Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C51832A02CFF58C26F9309C52477BBF3C03E47E.cer
File:                     1C51832A02CFF58C26F9309C52477BBF3C03E47E.cer (raw, json)
Hash identifier:          T2XofbQOWrI45223vFyywZx0mIJXI0TAMvWM4VbE3Fg=
Subject key identifier:   1C:51:83:2A:02:CF:F5:8C:26:F9:30:9C:52:47:7B:BF:3C:03:E4:7E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       36ACC1737ADA70FA1CCF29F6E490F792AE60F7EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/1C51832A02CFF58C26F9309C52477BBF3C03E47E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 10:35:35 +0000
Certificate not after:    Mon 17 Mar 2025 10:40:35 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ac:c1:73:7a:da:70:fa:1c:cf:29:f6:e4:90:f7:92:ae:60:f7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 10:35:35 2024 GMT
            Not After : Mar 17 10:40:35 2025 GMT
        Subject: CN=1C51832A02CFF58C26F9309C52477BBF3C03E47E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b5:b2:da:c0:18:c9:8b:66:4c:a9:87:d0:54:
                    40:6e:48:b6:8b:f0:d0:17:56:07:a2:a7:85:da:23:
                    90:e5:82:1e:49:02:e4:31:33:51:84:de:55:04:81:
                    10:e6:95:70:dd:cc:27:d9:57:06:0e:a2:1e:1f:48:
                    af:a2:0d:82:09:82:d2:d3:e6:fd:f5:3a:52:6f:b4:
                    2b:ba:07:0e:b3:2f:bb:58:a3:e2:4f:84:41:2a:3a:
                    f0:c1:51:79:78:3c:9c:b1:f6:49:46:69:b8:0f:0a:
                    35:85:02:42:90:0c:7f:8c:d8:52:db:67:0c:5d:fe:
                    50:ee:a5:94:c1:d2:c6:84:e9:16:a5:8a:38:5c:d7:
                    a3:ad:e0:c5:46:99:23:36:7c:e9:9a:f1:63:bf:df:
                    7a:d0:a8:e6:08:91:5b:cb:cf:88:51:5c:e9:f2:f3:
                    64:c9:94:67:aa:e3:74:2e:c6:2b:fd:6f:4f:fe:6d:
                    a0:46:a7:6f:68:8c:8a:13:ba:76:19:c9:59:81:b2:
                    21:e0:42:d5:5a:a0:0d:49:12:f6:3b:19:20:d4:6a:
                    63:06:34:2b:f1:41:bc:ed:25:7a:03:34:4d:8f:50:
                    b0:53:10:e7:0a:b9:55:88:88:e5:15:3b:36:cf:5a:
                    e4:32:d9:49:13:36:78:07:0e:ea:5e:51:0d:94:78:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:51:83:2A:02:CF:F5:8C:26:F9:30:9C:52:47:7B:BF:3C:03:E4:7E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/1C51832A02CFF58C26F9309C52477BBF3C03E47E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         2e:a6:b8:ee:66:d6:72:cb:86:28:00:f9:aa:30:62:22:a5:b7:
         d5:ce:ec:cb:2e:4a:44:65:c2:33:b8:b6:f7:29:98:25:e3:e2:
         55:73:9e:00:b4:37:dc:44:a9:22:40:20:0c:11:04:23:e1:63:
         bf:70:d5:6e:6d:bd:0a:92:4b:90:66:2e:44:7b:11:ea:fa:55:
         67:2d:21:4c:95:03:c4:8b:e3:8a:18:9c:c0:c4:6d:b9:ef:58:
         3e:ef:a4:5a:fa:f2:67:4e:19:bd:6f:8f:87:e2:e6:0f:47:2b:
         4d:f1:b4:e7:7f:cf:82:9e:97:fc:11:49:7b:0f:0a:27:25:fa:
         eb:e8:27:5d:b4:36:a9:11:30:75:be:c3:a0:30:23:e9:ae:f2:
         ef:f6:26:54:3a:08:76:d9:4f:70:90:ed:06:b2:bb:b2:31:ab:
         44:20:37:03:1b:96:3d:e9:a2:a3:b0:2a:d0:17:a4:27:20:41:
         f2:4f:87:8a:42:84:ed:92:41:02:0f:26:4a:b7:fa:cd:8a:f7:
         f8:00:ca:64:82:42:26:b4:0b:b3:b7:ee:d1:c7:ce:2d:46:b7:
         ad:15:cf:1b:de:91:1d:f4:8d:17:a7:01:e7:18:18:5a:2a:c2:
         6b:ad:1a:28:0c:eb:56:2d:b4:ed:44:99:d6:64:ae:ae:9c:11:
         6e:26:91:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----