Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83.cer
File:                     1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83.cer (raw, json)
Hash identifier:          34NRAoQXpR/nrimJBmsIDpZAqQeIdZDAQvFgv/nMIAk=
Subject key identifier:   19:58:E2:EE:1D:E5:BD:7B:EC:25:BD:3D:D0:4A:8E:B0:2F:CB:0E:83
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0DD7B0DA5EDF98D86349282D84C31614688105E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 17 Mar 2024 01:58:47 +0000
Certificate not after:    Sun 16 Mar 2025 02:03:47 +0000
Subordinate resources:    AS: 267142
                          IP: 45.229.240.0/22
                          IP: 2804:48c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d7:b0:da:5e:df:98:d8:63:49:28:2d:84:c3:16:14:68:81:05:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 17 01:58:47 2024 GMT
            Not After : Mar 16 02:03:47 2025 GMT
        Subject: CN=1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:a9:53:34:85:6b:3c:8f:4c:b0:70:10:2f:
                    8c:03:f3:6d:09:8f:c1:51:6d:ee:f8:42:07:a9:59:
                    ef:fa:9a:fe:5c:4e:02:4f:f6:64:03:94:b2:36:6b:
                    9a:0b:ff:33:82:34:ed:e5:a7:ab:72:61:21:b7:db:
                    75:7b:c0:c2:ba:2f:e6:5e:ac:84:82:f9:b5:f5:ca:
                    eb:f6:fb:49:cb:ec:5e:db:33:ef:a3:93:94:2a:7f:
                    92:e6:13:7d:76:54:8d:b3:f8:39:3f:fa:90:48:aa:
                    7a:c4:ef:1f:1f:25:17:36:38:b4:f2:89:a8:d2:3d:
                    91:f8:12:fe:2a:27:0a:0f:f8:80:04:55:23:1d:9c:
                    88:fc:b5:14:44:23:f3:6e:d5:1c:b3:dc:d4:ff:07:
                    02:1e:ca:59:51:8d:49:1b:4e:06:2c:7f:93:38:4f:
                    87:2f:05:e4:f7:01:f5:20:68:81:64:09:4a:b5:6b:
                    b7:8b:a7:de:5c:8d:1f:a2:41:3e:88:1e:09:be:52:
                    2b:e7:00:a5:fe:c9:ee:e1:70:a8:de:80:62:9b:84:
                    15:c0:7f:0b:01:a6:77:4a:d2:27:3a:9b:d9:c2:8f:
                    b6:ec:9c:7f:5d:59:58:0b:0c:98:fd:e5:95:6b:39:
                    0a:77:fc:98:ab:7e:14:97:bc:a0:f7:02:97:44:6c:
                    98:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:58:E2:EE:1D:E5:BD:7B:EC:25:BD:3D:D0:4A:8E:B0:2F:CB:0E:83
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/1958E2EE1DE5BD7BEC25BD3DD04A8EB02FCB0E83.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.240.0/22
                IPv6:
                  2804:48c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267142

    Signature Algorithm: sha256WithRSAEncryption
         4e:bf:a4:85:9f:9f:51:24:1e:47:c7:29:36:8b:ab:25:69:45:
         e3:30:70:a3:9d:54:1a:6a:4f:a7:55:ac:e4:71:60:4c:59:a6:
         1a:06:3d:1f:e1:62:81:a7:02:9c:c5:e0:a5:be:8e:5f:a9:ef:
         28:a2:c4:9f:6f:dc:1a:2a:03:bd:c2:db:67:46:92:94:47:ef:
         14:32:39:aa:bc:fa:db:b3:95:e4:c1:0f:86:96:43:64:11:ad:
         86:e4:c7:13:06:4c:62:97:9d:fd:5a:0d:db:81:8e:e8:5f:52:
         14:6f:3c:29:da:2f:be:33:1c:24:55:c3:a5:0d:aa:9b:1a:0c:
         af:7e:d0:0d:25:f5:7d:dd:f9:00:40:e9:df:2b:16:2e:d7:4b:
         72:e0:55:92:ea:61:d2:e8:c1:19:8f:f6:57:c0:d3:31:4f:f4:
         8c:74:c6:f7:8e:a1:aa:98:dc:9b:36:3b:44:48:ee:06:76:53:
         36:96:25:fe:29:92:df:17:68:30:49:e8:e4:ad:0c:dc:89:38:
         c8:93:90:50:48:92:89:1a:31:62:c0:a8:9b:2b:47:24:d3:ef:
         f5:ac:c6:06:43:e1:26:d4:60:74:cf:8a:10:be:e1:66:95:75:
         3f:a3:75:48:bc:b2:4c:b1:39:41:b8:fc:38:f0:2f:e6:51:a7:
         1c:d1:98:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----