Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/26417C98B87CD9F7F563B48DB881934EE58083F4.cer
File:                     26417C98B87CD9F7F563B48DB881934EE58083F4.cer (raw, json)
Hash identifier:          NdQxe76qwS9kFHl78SwZnlptqC+szQ7KT2Ly2fffUHk=
Subject key identifier:   26:41:7C:98:B8:7C:D9:F7:F5:63:B4:8D:B8:81:93:4E:E5:80:83:F4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       79E0B519E6659087E3A6D440B4275A62B182FF17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/26417C98B87CD9F7F563B48DB881934EE58083F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Feb 2024 12:35:24 +0000
Certificate not after:    Sat 08 Feb 2025 12:40:24 +0000
Subordinate resources:    AS: 267347
                          IP: 45.233.180.0/22
                          IP: 2804:4c10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e0:b5:19:e6:65:90:87:e3:a6:d4:40:b4:27:5a:62:b1:82:ff:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 10 12:35:24 2024 GMT
            Not After : Feb  8 12:40:24 2025 GMT
        Subject: CN=26417C98B87CD9F7F563B48DB881934EE58083F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:68:c9:05:a8:0c:48:c4:a7:9c:b7:d3:75:
                    c3:20:4e:59:c8:f3:9a:96:3f:fd:b3:72:34:2e:e9:
                    0f:22:29:a2:c7:96:66:bb:61:36:4f:83:19:3c:90:
                    90:33:76:2a:cb:af:ce:eb:3b:a7:18:7c:d5:be:40:
                    fc:96:d6:f6:75:4b:08:09:f6:fd:b5:ff:84:2e:64:
                    a0:7e:03:cd:b9:be:b4:c9:83:41:4b:90:1c:f7:c1:
                    71:1e:b4:35:5c:4f:61:4b:09:74:50:1a:b0:a0:31:
                    0a:e9:fb:4c:b7:b3:c2:0d:e0:02:f4:cc:ef:a1:2c:
                    fe:73:b9:a2:3e:c1:19:ee:a0:f7:21:7f:71:d5:13:
                    b4:5e:00:c4:60:de:c7:c1:9b:b8:08:de:3d:81:6d:
                    ab:73:98:c4:01:82:3d:56:62:07:52:23:52:15:3d:
                    f1:dc:a0:67:8e:6d:a4:e3:f7:4f:ab:8b:54:45:fb:
                    3b:f5:c3:d6:52:c4:8f:83:19:bf:05:14:b6:74:22:
                    00:15:a1:3c:f3:48:78:b8:0e:d5:af:d5:e8:bf:a7:
                    80:88:de:d8:56:d3:ca:e5:96:59:8d:5b:e0:d7:af:
                    a3:78:65:62:05:ca:5a:7b:a1:45:e2:12:2f:8a:1b:
                    a8:5b:f5:77:a8:1a:5b:8f:40:3d:df:16:cb:25:29:
                    4d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:41:7C:98:B8:7C:D9:F7:F5:63:B4:8D:B8:81:93:4E:E5:80:83:F4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/26417C98B87CD9F7F563B48DB881934EE58083F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.180.0/22
                IPv6:
                  2804:4c10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267347

    Signature Algorithm: sha256WithRSAEncryption
         51:c9:da:ad:8f:76:60:02:a8:83:14:65:5f:1f:5c:e7:1b:96:
         a8:38:26:96:e6:68:c2:e4:49:a8:b6:96:18:13:2d:14:95:8f:
         7a:19:24:61:60:49:66:c7:d4:94:6e:c6:cf:60:79:b0:3d:d8:
         51:94:c7:e8:56:f8:45:4b:c7:6a:dd:63:6c:2e:21:80:2a:e9:
         cf:69:bf:83:49:e8:55:d0:c5:7c:2a:bf:56:cc:11:51:b6:71:
         7b:8e:53:25:c8:0c:cc:24:b0:4a:e3:02:70:3d:8f:65:da:f7:
         e1:be:53:0a:83:cb:cc:53:f6:1d:c3:47:9c:20:6f:db:c3:f5:
         d5:79:7a:3b:a3:49:aa:8b:fe:73:69:a5:73:bc:7a:e6:2a:f8:
         c1:58:2f:c1:f4:67:a3:92:c0:0c:b4:63:ad:b6:ce:5c:a5:c1:
         7e:d3:ed:97:df:03:df:9c:bd:02:b0:fa:43:a8:c7:18:ff:1f:
         08:59:06:dc:2a:6d:69:4a:c8:ed:7b:aa:a6:fb:d5:60:53:c2:
         bb:13:8c:74:fc:5c:1e:73:f4:8a:d9:79:6d:0c:e8:7e:12:8e:
         0c:f0:18:99:97:3a:8d:a5:e7:f2:78:03:26:9f:05:dd:a7:c5:
         fd:fe:0c:5a:c3:ee:8b:3d:93:44:cb:72:0c:86:2c:40:c7:02:
         9c:43:6f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----