Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2B2415E1247C183B58ED4B0E1E2FC58317A8936C.cer
File:                     2B2415E1247C183B58ED4B0E1E2FC58317A8936C.cer (raw, json)
Hash identifier:          vVRBcmlJx50DVpP2df6KvXQOl1FQ+2bbuDVBzKsBh1o=
Subject key identifier:   2B:24:15:E1:24:7C:18:3B:58:ED:4B:0E:1E:2F:C5:83:17:A8:93:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3732566B4C8F5C02B32E2C12D982B6BCC07865F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/2B2415E1247C183B58ED4B0E1E2FC58317A8936C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Jan 2024 21:11:02 +0000
Certificate not after:    Wed 01 Jan 2025 21:16:02 +0000
Subordinate resources:    AS: 264561
                          IP: 138.0.252.0/22
                          IP: 2804:218c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:32:56:6b:4c:8f:5c:02:b3:2e:2c:12:d9:82:b6:bc:c0:78:65:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  3 21:11:02 2024 GMT
            Not After : Jan  1 21:16:02 2025 GMT
        Subject: CN=2B2415E1247C183B58ED4B0E1E2FC58317A8936C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cd:f9:52:75:f2:5a:5a:43:93:86:8b:02:8f:
                    4c:ca:6a:e6:44:c1:bf:e7:8f:94:a9:27:55:bb:41:
                    36:db:94:14:a1:e2:f2:18:7e:34:87:9a:87:08:97:
                    0f:e2:3f:a7:ec:a8:9f:8a:b4:e5:fe:c5:bb:d3:a1:
                    10:9d:11:a9:5d:b2:d7:1f:42:6e:2b:c6:77:5b:d1:
                    85:d5:6b:5e:de:5a:9d:db:4e:0d:ac:f2:7b:8f:92:
                    06:6b:78:02:47:80:46:94:69:50:71:0a:16:4f:b4:
                    64:82:9c:00:b3:79:17:a5:20:2a:08:b0:ca:90:f3:
                    4a:92:1b:b0:69:b9:0e:2f:b8:48:c8:02:bd:ae:34:
                    fb:15:aa:3a:c0:56:48:35:5a:48:af:01:69:68:e2:
                    b2:31:9d:26:28:e0:d0:49:fa:a6:dc:d6:9e:ca:b5:
                    42:3f:e3:b5:79:e9:a2:79:15:8c:7c:95:e4:c2:ee:
                    7f:7b:b6:5f:81:90:c9:22:5d:fc:94:3e:eb:bd:e1:
                    ac:6c:24:23:ad:4e:00:c8:c1:bf:2a:50:46:81:4a:
                    ad:6c:6d:1e:c4:8f:fb:cc:ac:50:64:98:fb:ef:c3:
                    af:54:1f:6b:59:d3:b6:03:a0:eb:b9:29:ba:40:5c:
                    1e:c6:b3:81:61:23:d9:34:69:96:61:d2:12:dc:69:
                    49:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:24:15:E1:24:7C:18:3B:58:ED:4B:0E:1E:2F:C5:83:17:A8:93:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/2B2415E1247C183B58ED4B0E1E2FC58317A8936C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.252.0/22
                IPv6:
                  2804:218c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264561

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:1d:e3:16:ff:db:95:2e:8e:28:6b:16:93:0e:7e:ad:f8:
         34:92:33:79:75:fc:0a:62:ec:f7:fd:d4:23:d9:58:e6:3f:0d:
         6d:89:c3:db:c1:4c:30:e6:3c:cb:7c:97:60:e5:a5:8f:89:92:
         84:05:59:16:24:66:76:64:9d:07:3e:39:ad:32:02:69:47:50:
         d9:35:6b:b7:62:23:db:8d:66:32:04:a8:99:1d:75:92:f3:76:
         87:72:cd:dd:1b:a8:ac:90:b6:dc:59:d9:39:9f:b9:e5:9c:99:
         42:96:1d:b1:d3:d2:79:5c:7d:8d:4c:a8:19:ab:0a:63:59:e7:
         f5:b6:ba:76:3a:a9:cd:32:e3:51:83:dd:8b:85:84:0a:04:4f:
         13:5d:37:79:ce:34:4c:9d:b1:24:9e:db:ec:d0:38:68:8a:37:
         b6:95:e7:2d:6c:90:c6:14:4c:fc:00:c3:cd:90:c1:fd:4b:58:
         a2:03:4f:ec:39:14:ea:18:7e:5b:f0:a9:f6:46:7a:8a:2d:13:
         02:9c:88:4e:2c:64:0d:81:50:7f:0a:4c:1a:2e:d0:85:4d:a7:
         cf:b2:07:5b:c0:1f:5f:2b:5b:75:36:46:6e:16:a4:f4:6f:5a:
         c1:81:08:39:76:1e:a4:60:e0:d3:0d:8f:03:2d:a8:7c:61:fb:
         fb:78:3a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----