Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer
File:                     14F61AD290A8DAF8B52D14976633A357B454AB5B.cer (raw, json)
Hash identifier:          czt0W7CKfZ+2gH09YIymB6gmg3gmFzw7ilIFaP//zhU=
Subject key identifier:   14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5CEEA69E36F82DDFD99B062B1340BAA224A64619
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Feb 2024 12:20:51 +0000
Certificate not after:    Mon 10 Feb 2025 12:25:51 +0000
Subordinate resources:    AS: 269041
                          IP: 45.178.168.0/22
                          IP: 2804:5e90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ee:a6:9e:36:f8:2d:df:d9:9b:06:2b:13:40:ba:a2:24:a6:46:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 12 12:20:51 2024 GMT
            Not After : Feb 10 12:25:51 2025 GMT
        Subject: CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:e5:42:d5:bc:ae:77:61:06:d1:b3:6e:f0:
                    3e:db:b6:3c:e1:84:ff:cc:e4:36:37:de:b5:2a:6a:
                    fa:a6:cc:86:b0:38:07:39:6e:be:53:d2:77:2e:fe:
                    84:d9:da:fe:7a:84:bb:19:be:8e:b4:3b:84:33:ca:
                    c5:cb:7f:fc:27:27:a9:58:f4:0f:46:0a:3c:e0:9a:
                    4a:86:fd:a5:1a:a1:c5:66:cc:eb:52:f1:5a:1d:65:
                    a6:82:02:df:a1:35:a0:da:cd:35:ed:a4:0a:c2:55:
                    9f:36:32:60:e6:61:42:55:14:9e:4d:01:c7:19:93:
                    57:d3:ad:b9:b1:60:21:27:d5:c2:ca:b9:3e:f8:13:
                    c2:5a:40:1c:15:22:f6:40:ca:e1:6d:d8:61:ea:c3:
                    30:7b:f2:ad:85:a2:7f:0a:a4:b5:2d:0f:bf:17:39:
                    ec:e1:0a:0b:ea:10:ca:3d:d1:c1:9f:6a:25:41:c8:
                    51:25:d7:bd:da:ad:93:98:dc:df:72:93:99:b3:3f:
                    f5:2e:63:a7:0c:2a:c7:2e:0d:c2:f7:c3:42:d3:f7:
                    3c:c6:1b:a7:3d:43:6a:8c:97:0c:b6:41:1c:07:d3:
                    50:8a:99:17:14:1d:2e:b7:39:75:0d:36:30:5d:f4:
                    03:ed:01:83:e6:4f:a0:01:6e:71:00:65:e8:38:9b:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.168.0/22
                IPv6:
                  2804:5e90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269041

    Signature Algorithm: sha256WithRSAEncryption
         05:13:8f:6d:27:4f:93:f7:13:f2:db:f1:37:b9:1e:1b:81:0c:
         5f:21:71:ec:18:96:bd:75:44:4c:be:e8:d4:91:df:b2:90:32:
         c5:7b:95:40:e0:80:3e:a6:09:22:56:ff:3e:ae:d9:ec:74:cf:
         25:e6:94:b9:23:ac:0f:4a:1f:f1:cb:7e:b1:94:37:ea:fe:6d:
         bc:48:23:18:d5:38:b1:fe:27:7a:64:dc:1c:87:1f:11:f8:b1:
         15:22:c9:3b:11:d3:5f:c7:03:2f:48:f0:e7:68:08:04:25:b1:
         cf:d7:82:a1:4b:ba:fb:28:83:d3:d4:bc:10:fe:89:47:e8:3c:
         74:2b:c1:14:8c:7d:b4:a8:63:ad:e1:10:4d:ae:46:6b:31:8b:
         14:3e:d4:8f:12:59:de:91:3c:64:1d:fb:9a:7d:c4:ce:32:5c:
         f6:9e:c7:0d:9e:ec:93:d8:89:50:7b:a0:96:fc:cd:46:48:1b:
         5b:20:19:81:54:b2:f1:0e:1f:4a:ba:e6:f5:3c:4a:9c:0e:81:
         b4:8b:87:8f:6d:7a:86:c2:b5:02:33:f0:d1:5d:a8:e6:e9:4e:
         53:cf:6c:1c:59:3e:04:a5:8f:23:f0:c0:4d:6a:2f:77:63:fb:
         ef:29:de:51:e8:69:32:6e:13:63:22:07:a6:52:12:ca:f1:72:
         ad:21:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----