Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.cer
File:                     259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.cer (raw, json)
Hash identifier:          BbZYvB9qTV++/MHy5G8qMFPIvOoJTGB45rwtfjYnSBU=
Subject key identifier:   25:9B:E2:B8:79:64:0D:2A:44:C3:C8:F6:28:6B:05:A9:5C:DD:9E:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10945261A40ACAA97E55FCE2AECDE87AD70CFA66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/1/259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 14:20:16 +0000
Certificate not after:    Fri 04 Apr 2025 14:25:16 +0000
Subordinate resources:    AS: 268927
                          IP: 45.176.28.0/22
                          IP: 2804:5cbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:94:52:61:a4:0a:ca:a9:7e:55:fc:e2:ae:cd:e8:7a:d7:0c:fa:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  5 14:20:16 2024 GMT
            Not After : Apr  4 14:25:16 2025 GMT
        Subject: CN=259BE2B879640D2A44C3C8F6286B05A95CDD9EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:85:64:1c:5f:b0:2f:65:4b:84:3a:b0:82:98:
                    d9:c7:09:ae:8a:66:92:c9:52:92:39:2e:6a:5f:7f:
                    ee:74:06:f6:ff:85:36:37:1b:b4:79:02:d9:32:95:
                    d9:b7:67:26:a4:f6:3f:63:f8:88:de:5e:29:4d:fd:
                    90:04:a0:c3:7c:b4:42:ec:01:97:98:b0:26:e3:c1:
                    c8:9a:c7:2b:11:ee:98:7b:16:c9:36:66:ae:4b:68:
                    35:27:5f:03:47:9b:28:fa:b8:12:32:8d:20:dc:22:
                    97:03:c1:49:54:c4:e9:ed:c2:bf:11:bf:36:f0:50:
                    d2:df:d3:fa:f7:b8:31:2e:c0:18:a1:ce:79:58:44:
                    f0:34:dc:27:28:f1:c4:45:02:36:95:f5:81:02:2e:
                    31:f8:fd:80:84:7e:42:2a:32:38:63:d1:d9:8e:97:
                    a5:41:ac:15:ee:a9:79:3b:f5:7f:b4:9a:69:1a:81:
                    d6:a3:ab:c3:c1:23:78:26:e6:75:10:87:4c:67:25:
                    a7:27:9f:51:21:f6:6f:55:72:f0:a8:0e:ac:af:60:
                    3a:89:2b:44:e6:69:42:f6:60:95:7a:52:de:13:0d:
                    c5:22:95:4e:73:3f:59:40:50:5d:a3:84:64:79:64:
                    e6:b7:a5:0a:4a:0a:d1:f8:56:75:b3:6c:c2:67:c7:
                    52:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:9B:E2:B8:79:64:0D:2A:44:C3:C8:F6:28:6B:05:A9:5C:DD:9E:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/1/259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.28.0/22
                IPv6:
                  2804:5cbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268927

    Signature Algorithm: sha256WithRSAEncryption
         79:b1:e4:2a:52:65:c6:03:35:e5:11:38:dd:12:16:0e:2e:39:
         79:c2:d3:43:cd:e5:a2:81:be:87:e5:13:8b:b5:e9:9e:b8:68:
         7f:d8:1b:10:22:3c:18:12:b3:93:d1:ba:94:80:84:f0:79:4f:
         e5:17:7e:7f:69:30:07:62:c3:bc:dd:e9:c0:26:b8:5a:17:d6:
         8f:81:75:c5:39:5a:de:33:31:38:f1:49:16:1c:e2:b9:a7:a8:
         68:ed:e8:c4:e6:50:60:e7:32:a4:9e:99:51:e9:00:bd:cc:5f:
         db:98:9c:8d:4f:28:d2:a6:3c:cd:1c:de:af:ed:34:ff:4a:53:
         cf:8f:8a:9e:37:09:4a:61:b3:72:b0:08:92:ac:20:c3:9f:5a:
         db:b8:33:a1:0e:f8:13:8b:c4:ee:6d:c7:62:92:16:71:6d:e5:
         c7:6f:dd:a5:e1:71:32:86:05:13:2b:8e:83:e3:95:29:d2:cc:
         ef:e0:37:0e:b5:16:b4:ee:69:0b:78:12:1d:fd:b4:14:8e:fb:
         9a:c7:28:94:3c:31:99:27:7b:ce:15:64:d1:18:8f:44:4c:e0:
         7a:b3:2d:58:40:53:0c:e4:fd:3b:d2:8f:32:02:44:c4:15:a0:
         67:ae:f2:3e:63:62:4a:db:a1:6b:84:5c:6a:94:56:90:26:10:
         ef:31:a0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----