Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/324BE2BBC4A567320A1FF9513B2B7BEAD96114C2.cer
File:                     324BE2BBC4A567320A1FF9513B2B7BEAD96114C2.cer (raw, json)
Hash identifier:          TDHM11FyHCf0wdRljXzY9kr3+xIY5pkcfpHCJPRtLT4=
Subject key identifier:   32:4B:E2:BB:C4:A5:67:32:0A:1F:F9:51:3B:2B:7B:EA:D9:61:14:C2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C01C3D3A0D97C1230C15AE29EF88E15EF618823
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/324BE2BBC4A567320A1FF9513B2B7BEAD96114C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Feb 2024 16:25:34 +0000
Certificate not after:    Tue 04 Feb 2025 16:30:34 +0000
Subordinate resources:    AS: 270541
                          IP: 177.124.152.0/22
                          IP: 2804:6d90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:01:c3:d3:a0:d9:7c:12:30:c1:5a:e2:9e:f8:8e:15:ef:61:88:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 16:25:34 2024 GMT
            Not After : Feb  4 16:30:34 2025 GMT
        Subject: CN=324BE2BBC4A567320A1FF9513B2B7BEAD96114C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:64:8d:01:12:21:97:7b:9f:04:ee:cb:33:ca:
                    00:a1:0c:9b:6f:60:e3:ca:c6:b8:3a:ce:69:06:77:
                    bf:98:46:02:b2:f8:d0:af:26:2d:a6:6f:87:af:43:
                    db:b0:6b:0e:57:08:9f:7d:39:61:49:0f:7c:e8:6e:
                    46:f7:eb:76:94:3f:aa:4f:1d:cf:4c:d5:b2:7f:8a:
                    de:1a:97:c2:77:5a:05:fc:d7:c3:a9:cb:8e:a6:78:
                    1f:22:cf:d9:f6:3c:ab:ba:69:2b:c0:41:37:fa:8d:
                    41:f1:ee:7a:5f:3a:e5:89:4b:92:3a:2c:9a:ce:2a:
                    5d:61:aa:d7:5d:8f:23:e9:1e:94:4e:d7:87:5a:07:
                    5d:26:a4:14:d6:55:ae:af:49:36:37:41:7d:00:b1:
                    0a:fa:bd:42:80:af:4c:0e:ea:6d:68:57:6f:a9:70:
                    db:77:f3:3c:c2:dd:58:58:78:3b:39:65:25:d7:e4:
                    a5:f4:55:05:ca:dd:90:0d:54:05:4b:97:c8:78:20:
                    dd:50:7b:79:c9:a4:21:ea:ab:33:b8:86:ae:a8:3f:
                    16:4f:d7:e3:5e:34:40:54:c5:2f:a7:0b:f4:40:be:
                    57:8e:b7:89:43:2c:b7:16:38:65:ce:e8:e8:2f:f6:
                    a8:8a:eb:05:4a:3f:69:b9:4c:8b:3c:52:37:71:22:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:4B:E2:BB:C4:A5:67:32:0A:1F:F9:51:3B:2B:7B:EA:D9:61:14:C2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/324BE2BBC4A567320A1FF9513B2B7BEAD96114C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.152.0/22
                IPv6:
                  2804:6d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270541

    Signature Algorithm: sha256WithRSAEncryption
         69:50:ac:0c:6b:ae:f2:f7:93:e8:97:3f:e6:5e:05:d9:91:ca:
         8f:d5:07:ee:8a:b4:7d:8a:fd:84:80:5a:52:4c:f3:67:dc:2a:
         c2:11:ca:58:1c:f6:b8:f9:0a:67:a6:22:e1:56:d6:b6:04:4d:
         d5:7a:f3:48:0c:33:0e:fd:56:4b:95:61:52:7b:a9:db:0b:b8:
         8b:b0:d0:4e:72:9c:76:5c:23:8c:44:1c:29:50:41:20:b4:f9:
         75:dc:50:1a:61:33:06:60:c0:e3:f3:5c:10:2b:ae:b5:76:e0:
         b2:7c:4a:5d:9e:da:5d:4a:32:13:df:88:aa:98:2b:15:83:2b:
         fd:ee:13:50:4b:eb:b5:d9:03:f5:95:4b:6d:49:c6:64:1f:5d:
         1f:6a:1f:4d:0b:d1:25:f9:b4:2b:b8:ce:05:21:9a:18:82:9f:
         65:eb:e9:fa:0a:db:00:0b:92:8c:e9:d9:0e:4f:4d:3e:40:d3:
         43:aa:70:9b:10:4c:72:03:14:1c:da:5a:39:25:1a:8c:ae:7f:
         9b:31:ab:cd:d7:1b:76:5b:51:0e:89:1c:0b:e2:53:42:22:47:
         b3:79:46:63:31:89:42:3c:6f:55:c3:a4:dd:b0:56:77:6e:00:
         1b:c3:97:8f:9d:3b:c2:9a:db:69:46:10:a6:69:52:ad:4d:23:
         24:b5:0b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----