Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer
File:                     2F50A43881343E0EF5A462969662F8F38F32ECB8.cer (raw, json)
Hash identifier:          PkhItahVh4URfHoNbzIN2h7H98t7+3PTyahog7bv2Tg=
Subject key identifier:   2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5342072105CA3C0C71B46D2D791C4AE2FE1B9C66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Mar 2024 17:07:09 +0000
Certificate not after:    Thu 20 Mar 2025 17:12:09 +0000
Subordinate resources:    AS: 264130
                          IP: 138.97.60.0/22
                          IP: 2804:22e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:42:07:21:05:ca:3c:0c:71:b4:6d:2d:79:1c:4a:e2:fe:1b:9c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 17:07:09 2024 GMT
            Not After : Mar 20 17:12:09 2025 GMT
        Subject: CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:3f:53:dd:6b:04:1c:5e:27:c4:c8:57:ac:
                    5a:9a:89:56:e5:98:0e:ed:3a:76:a2:1b:cb:59:33:
                    40:a0:ac:ac:e6:31:f1:50:82:a9:c2:d0:dc:1a:25:
                    1f:ba:00:1b:a5:c8:7e:77:f3:c0:64:3b:cc:8f:1e:
                    6b:02:70:1e:6d:79:fc:6d:6e:f6:17:23:ae:a7:14:
                    57:52:c7:80:3b:fd:33:8b:24:f1:86:ff:b6:af:72:
                    17:2c:eb:5b:15:d7:49:14:c9:2e:a7:14:24:56:11:
                    e1:06:56:8c:eb:7e:dc:d9:fe:80:49:2a:2a:30:21:
                    10:91:a6:77:0d:6f:75:f4:4a:4f:95:a1:88:1f:46:
                    d1:0b:31:e8:c7:cb:c6:9e:c9:e8:dd:b4:dd:9d:53:
                    90:ee:f2:3a:c2:84:bc:95:22:f6:5a:39:ff:bb:42:
                    01:0e:27:20:db:bc:61:2a:d4:f8:bf:8c:a2:26:e2:
                    3f:a6:c9:50:44:8a:f9:33:81:15:99:46:5f:65:98:
                    f9:f6:41:d2:f6:c7:dd:84:12:3c:aa:c6:fb:fa:84:
                    8a:42:0e:05:cb:ba:33:ae:80:0a:02:bd:a8:5d:bd:
                    33:2c:3d:60:98:40:52:5a:95:ff:1f:e2:2e:07:c5:
                    c1:06:e0:68:a2:6a:db:11:07:30:0c:bc:a4:dc:1f:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.60.0/22
                IPv6:
                  2804:22e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264130

    Signature Algorithm: sha256WithRSAEncryption
         a3:2b:8a:81:fd:d6:88:d6:6e:b9:9a:f9:52:df:bc:b6:a2:e0:
         17:b8:0e:c8:6d:74:00:8e:45:ea:74:c5:f2:ab:2f:82:fb:33:
         c2:c2:39:f9:2c:c8:a2:b1:62:24:66:34:44:38:da:8d:bf:39:
         29:66:2a:14:43:0b:5c:f1:a6:0a:df:7d:a0:85:bc:d7:c8:73:
         4b:17:98:bb:36:88:d2:01:28:21:5b:98:ef:3d:44:0b:f1:8b:
         10:f9:30:5e:9e:06:85:1e:61:7f:28:7a:05:68:83:0b:dc:6d:
         9a:24:e3:08:1d:f5:aa:f0:44:f7:3b:e7:75:4d:b3:cb:fb:48:
         9d:a2:81:22:5f:1e:b2:30:78:d9:68:dd:66:b2:35:07:81:7d:
         11:25:dc:b3:aa:10:eb:1d:0c:54:e5:40:70:95:56:7a:e1:57:
         e3:ef:95:2e:2c:fa:d3:19:df:b6:f6:61:e0:08:c3:25:3b:88:
         b8:34:10:ba:4b:f7:0d:0a:f8:ef:ca:7f:6a:74:01:61:1b:ab:
         fa:94:90:4c:e1:54:0b:07:63:e0:f2:8c:ae:80:d8:b3:ff:c8:
         9d:58:3d:71:d5:ef:ee:7c:5e:af:08:2c:ee:8f:c2:02:3a:af:
         9b:f9:ce:0a:43:22:a1:e8:b3:29:ed:75:54:d4:7c:1c:e2:ee:
         a0:ce:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----