Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/233E5651813B32F6D93026D88773CE8BDD6E8E0F.cer
File:                     233E5651813B32F6D93026D88773CE8BDD6E8E0F.cer (raw, json)
Hash identifier:          HOLpBmMkoL2btvHavIOFcREHub+4U8w+c/li5i4ipGQ=
Subject key identifier:   23:3E:56:51:81:3B:32:F6:D9:30:26:D8:87:73:CE:8B:DD:6E:8E:0F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2270ED03FD57B05CA96F91F33004807A30FC4B4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/1/233E5651813B32F6D93026D88773CE8BDD6E8E0F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Apr 2024 13:04:09 +0000
Certificate not after:    Fri 11 Apr 2025 13:09:09 +0000
Subordinate resources:    AS: 266523
                          IP: 170.244.228.0/22
                          IP: 2804:3914::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:70:ed:03:fd:57:b0:5c:a9:6f:91:f3:30:04:80:7a:30:fc:4b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 13:04:09 2024 GMT
            Not After : Apr 11 13:09:09 2025 GMT
        Subject: CN=233E5651813B32F6D93026D88773CE8BDD6E8E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:74:c0:55:15:83:97:e9:8a:8a:1e:90:e8:
                    fe:3a:7a:b8:95:51:0c:85:36:f7:6b:d1:4b:80:1f:
                    5b:3f:02:1a:c3:25:c3:70:1b:c5:2b:89:66:8c:43:
                    a1:47:e3:8b:dc:df:26:dd:24:3a:f6:99:22:4c:4e:
                    7b:af:97:58:d3:1b:c0:33:9c:48:ff:db:14:aa:08:
                    28:3a:c0:c6:03:68:ed:fe:a0:63:41:ac:fe:d9:7f:
                    03:cc:c5:16:f4:8a:3d:f7:bd:ae:af:38:97:fc:8b:
                    73:04:6e:f3:20:54:30:24:55:0a:6d:8d:3a:41:5e:
                    6c:78:f7:fa:a1:21:8b:0e:67:1c:67:24:83:f8:b5:
                    ed:82:8c:30:3d:29:67:14:3d:1c:21:34:04:35:2f:
                    b5:37:3c:fd:b6:f8:ae:bc:ec:9b:bc:56:04:3c:6c:
                    ca:bf:6c:ee:e5:43:82:2f:2c:3c:df:80:d6:2f:2a:
                    3e:a1:61:51:ce:ac:f0:2f:d0:f0:eb:7c:9f:65:0c:
                    44:37:da:c7:89:c7:58:ec:9d:ad:48:7a:98:c5:9f:
                    07:62:c6:68:44:49:74:f6:0b:2f:93:e7:4b:6f:ec:
                    d3:ab:e8:b1:bd:c8:53:11:59:65:dd:c8:3a:d2:65:
                    91:41:ea:3d:16:02:ce:47:f9:95:84:a7:c9:73:5c:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:3E:56:51:81:3B:32:F6:D9:30:26:D8:87:73:CE:8B:DD:6E:8E:0F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/1/233E5651813B32F6D93026D88773CE8BDD6E8E0F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.228.0/22
                IPv6:
                  2804:3914::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266523

    Signature Algorithm: sha256WithRSAEncryption
         8e:77:e0:03:19:0d:85:af:68:9c:70:26:ed:96:eb:0d:29:3d:
         67:c0:4e:b2:ec:6a:1c:42:63:7f:7a:cf:57:84:12:83:16:b8:
         97:87:97:19:fd:28:23:bc:28:52:c0:07:3a:d3:d1:d1:6e:bd:
         4a:48:c7:2c:c9:d6:50:38:81:19:e5:91:00:f5:30:90:cf:91:
         06:10:4a:41:bf:f8:fd:d9:6f:4c:47:6d:55:3b:0b:32:49:a8:
         8f:98:3b:9e:e8:f5:6e:1b:39:fc:04:95:e4:72:6f:e6:83:e1:
         27:fc:20:19:23:c9:5a:f6:32:f2:c8:3a:13:a4:80:54:fc:51:
         24:7b:31:ec:a5:fe:85:af:7b:80:4a:86:44:39:0d:66:9f:00:
         2b:6f:ac:3c:da:6a:60:d9:cd:20:29:78:38:d8:08:3b:15:11:
         77:01:1b:42:a7:b5:16:d0:b7:26:91:ed:4b:90:36:e0:1a:16:
         03:1b:76:f7:9e:5e:09:3a:21:0a:3c:ce:0f:4e:70:d9:b7:72:
         2e:46:bd:44:bb:78:27:1a:a2:6f:74:8c:ee:53:ef:3a:df:2f:
         32:ac:a2:d7:20:eb:85:e8:37:d7:a2:9c:f8:e0:ea:dc:04:c7:
         a1:e7:a8:27:1a:25:54:02:0a:68:be:4c:83:64:55:57:94:3a:
         1a:f4:98:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----