Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2CE578A76B552A900AEBA274A7AC55C6D4398631.cer
File:                     2CE578A76B552A900AEBA274A7AC55C6D4398631.cer (raw, json)
Hash identifier:          BGoGE/2k6Zzt9Fd6tc0baYEoZ0V7xcSpTXOoarfaRnM=
Subject key identifier:   2C:E5:78:A7:6B:55:2A:90:0A:EB:A2:74:A7:AC:55:C6:D4:39:86:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       607F513389F1C220DC70226DDAB7AB7031070134
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/2CE578A76B552A900AEBA274A7AC55C6D4398631.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 16:00:24 +0000
Certificate not after:    Mon 03 Mar 2025 16:05:24 +0000
Subordinate resources:    AS: 266394
                          IP: 170.81.76.0/22
                          IP: 2804:372c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7f:51:33:89:f1:c2:20:dc:70:22:6d:da:b7:ab:70:31:07:01:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 16:00:24 2024 GMT
            Not After : Mar  3 16:05:24 2025 GMT
        Subject: CN=2CE578A76B552A900AEBA274A7AC55C6D4398631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:09:18:38:02:26:99:4a:ef:df:11:68:68:
                    ec:60:d9:76:19:fb:00:0c:ab:f0:f3:1d:3d:d9:cf:
                    de:6f:ed:da:3e:09:c9:bd:43:ac:04:c3:d4:aa:52:
                    1c:f2:15:6b:62:8d:ed:30:16:80:5a:39:59:b6:4f:
                    26:97:93:e7:0d:1f:f8:81:0e:1f:7e:4b:63:aa:33:
                    a4:11:5c:53:a1:b1:0d:1d:f4:01:4f:9d:da:d1:83:
                    ea:33:21:a1:f5:5d:39:11:d3:00:52:97:58:81:8e:
                    b1:a1:08:c2:f5:36:2a:00:41:8a:93:a6:35:0d:a5:
                    57:89:f4:19:c0:a3:e6:0c:ec:1c:78:33:a7:d4:f7:
                    c5:72:6f:84:b7:12:29:f0:a9:e5:c4:61:dd:50:b2:
                    90:21:f4:83:29:35:af:eb:0a:e9:3f:2b:3b:47:a4:
                    7c:3b:6a:a8:23:ca:59:ab:f1:cf:a2:0a:af:25:ac:
                    a4:38:d6:4c:aa:7c:37:93:1f:cb:99:fc:70:6c:cd:
                    bd:90:a7:92:81:07:04:b1:10:ef:83:04:f0:89:c5:
                    3c:22:b1:ce:0d:47:32:7f:db:ad:8b:89:2b:3c:7a:
                    f9:2d:47:f3:50:3b:01:60:94:d4:84:6e:d7:eb:13:
                    b9:f7:0b:f6:15:5c:8b:c5:91:25:ba:69:eb:f8:3e:
                    05:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:E5:78:A7:6B:55:2A:90:0A:EB:A2:74:A7:AC:55:C6:D4:39:86:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/2CE578A76B552A900AEBA274A7AC55C6D4398631.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.76.0/22
                IPv6:
                  2804:372c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266394

    Signature Algorithm: sha256WithRSAEncryption
         aa:a0:67:9a:55:72:3d:b2:a0:32:65:45:63:96:39:5f:69:a6:
         1d:99:f3:22:4a:79:ae:cc:2b:64:b4:67:d1:9a:52:f3:66:4e:
         7d:13:32:52:d0:15:26:11:15:9d:83:ee:d0:8e:88:1b:3f:29:
         10:e5:7b:4f:35:a9:36:57:a8:e1:b3:a5:71:2f:89:57:78:ba:
         dc:aa:c5:c0:bd:4c:48:06:2f:ec:56:7e:b6:fc:ed:cc:e8:51:
         7b:ea:d6:5a:61:45:05:f3:3e:46:20:15:1e:da:f0:63:ce:c1:
         49:ed:26:f8:44:46:1b:08:68:23:57:60:8f:87:46:25:97:64:
         93:6e:34:ff:e5:fc:79:55:7b:6b:84:3b:17:0c:99:f9:d8:2b:
         b9:f5:10:af:53:37:44:bf:03:43:da:50:61:c2:8c:23:c8:53:
         99:80:66:1c:32:09:e6:d9:fb:4f:93:1d:99:eb:6e:d6:ef:66:
         4f:46:c6:07:8f:6f:bd:65:96:d2:93:04:78:9a:c3:e5:1e:14:
         6d:2b:e3:ae:10:73:64:b1:42:e5:e8:5d:61:10:8c:c3:4a:ab:
         76:73:c4:a3:44:d9:22:b5:e1:48:38:5f:7b:19:50:c9:b8:54:
         58:b8:5e:58:67:c3:3b:a3:35:cf:75:25:8b:4c:e7:f9:7e:69:
         6b:29:e3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----