Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer
File:                     15D66C82385E07A46724C3074293F737D556F1B3.cer (raw, json)
Hash identifier:          7pzxpl/HHLUjbIfXw7PJBHpHgyeSR2NoLu9t4X/QEDI=
Subject key identifier:   15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6AD80CF6201EB63929281873B651F72030A7CCA1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/15D66C82385E07A46724C3074293F737D556F1B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 13:26:24 +0000
Certificate not after:    Thu 12 Dec 2024 13:31:24 +0000
Subordinate resources:    AS: 268035
                          IP: 45.168.12.0/22
                          IP: 2804:56f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d8:0c:f6:20:1e:b6:39:29:28:18:73:b6:51:f7:20:30:a7:cc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 13:26:24 2023 GMT
            Not After : Dec 12 13:31:24 2024 GMT
        Subject: CN=15D66C82385E07A46724C3074293F737D556F1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:4e:e6:5a:08:a2:76:8f:6b:cf:f1:de:07:
                    4d:8a:e2:ef:e2:ec:a2:82:ed:a3:06:68:17:9e:31:
                    95:72:da:03:3e:7a:51:8a:f8:ba:43:97:eb:01:d5:
                    1e:91:d2:15:cd:70:29:d0:93:6a:85:2c:ad:52:00:
                    1f:be:c7:74:a6:e4:dc:5b:e9:d5:96:2c:b5:b7:2a:
                    d5:74:45:e0:32:a6:e9:9b:99:73:a3:99:b7:c1:db:
                    dd:ec:31:cb:7d:b6:e9:9e:f3:67:6c:f2:bf:db:87:
                    61:a9:bc:2d:e1:21:d4:50:f8:6c:be:6f:7a:1b:5d:
                    51:d0:68:57:53:f3:4a:e4:f0:70:a2:e3:12:bc:3b:
                    2c:fe:d9:1f:14:6d:12:75:a0:59:98:52:ad:ab:14:
                    5e:83:01:1e:7f:2b:d2:c2:d0:1c:9b:0a:f1:bc:3b:
                    c9:53:2b:53:8d:f5:21:b7:7b:f4:e6:22:d3:13:e1:
                    75:3c:6e:e8:3b:c0:86:d5:da:f2:0e:75:c7:c7:94:
                    c5:c1:cd:89:49:54:d3:91:02:7e:2a:19:1b:dd:f6:
                    42:f7:52:ab:ce:c1:77:0c:f3:96:6b:3d:83:de:89:
                    6b:12:e4:38:4d:37:48:b0:07:cf:b8:b0:28:4f:aa:
                    ba:79:fc:e5:82:f4:f8:23:37:ce:49:4e:02:c1:49:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/15D66C82385E07A46724C3074293F737D556F1B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.12.0/22
                IPv6:
                  2804:56f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268035

    Signature Algorithm: sha256WithRSAEncryption
         92:ff:6d:db:d2:61:b4:41:ce:3e:a2:19:c5:82:95:b4:76:8f:
         ed:0a:32:7f:54:e2:40:24:d3:45:4f:32:6e:ee:ea:2d:b9:18:
         c4:27:6b:5d:9d:02:d4:88:97:87:95:c5:c7:6b:8f:d4:58:94:
         8f:cb:93:38:b6:a3:ba:b7:a8:bf:24:61:26:62:01:d2:31:47:
         9a:38:ce:8c:c6:25:3a:38:54:1d:b0:3e:8f:82:ab:fa:3a:f0:
         89:8f:10:db:80:3c:4f:c4:d4:84:ac:54:b9:63:a2:3f:bc:17:
         6c:3c:b1:d1:52:87:c3:cf:af:d7:d9:45:08:7d:9f:4e:43:3b:
         e1:2a:00:0b:cf:c7:ab:a5:6f:00:7d:70:06:a0:5d:bd:82:a9:
         09:f3:82:dd:50:b0:8b:00:46:62:17:67:b0:a3:fd:5d:50:61:
         54:48:a1:f3:cf:6d:9d:61:7e:a7:c4:2b:ed:1e:4c:83:3e:24:
         4d:ca:46:3e:ae:30:da:5e:65:aa:31:10:8e:6f:ab:3e:fa:e5:
         46:e0:b7:11:e7:41:a9:5b:e4:46:25:73:1a:6d:91:3f:cf:30:
         d9:62:e9:ec:71:97:7a:35:01:ab:18:29:a6:c3:1a:81:9b:4b:
         79:19:44:52:f2:7d:2b:45:ae:4f:fb:50:f5:81:06:19:d9:ee:
         8c:8f:30:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----