Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/31B3197FDF000F3E6D82BE06C1F8ADCA033CCA2C.cer
File:                     31B3197FDF000F3E6D82BE06C1F8ADCA033CCA2C.cer (raw, json)
Hash identifier:          nAYBDFnfi/XOz3Wu3yp6JZgMBmbtMNMR85/Ch/8xx9E=
Subject key identifier:   31:B3:19:7F:DF:00:0F:3E:6D:82:BE:06:C1:F8:AD:CA:03:3C:CA:2C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       62AF122E7C12B8009AE84BEB04244E0A7E2BCA7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/31B3197FDF000F3E6D82BE06C1F8ADCA033CCA2C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Mar 2024 14:33:34 +0000
Certificate not after:    Thu 27 Mar 2025 14:38:34 +0000
Subordinate resources:    AS: 270845
                          IP: 190.115.216.0/22
                          IP: 2804:724c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:af:12:2e:7c:12:b8:00:9a:e8:4b:eb:04:24:4e:0a:7e:2b:ca:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 14:33:34 2024 GMT
            Not After : Mar 27 14:38:34 2025 GMT
        Subject: CN=31B3197FDF000F3E6D82BE06C1F8ADCA033CCA2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:80:94:0a:cd:74:37:22:d9:b9:33:a7:e6:db:
                    ef:97:f0:1d:4b:10:2d:71:49:29:18:57:41:68:a8:
                    c0:d0:78:43:5a:6f:80:45:5d:5e:68:06:ba:6c:98:
                    95:47:23:55:1b:bb:5e:37:27:12:e1:be:cb:cf:7a:
                    16:1a:cc:06:87:e2:5b:07:16:86:c1:f8:bc:28:43:
                    dd:c8:d7:94:c0:87:40:8b:15:f3:54:f1:28:57:f1:
                    05:7b:69:b4:fc:62:e1:b2:99:98:fa:18:e5:5e:42:
                    82:3a:cf:e7:eb:bc:b8:f8:74:99:86:75:ea:19:fc:
                    20:74:2f:58:47:d0:96:16:cd:80:67:1c:88:0c:89:
                    74:33:c2:80:23:e8:e1:08:62:9c:1f:ae:9b:ee:e1:
                    8c:91:8d:1c:3c:2c:e1:96:e9:63:6d:5d:6c:d4:fe:
                    8e:e0:9a:db:bb:57:b7:b3:71:7c:b2:fc:ed:99:7c:
                    ba:cc:67:02:c4:f9:f6:5c:ce:f7:e7:09:22:8a:b3:
                    c1:87:b7:3e:c7:ca:35:ca:a0:fe:c9:d0:a6:7f:8e:
                    18:c3:38:82:87:20:dd:d2:74:0d:1c:ac:2a:c4:96:
                    19:c5:fb:ad:8c:8b:c5:ed:1c:26:90:20:84:59:e6:
                    f3:0d:f2:65:23:42:65:9f:fd:5d:8a:5a:8f:ac:e7:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:B3:19:7F:DF:00:0F:3E:6D:82:BE:06:C1:F8:AD:CA:03:3C:CA:2C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/31B3197FDF000F3E6D82BE06C1F8ADCA033CCA2C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.216.0/22
                IPv6:
                  2804:724c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270845

    Signature Algorithm: sha256WithRSAEncryption
         27:cf:07:a5:ca:29:76:b3:2d:c0:40:f7:84:ab:ba:e5:30:e6:
         bc:5b:ad:aa:ae:22:f3:38:05:63:1b:70:ec:76:1e:9e:85:3c:
         06:65:88:f6:f5:87:ca:f8:e9:3a:a1:eb:54:22:aa:f5:10:52:
         4a:2d:2e:50:ba:17:86:bb:59:65:55:d8:34:cd:3e:4f:69:9f:
         1c:19:ee:96:4a:80:5c:8d:36:17:01:c7:de:cb:e1:77:bd:54:
         96:02:f0:7f:79:c3:68:94:ed:f2:20:46:09:2d:43:e2:3f:43:
         34:d1:b6:a1:ee:ee:d7:3c:c6:a9:52:d2:b6:a5:76:2a:46:50:
         3d:8d:55:64:1c:03:a0:32:82:f6:10:7a:87:f2:6f:d0:d7:b6:
         fa:d8:35:57:72:a2:16:ce:26:72:b5:14:8a:1b:dc:c8:ae:47:
         86:4e:dd:4c:5f:fb:6d:70:1a:98:8d:a9:2f:0e:c4:b5:f1:99:
         d7:38:42:0a:eb:3a:1e:c6:1d:40:ad:22:54:e3:5e:f2:7b:0b:
         bb:7b:61:d6:b1:e2:80:83:93:e2:ba:25:8b:28:94:a4:fa:03:
         d8:2d:db:ea:a2:68:cf:f8:d6:55:0f:6e:a6:b5:78:b1:5b:10:
         e7:3c:c4:35:60:39:14:c2:37:3f:f8:a0:1f:5e:00:99:03:3f:
         35:81:ba:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----