:e9:ff:9d:75:8c:ba:86:ca:3a:4a:a0:fc:
         3e:91:32:60:76:3f:d4:63:56:4d:ef:c0:18:4b:4a:c9:3b:57:
         05:d7:24:b5:30:97:2e:08:a7:c2:3f:f8:b7:19:5c:92:af:c5:
         78:d3:a1:82:a6:a4:54:d2:07:86:3f:45:5b:f5:eb:0f:aa:7d:
         f7:7c:6e:0e:79:45:54:99:71:9a:85:dc:29:1e:93:87:6c:27:
         28:a5:db:c9:69:7d:37:55:67:61:12:ed:3e:2b:8b:33:72:28:
         4a:c1:74:f4:68:5d:37:3e:87:69:58:24:fc:4d:ce:a3:5e:c7:
         76:41:fd:41:bf:54:11:f5:af:20:05:db:a5:10:ef:f0:34:22:
         18:e5:9b:b6:dc:25:74:9d:5f:e6:79:1e:b8:e4:5d:c5:48:1c:
         73:39:09:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----