Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/26D59D5685AC16962B71816B80BFDD1056E563B9.cer
File:                     26D59D5685AC16962B71816B80BFDD1056E563B9.cer (raw, json)
Hash identifier:          /5vw2P+rcTnlCs1AUpV8VG4wbQZJc7jUYpuV+igipSU=
Subject key identifier:   26:D5:9D:56:85:AC:16:96:2B:71:81:6B:80:BF:DD:10:56:E5:63:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B77C857228EC27AE7F5067826EE4A8265B0E45F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/0/26D59D5685AC16962B71816B80BFDD1056E563B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Oct 2023 05:18:55 +0000
Certificate not after:    Wed 09 Oct 2024 05:23:55 +0000
Subordinate resources:    AS: 268284
                          IP: 45.237.160.0/22
                          IP: 2804:4ed0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:77:c8:57:22:8e:c2:7a:e7:f5:06:78:26:ee:4a:82:65:b0:e4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 11 05:18:55 2023 GMT
            Not After : Oct  9 05:23:55 2024 GMT
        Subject: CN=26D59D5685AC16962B71816B80BFDD1056E563B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:35:ee:9d:a8:c5:53:18:1d:83:a4:28:76:
                    5b:ba:07:fe:55:71:f8:fe:73:82:e5:b5:57:37:ea:
                    6d:a0:08:73:b2:75:ec:de:9a:d8:23:8f:ae:17:8d:
                    4d:81:af:cd:4a:cf:7b:67:75:f6:d5:67:56:ef:aa:
                    b8:68:e5:ac:4f:c5:96:0e:58:b6:b8:57:86:87:03:
                    69:bc:ed:ea:c5:1d:38:db:2f:8e:e4:e1:58:a0:d2:
                    fe:b7:99:cd:77:56:48:bd:b3:c2:8f:6a:16:e6:f0:
                    61:c6:97:ab:cb:48:2d:be:f7:f6:b8:21:70:f8:3d:
                    4c:dc:e1:7d:7d:ef:14:e6:7e:f8:9f:ff:52:56:06:
                    cd:6b:28:f6:b6:14:db:d9:e0:d1:fe:1d:5e:ba:81:
                    3e:9c:9c:2f:47:a7:32:ec:35:50:af:41:eb:4c:f2:
                    db:b8:cb:fa:d8:c0:7d:fb:36:07:46:3a:ae:35:1c:
                    56:56:01:46:cf:d7:65:0b:ac:cf:67:b7:f6:ae:68:
                    e1:b2:29:01:e0:73:d4:4a:94:53:d4:1e:38:ec:b8:
                    ed:5a:c8:29:3e:29:2c:ba:1b:5a:60:9f:59:35:5c:
                    1c:62:20:77:56:27:a6:5f:bc:25:e0:7c:26:88:9d:
                    61:66:0d:76:78:6c:ed:27:dd:e4:87:6e:d3:7f:a2:
                    fe:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:D5:9D:56:85:AC:16:96:2B:71:81:6B:80:BF:DD:10:56:E5:63:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/0/26D59D5685AC16962B71816B80BFDD1056E563B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.160.0/22
                IPv6:
                  2804:4ed0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268284

    Signature Algorithm: sha256WithRSAEncryption
         ab:d4:66:b8:4f:2e:39:56:12:1f:76:a4:c9:65:17:d6:89:73:
         31:54:68:7e:cc:7d:9b:f8:51:01:c1:20:d0:30:1c:d1:b4:71:
         24:ea:80:6a:13:c3:86:52:62:8d:c4:4e:e2:44:67:a4:ff:f2:
         77:0c:4d:1e:04:56:e9:e4:0a:f2:32:58:7c:6a:2d:f6:0d:b8:
         33:80:bb:54:32:c6:8d:30:bd:cc:c5:6b:8f:83:e0:ad:e4:72:
         c8:b0:5d:2d:2e:88:3c:d9:94:72:01:df:0f:ca:78:09:5d:b2:
         43:51:e5:8c:3f:57:db:03:bc:b3:6a:96:25:98:03:d1:33:59:
         19:42:2b:7f:45:08:f2:1e:ed:13:20:78:1d:15:04:72:18:9b:
         86:26:30:eb:87:16:89:04:24:07:5d:df:a6:e9:ab:8d:72:d6:
         5b:23:03:92:2a:eb:ac:0e:86:a3:55:1f:78:bb:4b:3e:e8:e5:
         e2:a6:3a:18:49:36:fa:c5:71:14:da:72:4a:9d:02:20:78:d4:
         50:7c:d5:bf:dd:d7:16:2c:3d:25:61:34:9b:0b:0e:ea:1c:22:
         4a:f9:4f:e7:40:47:4f:38:75:a1:57:9a:75:1a:4d:39:25:d9:
         a6:62:0b:b1:d1:74:6f:4e:8a:12:ad:97:f3:a4:ee:d0:04:94:
         99:6c:73:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----