Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/23299A1007FF062D7310CF8541CCC9DCD192C59A.cer
File:                     23299A1007FF062D7310CF8541CCC9DCD192C59A.cer (raw, json)
Hash identifier:          Lauwqlj8j/pRBrHrh4lk//+s1h1+1adokByEWmASd+g=
Subject key identifier:   23:29:9A:10:07:FF:06:2D:73:10:CF:85:41:CC:C9:DC:D1:92:C5:9A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CF0C1CBC5005DC5812E91DB06C979EEC479475D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/23299A1007FF062D7310CF8541CCC9DCD192C59A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jan 2024 18:41:16 +0000
Certificate not after:    Mon 06 Jan 2025 18:46:16 +0000
Subordinate resources:    AS: 268418
                          IP: 45.160.120.0/22
                          IP: 2804:50e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f0:c1:cb:c5:00:5d:c5:81:2e:91:db:06:c9:79:ee:c4:79:47:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  8 18:41:16 2024 GMT
            Not After : Jan  6 18:46:16 2025 GMT
        Subject: CN=23299A1007FF062D7310CF8541CCC9DCD192C59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:95:a8:08:6d:1b:a6:e5:ba:78:7d:3b:04:
                    96:95:cd:08:a2:23:3e:a2:1d:43:ea:a2:25:6d:1d:
                    07:63:43:ce:84:d6:c1:9c:d3:f3:28:9b:37:96:0a:
                    6a:c6:38:00:d8:25:b2:68:36:6c:d3:26:e5:3c:b9:
                    76:44:dd:f5:71:a5:9c:66:26:b0:a7:83:2f:4d:57:
                    b1:35:1d:00:ef:70:06:df:d0:c2:1c:27:39:ad:59:
                    42:9b:35:9b:13:f7:c0:10:d3:a4:63:69:cc:90:0f:
                    89:1f:c3:7c:e2:44:f3:ee:0d:5f:72:19:b7:c6:36:
                    a9:0d:d6:fe:a7:fd:ce:6a:d8:91:1e:66:df:c8:9f:
                    b6:ca:1a:7b:37:32:cc:5d:95:e6:2c:9c:8b:f1:ab:
                    7d:01:13:db:56:bb:74:8b:72:94:b8:96:8e:e5:c7:
                    45:3b:db:54:24:90:5f:1a:d0:70:33:63:da:6a:94:
                    72:28:67:cb:b5:3e:7b:26:6a:0d:27:9a:20:64:30:
                    5e:5c:cd:0f:71:c1:91:ce:a9:31:99:8c:2a:61:4f:
                    4f:63:14:c9:62:57:1b:37:7a:00:52:fd:cf:3c:52:
                    e5:1f:f3:de:04:ce:24:55:cd:ed:de:05:00:bb:37:
                    bc:54:f5:ec:f8:bf:04:71:93:79:45:0a:5e:47:75:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:29:9A:10:07:FF:06:2D:73:10:CF:85:41:CC:C9:DC:D1:92:C5:9A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/23299A1007FF062D7310CF8541CCC9DCD192C59A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.120.0/22
                IPv6:
                  2804:50e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268418

    Signature Algorithm: sha256WithRSAEncryption
         14:38:c2:d7:03:4a:89:f7:3c:cd:29:fe:74:91:e5:98:e0:f1:
         d0:27:a6:17:af:07:ee:26:79:18:01:04:f8:f7:bf:f8:e7:af:
         eb:70:94:95:b4:0d:c9:64:af:2d:31:88:84:c7:02:b1:83:66:
         67:6a:8f:1c:07:16:4a:a5:be:2a:5c:b3:30:d9:a2:69:76:04:
         42:3e:c4:b1:97:69:21:cf:dc:fb:d9:9b:d7:d3:b7:d5:39:fb:
         25:bb:82:f6:e4:11:5f:25:4a:2a:5c:b9:a7:b6:f4:8c:27:f0:
         c2:f4:84:06:d5:ad:a9:09:72:8c:7f:54:4d:d2:f5:de:f0:9e:
         47:1a:51:12:57:51:be:39:19:5a:8a:9a:68:16:90:06:eb:6f:
         46:dc:48:2f:c7:f2:5b:38:2c:15:9c:dd:ad:d0:87:76:6b:f2:
         7f:3f:3c:68:32:b6:87:18:00:ee:8f:76:45:20:f9:72:0b:e5:
         37:d3:bb:e9:e4:df:24:79:bf:6e:4b:ff:50:fc:21:dd:3a:d6:
         9f:c7:f7:64:c5:92:91:af:ca:5e:dc:76:4e:2e:2d:ba:6c:bd:
         02:1f:c1:3f:59:11:2a:e5:62:07:3c:c0:be:c2:e8:86:49:1c:
         25:b4:fd:ed:4a:09:1c:e4:89:4a:5f:c7:11:ed:d0:c2:bc:2a:
         22:bd:6b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----