Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/13E0E480CD71A0FDF89D8FB5CAB399744C305796.cer
File:                     13E0E480CD71A0FDF89D8FB5CAB399744C305796.cer (raw, json)
Hash identifier:          qAPKy46Pldn/rSWr++qQruLzvuDVsmO95dl1DP88JZk=
Subject key identifier:   13:E0:E4:80:CD:71:A0:FD:F8:9D:8F:B5:CA:B3:99:74:4C:30:57:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       419C6230F28D125ACA0C98832350F93107BDA72E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/13E0E480CD71A0FDF89D8FB5CAB399744C305796.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Mar 2024 15:17:00 +0000
Certificate not after:    Sat 22 Mar 2025 15:22:00 +0000
Subordinate resources:    AS: 265890
                          IP: 131.196.4.0/22
                          IP: 2804:3f64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9c:62:30:f2:8d:12:5a:ca:0c:98:83:23:50:f9:31:07:bd:a7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 23 15:17:00 2024 GMT
            Not After : Mar 22 15:22:00 2025 GMT
        Subject: CN=13E0E480CD71A0FDF89D8FB5CAB399744C305796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:69:f5:31:93:8c:89:fc:6d:d6:97:51:f4:
                    d6:df:d6:8b:c6:17:87:2d:30:56:1c:24:4c:28:30:
                    4b:2d:e9:37:1d:35:47:49:06:d1:1b:29:c0:72:02:
                    ff:70:ff:f3:0b:6c:cf:d4:f6:b0:e5:2d:c1:cd:16:
                    d6:07:e3:24:0b:23:f6:29:21:ad:92:dd:61:77:bd:
                    41:4e:19:5b:74:35:de:8d:a4:e5:99:11:87:b3:92:
                    a7:8d:8a:26:f6:fa:e3:24:e1:f4:42:96:e4:43:fa:
                    29:71:4d:df:e3:e5:1f:e2:01:6e:79:e0:b4:d8:5a:
                    ba:be:c6:2a:21:79:de:c6:e2:77:17:9f:ef:f5:9f:
                    33:1f:1b:a6:e8:27:e2:76:61:fc:70:c0:f9:60:0c:
                    2e:df:d6:c4:71:0c:6a:99:f9:4a:9e:20:8a:84:0a:
                    14:c0:0c:5e:5a:c6:cd:87:ed:f4:91:3b:3b:6e:37:
                    89:30:a8:bc:1f:28:6e:45:0d:61:89:17:62:d8:bb:
                    79:8b:d9:f4:23:59:39:af:cb:42:34:21:62:44:a5:
                    6f:c3:50:01:ca:ec:a3:bc:aa:f9:ac:04:4a:f8:a9:
                    f7:d7:3b:6c:d8:6a:6f:2f:b1:18:15:55:71:1d:f7:
                    28:d6:6d:fa:6f:79:b7:cd:fd:69:e7:d5:d5:b7:32:
                    47:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:E0:E4:80:CD:71:A0:FD:F8:9D:8F:B5:CA:B3:99:74:4C:30:57:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/13E0E480CD71A0FDF89D8FB5CAB399744C305796.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.4.0/22
                IPv6:
                  2804:3f64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265890

    Signature Algorithm: sha256WithRSAEncryption
         8e:7a:d9:31:cf:b9:fa:08:6b:81:81:0f:f0:63:b7:ed:ef:b7:
         13:7b:9b:1a:0d:a1:65:de:5b:60:2f:25:2d:00:7a:ae:cc:87:
         84:de:24:e0:e5:f5:ec:8e:d1:7f:2a:f5:6a:10:c1:00:11:87:
         e9:45:08:2b:e8:b5:63:29:f7:57:90:c5:5f:0f:4c:72:e8:e4:
         95:c8:1a:09:99:b3:3e:4a:6b:1b:1b:a2:8d:f6:46:ab:a2:54:
         b3:5f:71:9f:f9:1a:b2:ab:48:6a:51:a5:55:d8:2e:ff:e1:5d:
         0f:5f:b7:19:21:9a:e1:81:88:e4:8e:d3:92:3b:e9:08:ae:be:
         06:41:51:5e:01:d4:6c:bd:42:97:ae:8a:49:37:ff:ec:42:b8:
         eb:7d:a3:f7:4d:01:1b:8c:a0:d0:d4:3a:6e:61:04:09:8c:a9:
         dc:f3:d2:c1:d0:c4:a2:4f:95:dc:04:83:34:a7:5e:a2:21:1d:
         98:2f:a8:c2:da:d0:f6:29:69:17:71:8d:b1:6b:11:15:5f:c0:
         a1:9b:f6:4d:94:50:d0:ad:2c:8c:d2:86:95:91:e4:bb:7d:8f:
         55:bf:8f:6c:12:8d:68:0f:48:43:0d:fd:49:33:e5:25:bb:9b:
         b3:24:18:db:f9:da:e3:8c:36:d9:11:68:5b:3e:54:46:9d:d3:
         3c:9d:85:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----