Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/162A241537498C5CE40422A683B979180F6C6971.cer
File:                     162A241537498C5CE40422A683B979180F6C6971.cer (raw, json)
Hash identifier:          oKgbLxsZ+xxMfBkwlIWqK/SjyUm6INLW+/BgSWvyyyI=
Subject key identifier:   16:2A:24:15:37:49:8C:5C:E4:04:22:A6:83:B9:79:18:0F:6C:69:71
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       37178EF4624A9BC0BD3ACE8E02C0BE867848DB2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/162A241537498C5CE40422A683B979180F6C6971.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 13:55:18 +0000
Certificate not after:    Wed 18 Sep 2024 14:00:18 +0000
Subordinate resources:    AS: 61842
                          IP: 201.131.172.0/22
                          IP: 2804:1a2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:17:8e:f4:62:4a:9b:c0:bd:3a:ce:8e:02:c0:be:86:78:48:db:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 13:55:18 2023 GMT
            Not After : Sep 18 14:00:18 2024 GMT
        Subject: CN=162A241537498C5CE40422A683B979180F6C6971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:1f:d2:dc:32:1b:7c:42:ed:04:d3:4a:0a:
                    61:62:67:a6:1d:fa:8c:98:85:ff:43:40:bf:bc:bf:
                    76:bd:ca:2c:61:33:be:f9:64:b2:69:39:d3:d4:6e:
                    98:c5:10:15:4c:45:0a:68:a4:9e:bb:fb:c3:de:72:
                    07:6e:e1:8c:b3:7a:fe:85:ec:43:8e:59:dd:08:1c:
                    f2:fe:4d:6d:75:ac:b8:bc:cb:e1:4b:21:65:37:f3:
                    55:60:cd:a9:45:11:60:a3:ce:93:16:86:ab:21:99:
                    79:ac:c5:94:e1:2f:9e:00:5b:e5:bd:ee:20:dc:59:
                    3a:61:32:d7:23:7a:0d:72:ae:cb:50:4e:ff:84:25:
                    17:6d:fc:ef:78:81:40:be:1c:87:55:8a:6d:d6:95:
                    08:fb:8c:53:9e:81:02:cf:6e:81:da:22:f7:5d:ac:
                    12:bd:96:0e:db:5d:69:08:c5:cc:dc:1a:d6:01:9c:
                    b3:54:7d:43:75:e4:85:13:fe:bb:1c:f3:f7:f1:c0:
                    b7:3f:75:6b:35:ad:87:7e:ac:dc:93:b0:a4:af:ff:
                    71:09:9c:00:44:a4:ef:67:3d:dd:5e:f9:83:04:d7:
                    56:d7:39:07:62:71:7e:dd:b9:02:e8:69:44:85:3c:
                    3c:d7:22:06:f6:59:1c:4b:82:26:5a:bd:7e:d0:8d:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:2A:24:15:37:49:8C:5C:E4:04:22:A6:83:B9:79:18:0F:6C:69:71
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/162A241537498C5CE40422A683B979180F6C6971.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.172.0/22
                IPv6:
                  2804:1a2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61842

    Signature Algorithm: sha256WithRSAEncryption
         a4:29:86:f8:11:b0:04:94:d2:65:88:66:d6:45:f5:50:85:4e:
         ef:cf:f8:00:e5:a9:d8:17:b4:25:df:74:ca:17:23:c1:06:dc:
         f3:d8:eb:6b:a4:8c:66:2b:28:d2:9b:4c:f9:0c:88:6b:ec:72:
         19:20:99:62:1e:e6:4d:a0:ba:db:5c:23:e5:80:15:6d:b1:20:
         71:c3:27:d7:54:2a:d4:a0:82:b6:6e:90:26:da:01:aa:b8:e4:
         38:da:ca:af:f6:16:a4:51:c6:b8:bd:51:22:ea:82:07:c8:1e:
         b4:b3:d6:1a:aa:3b:97:74:28:36:c4:6e:04:3c:6f:bc:a6:88:
         d8:53:35:a8:c1:e8:bd:fa:d9:1c:7b:c3:0c:2a:1e:cd:ed:22:
         82:b0:80:db:99:ac:e0:49:e8:60:93:3c:47:11:48:2c:2a:09:
         da:eb:14:3a:1e:02:aa:61:ff:af:50:1d:73:c1:ca:b1:42:60:
         d7:35:05:25:2e:68:7e:48:69:ec:99:ea:bf:45:37:4b:8e:51:
         06:10:56:97:79:ed:ee:60:d1:24:d1:df:43:18:f6:15:8e:e5:
         93:19:21:39:b1:f7:2b:bc:92:5e:c1:a4:a5:fc:13:3e:b6:92:
         c8:6a:f2:ac:0a:14:a3:f4:51:de:0c:3f:e3:ad:92:1a:f5:2e:
         38:15:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----