Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/145C61458E626CEEF29D45452C7A2577F47EC59F.cer
File:                     145C61458E626CEEF29D45452C7A2577F47EC59F.cer (raw, json)
Hash identifier:          TPJy3I9/06UT7+XGt/pXz8Ricb62RyJWKhFLTApH5Yw=
Subject key identifier:   14:5C:61:45:8E:62:6C:EE:F2:9D:45:45:2C:7A:25:77:F4:7E:C5:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C19B5BCACE336F85FD8F147518C35ED70425DC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/1/145C61458E626CEEF29D45452C7A2577F47EC59F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Feb 2024 13:54:02 +0000
Certificate not after:    Sat 08 Feb 2025 13:59:02 +0000
Subordinate resources:    AS: 262576
                          IP: 177.84.16.0/22
                          IP: 2804:3bc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:19:b5:bc:ac:e3:36:f8:5f:d8:f1:47:51:8c:35:ed:70:42:5d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 10 13:54:02 2024 GMT
            Not After : Feb  8 13:59:02 2025 GMT
        Subject: CN=145C61458E626CEEF29D45452C7A2577F47EC59F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9f:fc:88:23:18:0e:8e:f0:d0:14:ed:42:19:
                    7b:fa:0a:2b:d0:37:04:bc:5d:45:e8:0e:0c:1e:5b:
                    f4:14:7a:16:1b:13:6d:0c:db:44:d8:b2:3a:d8:58:
                    ae:b4:0b:51:95:80:20:bc:a6:05:b4:c4:d0:56:4b:
                    53:5c:b8:7d:a7:95:35:6c:16:0c:4a:2a:fc:c7:7b:
                    6a:e6:85:8a:5f:9c:39:9e:7d:9e:2b:2d:51:8c:99:
                    2c:bd:f7:04:29:1e:43:f9:4b:ab:1b:4e:ff:30:91:
                    e2:af:ed:a7:9b:03:61:03:75:f1:d5:22:20:31:bb:
                    3d:e9:3a:6c:32:0a:f3:fc:ba:80:69:d5:9e:61:6a:
                    4f:d1:9f:84:d3:05:be:fb:cc:c3:95:d6:f7:df:08:
                    ac:b7:43:50:ed:81:e1:9b:38:21:e3:91:da:5a:39:
                    56:07:52:30:04:26:e5:33:bc:80:ee:61:05:7b:ae:
                    b2:00:29:9d:a8:81:7c:6c:e3:c6:aa:d5:aa:3f:36:
                    bd:95:25:f1:81:39:24:70:17:03:cd:3a:93:f3:b7:
                    0a:6f:fb:d5:2a:3e:ca:5b:ae:6c:58:d1:6a:bd:ba:
                    04:1a:ca:85:e0:da:73:48:f7:c7:6f:af:75:e2:29:
                    6a:ca:c2:3f:34:ea:fc:7f:27:07:61:80:0b:57:49:
                    63:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:5C:61:45:8E:62:6C:EE:F2:9D:45:45:2C:7A:25:77:F4:7E:C5:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/1/145C61458E626CEEF29D45452C7A2577F47EC59F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.16.0/22
                IPv6:
                  2804:3bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262576

    Signature Algorithm: sha256WithRSAEncryption
         a7:a3:6a:cc:df:02:42:b9:9f:6f:df:c5:9d:84:03:a8:87:ba:
         07:f4:4a:e6:40:c0:f0:88:61:06:0f:31:71:bd:2f:08:18:72:
         39:68:f4:b1:cb:1f:eb:f9:0f:6f:31:85:09:ca:67:5a:ba:e0:
         6a:e1:7a:58:43:31:fa:60:9d:77:14:a5:d6:4e:28:17:a9:8a:
         ea:b5:57:1a:92:f3:85:dd:b8:fa:7c:01:c6:f5:b6:38:e4:af:
         69:61:44:67:de:17:1a:a6:93:28:b3:49:f5:55:b4:e8:14:54:
         bb:9b:ba:88:be:77:ac:69:60:a7:d9:a7:95:e7:64:fc:7e:6e:
         63:39:a9:61:12:24:34:8d:d2:a2:4a:4c:e4:eb:19:83:c8:c3:
         3d:ea:c8:48:b9:ae:3a:56:8e:fb:e8:96:1c:2d:08:31:76:5f:
         c6:9c:22:2a:1a:f3:d1:96:dc:39:15:3b:e8:64:10:27:a4:f7:
         15:f8:33:ac:4a:f5:6c:ca:12:eb:d2:9b:3c:68:34:08:37:9d:
         2e:b9:2d:6e:7d:b3:d0:06:e9:cf:45:c3:cf:3e:56:5e:a2:d8:
         be:2d:0c:43:7c:8a:10:35:ff:34:55:66:a3:a3:f8:d3:b6:a7:
         46:3e:ed:96:fb:4c:1c:1b:04:3e:e6:10:78:c0:24:5a:5c:07:
         f5:80:8a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----