Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/30EBCD61122B46310F303B796BDE8F050684357D.cer
File:                     30EBCD61122B46310F303B796BDE8F050684357D.cer (raw, json)
Hash identifier:          ay4WD59pBW6Z/gr3Yz7P+GDNGxpTco5xX4edXeuDBAU=
Subject key identifier:   30:EB:CD:61:12:2B:46:31:0F:30:3B:79:6B:DE:8F:05:06:84:35:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4BC16266F1E78292C0EEEDCF4AEEE1BE19723610
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/30EBCD61122B46310F303B796BDE8F050684357D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 17:23:13 +0000
Certificate not after:    Wed 02 Apr 2025 17:28:13 +0000
Subordinate resources:    AS: 270588
                          IP: 177.129.36.0/22
                          IP: 2804:6e50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c1:62:66:f1:e7:82:92:c0:ee:ed:cf:4a:ee:e1:be:19:72:36:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 17:23:13 2024 GMT
            Not After : Apr  2 17:28:13 2025 GMT
        Subject: CN=30EBCD61122B46310F303B796BDE8F050684357D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:ec:f0:ca:82:da:28:99:0a:c9:17:43:dc:
                    a9:69:10:47:54:63:e6:94:92:90:51:46:a1:e1:be:
                    cc:55:fa:fa:a7:36:f5:40:1b:5e:21:38:93:81:13:
                    61:45:a9:d8:25:71:68:83:75:e2:1e:9d:79:0a:75:
                    0f:96:db:e1:50:0f:36:2e:f8:8a:9c:cf:15:56:7d:
                    14:95:ab:4a:72:63:4a:bb:ea:3b:18:7b:ed:26:fd:
                    25:d6:d9:ac:86:e0:85:af:47:33:44:38:36:d3:3e:
                    83:fa:7f:f8:19:db:1b:bd:70:bc:d0:1d:2e:a6:65:
                    96:4d:89:e1:cf:3f:60:b4:95:08:74:af:7d:ea:f3:
                    5a:e7:81:be:d8:f9:f3:d8:dc:17:4a:ea:eb:f3:83:
                    24:e4:d9:a1:7c:50:4b:84:18:24:75:4f:89:0b:fe:
                    a0:5d:01:e5:b3:0b:25:ad:89:81:19:21:69:ff:03:
                    d9:75:4d:b3:08:0d:0d:9f:db:33:9b:42:5b:ec:db:
                    d0:b9:f6:a6:c2:2b:d8:23:54:92:85:5c:96:3a:27:
                    5c:db:14:64:fc:f8:19:e8:8a:95:83:94:81:90:27:
                    c5:18:98:fe:da:fe:9b:53:50:40:2f:59:4b:e4:4c:
                    35:49:43:fb:e5:17:10:0f:f3:40:12:96:5e:3e:42:
                    6f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:EB:CD:61:12:2B:46:31:0F:30:3B:79:6B:DE:8F:05:06:84:35:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/30EBCD61122B46310F303B796BDE8F050684357D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.36.0/22
                IPv6:
                  2804:6e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270588

    Signature Algorithm: sha256WithRSAEncryption
         79:80:a8:c4:09:2b:ed:e0:d3:2f:e5:b7:e6:2e:c5:6e:67:00:
         7c:1f:24:af:9b:65:c0:8f:00:ee:69:ee:25:a5:4e:39:5b:13:
         32:f3:5e:51:87:6b:03:5b:f2:00:43:40:34:14:2d:93:fc:a7:
         a3:7d:a6:f7:2b:3d:e4:9d:f5:b0:c4:ce:a2:d8:49:f7:57:dc:
         78:e4:c8:09:c9:2c:7d:45:c5:f7:23:bb:06:49:a8:06:22:93:
         7b:95:02:14:79:71:bf:1c:f7:95:b6:37:b4:85:76:1f:bd:cf:
         67:4b:17:60:46:1a:e0:d4:be:d2:24:83:48:2e:33:93:00:98:
         37:3c:b9:ff:3d:92:47:57:38:7c:80:79:c8:1c:fb:11:d9:f4:
         fd:8f:3c:7d:bd:fb:1a:ea:76:c9:6d:98:71:2c:ac:08:c4:af:
         b5:e0:7a:c9:31:85:a9:75:bf:83:87:e2:bb:da:68:42:dd:9a:
         48:63:15:d1:22:91:a6:7c:c4:4f:16:83:0a:d7:4b:04:56:ba:
         36:58:fc:d7:0b:e4:13:fb:cd:31:2c:0d:1c:7c:a6:64:11:f0:
         0d:cc:41:81:4b:62:27:a4:0e:8d:85:a3:a4:5c:2a:74:e1:77:
         5f:b4:ca:3c:5b:65:f6:59:b4:47:f4:22:a0:c0:9a:46:8f:de:
         6b:6e:ee:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----