Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A8673F5BEDEE8D0805AF061319C022BF6F0A90C.cer
File:                     2A8673F5BEDEE8D0805AF061319C022BF6F0A90C.cer (raw, json)
Hash identifier:          Aq6Qth48oJafEdsMUATUTecSrvHIfe8ATmEdOej21ew=
Subject key identifier:   2A:86:73:F5:BE:DE:E8:D0:80:5A:F0:61:31:9C:02:2B:F6:F0:A9:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1AE8EADA00B71D877314FBA6A438882545E03799
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/0/2A8673F5BEDEE8D0805AF061319C022BF6F0A90C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Feb 2024 02:56:12 +0000
Certificate not after:    Fri 21 Feb 2025 03:01:12 +0000
Subordinate resources:    AS: 266449
                          IP: 170.82.236.0/22
                          IP: 2804:3800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e8:ea:da:00:b7:1d:87:73:14:fb:a6:a4:38:88:25:45:e0:37:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 02:56:12 2024 GMT
            Not After : Feb 21 03:01:12 2025 GMT
        Subject: CN=2A8673F5BEDEE8D0805AF061319C022BF6F0A90C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:63:63:58:61:2c:45:6e:33:b3:6e:aa:53:
                    79:f7:fb:5f:81:08:95:f1:3d:10:7b:47:53:97:5c:
                    b7:e1:ff:e3:c3:a3:af:4f:69:5d:93:55:8c:8f:fb:
                    cd:cd:fb:5c:e7:e8:3d:2b:66:db:b8:6d:2c:26:9f:
                    f7:2d:67:cf:aa:ab:1e:5c:e3:6b:66:3d:58:17:54:
                    ff:90:bc:5d:ce:cb:7a:0f:78:eb:8f:22:35:ea:1b:
                    81:fb:e5:d5:90:6f:dd:ca:47:d5:8a:7d:28:6b:e7:
                    b7:66:32:ac:ef:af:49:cb:81:de:26:ae:fe:5c:2d:
                    ee:60:46:4e:1b:06:50:77:6c:61:ff:88:b1:5d:82:
                    41:62:42:04:fc:02:a5:ed:4d:61:43:35:4a:da:6d:
                    23:c2:99:e4:2c:c3:56:58:ac:cd:25:c2:22:b9:5e:
                    4c:b6:47:c0:a9:d9:9c:1a:be:60:8b:a2:9b:69:7c:
                    2d:8a:ce:3e:e3:e6:5b:93:ca:f4:6f:b7:49:8f:1b:
                    9d:ec:3d:27:4e:3c:b3:3c:d6:fd:94:67:6c:8d:e3:
                    f7:35:f6:89:bb:70:16:8f:ab:6f:6d:9a:f6:5d:b9:
                    8c:dd:e7:41:1f:a1:3f:af:bd:e2:fb:63:5b:92:b7:
                    5f:62:4c:20:4b:c0:43:00:f9:31:74:b1:63:55:0c:
                    12:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:86:73:F5:BE:DE:E8:D0:80:5A:F0:61:31:9C:02:2B:F6:F0:A9:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/0/2A8673F5BEDEE8D0805AF061319C022BF6F0A90C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.236.0/22
                IPv6:
                  2804:3800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266449

    Signature Algorithm: sha256WithRSAEncryption
         8e:90:c2:e7:a2:70:7a:36:5c:a4:d8:86:77:02:3e:06:ac:25:
         44:8c:d9:c4:16:77:c2:94:08:71:49:cf:d9:ed:4c:97:8e:2b:
         34:99:39:7b:a0:f9:76:cf:6b:78:e6:6b:af:c9:69:53:c5:11:
         4b:e0:f0:9c:ed:cb:54:88:ba:ed:fe:ab:10:a0:ce:92:62:92:
         aa:3e:5f:70:44:81:3a:5a:06:f5:81:42:01:c8:e4:9f:45:31:
         4a:23:5a:81:a0:ae:dc:aa:4e:5c:e5:8f:ce:71:0f:02:a6:47:
         2b:bc:ca:99:cf:bf:43:05:f7:63:f6:a3:d3:fe:bc:30:c3:ef:
         91:01:7e:d7:51:ea:0e:b0:81:02:2b:36:ad:5e:44:aa:dc:59:
         8d:30:81:b4:3a:93:92:81:d2:5a:95:fd:42:c6:d1:c7:f0:e7:
         2f:df:08:49:8f:7c:0f:75:8a:ba:ee:80:e1:b1:19:28:17:05:
         57:2a:bf:e4:df:62:e9:37:9d:72:14:1f:7d:9d:61:87:a8:01:
         66:8a:a1:65:45:b4:27:ef:02:5e:34:6f:21:06:33:33:a6:72:
         90:a9:ab:5e:3e:90:3d:49:f9:e9:3d:25:3c:94:ed:32:15:5c:
         f4:84:c9:c9:bc:79:84:f3:f6:7f:f1:88:35:36:69:a8:68:0c:
         c1:5e:29:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----