Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.cer
File:                     2DDB5A9ECD2CC0565753C38F6A772170A3461002.cer (raw, json)
Hash identifier:          6tiJaHe5TPMl4a/OQARR/7SWw5q3JJBsRuiFKjieKh8=
Subject key identifier:   2D:DB:5A:9E:CD:2C:C0:56:57:53:C3:8F:6A:77:21:70:A3:46:10:02
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18C57990470CD25023C0D2EA67F001A1A0F0AE63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 14:01:27 +0000
Certificate not after:    Fri 07 Mar 2025 14:06:27 +0000
Subordinate resources:    AS: 266293
                          IP: 170.79.132.0/22
                          IP: 2804:358c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c5:79:90:47:0c:d2:50:23:c0:d2:ea:67:f0:01:a1:a0:f0:ae:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 14:01:27 2024 GMT
            Not After : Mar  7 14:06:27 2025 GMT
        Subject: CN=2DDB5A9ECD2CC0565753C38F6A772170A3461002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:fe:7d:ae:71:08:d9:27:9a:27:6d:3d:42:
                    8b:58:6b:9a:66:89:78:be:f5:39:c0:eb:0a:8c:aa:
                    3d:99:ac:c9:ce:45:a5:37:ed:4f:9e:2d:86:96:93:
                    87:14:47:d6:56:36:ca:b5:75:ae:dc:e5:46:44:cf:
                    d7:6f:2b:52:51:e4:8b:88:6e:0d:6e:45:c7:1b:62:
                    00:a1:43:57:59:13:4f:5f:cc:f0:9d:cf:6e:52:0c:
                    c8:6b:0b:37:74:14:95:6b:65:4b:6f:4e:d9:c6:f1:
                    90:ac:19:eb:0a:ee:3f:c8:5b:d8:aa:77:8a:2c:61:
                    3a:d5:d2:17:35:31:aa:e9:84:e7:34:b3:5c:ef:ce:
                    b3:93:41:74:09:a7:84:f4:74:2e:0d:5c:49:21:0a:
                    68:63:fa:81:14:64:c1:cf:df:50:c8:0b:89:d2:b2:
                    5d:cc:46:e5:d2:2e:55:84:da:b2:4c:a8:85:51:fa:
                    cd:68:6d:c7:e4:24:7e:88:b1:a1:60:9a:23:e9:12:
                    3d:31:1f:25:db:f1:ef:df:3e:65:ed:3c:7e:c1:c9:
                    45:be:b5:d3:6e:7f:2d:51:78:d2:a2:d7:8e:50:7a:
                    f7:e2:21:f6:21:9d:d2:e4:d1:5e:6b:fb:4a:1c:9e:
                    35:e9:72:33:3e:7c:52:26:73:1a:b4:49:5b:ba:5a:
                    69:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:DB:5A:9E:CD:2C:C0:56:57:53:C3:8F:6A:77:21:70:A3:46:10:02
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.132.0/22
                IPv6:
                  2804:358c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266293

    Signature Algorithm: sha256WithRSAEncryption
         7f:8d:d1:17:d0:70:33:d0:5e:78:02:15:6d:7a:6a:77:bf:d2:
         e8:88:17:c9:56:0e:fa:9c:7c:91:b1:1d:3f:3b:e6:9d:cf:c5:
         28:1a:e4:21:b9:87:d4:30:c8:bf:3c:cd:97:e8:f6:5f:71:8a:
         c1:01:e7:21:3d:dd:b4:f9:43:e4:70:44:d9:5f:4b:41:ef:9d:
         6b:a8:a4:3d:15:1e:a8:53:4e:d4:da:dc:ef:18:75:98:28:67:
         28:9d:b4:d6:33:81:ff:dc:3e:52:15:eb:60:50:eb:bf:5b:b2:
         18:19:0d:2a:92:4c:5a:9b:fc:32:d2:87:9d:d1:0e:90:58:dc:
         3c:35:5e:80:88:c8:04:ab:66:10:5e:1d:30:9f:6d:57:f6:aa:
         ef:84:37:ae:e5:79:8d:89:34:10:d8:4b:30:cf:c2:1a:ca:52:
         dc:27:eb:c7:65:aa:49:51:91:de:9d:21:91:8e:33:4d:56:bc:
         9d:88:47:67:0d:99:05:73:2d:71:94:8f:5b:a1:ad:8d:5a:9c:
         87:0b:81:96:18:f0:85:8b:6a:27:72:c4:18:cd:1b:3f:09:fb:
         1d:ee:21:f3:72:1f:d9:53:19:48:ba:b8:08:4c:04:f9:35:dd:
         36:9b:13:db:b6:f8:64:37:00:bf:2c:d8:6a:49:01:88:1c:7e:
         a4:f9:34:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----