Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/334270D4EFA4E534477302A190D3CFF70E567395.cer
File:                     334270D4EFA4E534477302A190D3CFF70E567395.cer (raw, json)
Hash identifier:          G+IBRsg9qVyoTNSiOvCPzVIs9GJyX+Y5nd+lGk7Lq30=
Subject key identifier:   33:42:70:D4:EF:A4:E5:34:47:73:02:A1:90:D3:CF:F7:0E:56:73:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5273EABE4E806AA6DB04BA7D80FCD991B00C34C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/334270D4EFA4E534477302A190D3CFF70E567395.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 19:53:35 +0000
Certificate not after:    Thu 13 Feb 2025 19:58:35 +0000
Subordinate resources:    AS: 269246
                          IP: 45.182.192.0/22
                          IP: 2804:61a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:73:ea:be:4e:80:6a:a6:db:04:ba:7d:80:fc:d9:91:b0:0c:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 19:53:35 2024 GMT
            Not After : Feb 13 19:58:35 2025 GMT
        Subject: CN=334270D4EFA4E534477302A190D3CFF70E567395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:80:ae:df:8d:00:1e:49:57:15:e7:44:f3:70:
                    ad:80:d0:96:19:dc:4a:b8:1d:2a:52:85:e9:04:b7:
                    10:2e:3f:ea:cc:b1:5e:0a:e7:e5:ec:3e:98:b4:e9:
                    de:93:f5:ec:09:b8:9e:4a:e2:da:ef:fd:66:72:68:
                    3e:41:86:22:65:7a:4d:ba:78:ec:2a:a2:c3:d4:55:
                    f4:84:14:0b:7d:83:23:97:75:dc:70:c4:eb:81:0f:
                    a2:83:b6:19:ce:fd:a8:fb:28:0b:22:e6:7d:7b:c6:
                    e8:a0:ee:81:1c:a4:fc:b5:4d:40:22:1e:44:7b:f6:
                    c2:a7:2a:79:db:bb:3b:26:14:2c:2f:19:ec:35:00:
                    c7:0e:45:9a:13:38:5c:4e:18:8b:44:af:fb:49:cf:
                    b1:9e:a0:4c:22:0a:5a:9e:a3:fc:69:a3:27:e1:68:
                    ca:d1:46:31:57:4c:99:e0:7c:12:4a:c0:2e:a8:9c:
                    f9:b2:1d:9c:80:c9:d8:91:e7:b9:63:11:6a:dc:d4:
                    1d:85:7a:53:7a:1d:d9:f7:7c:9e:bf:75:a5:37:95:
                    a1:7b:0e:4b:7d:94:3f:66:8d:55:97:d5:34:ae:fc:
                    9a:95:43:62:97:ea:e8:ec:d0:62:77:26:ec:ce:95:
                    89:1f:ef:a4:f9:30:3a:00:62:3f:7f:56:0c:2b:61:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:42:70:D4:EF:A4:E5:34:47:73:02:A1:90:D3:CF:F7:0E:56:73:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/334270D4EFA4E534477302A190D3CFF70E567395.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.192.0/22
                IPv6:
                  2804:61a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269246

    Signature Algorithm: sha256WithRSAEncryption
         9b:37:5d:60:16:cd:5c:33:20:df:85:74:58:a9:0c:1d:57:be:
         69:28:00:ae:58:59:e9:33:f1:73:b4:f4:e4:35:6d:a7:aa:b9:
         85:d0:03:7c:ff:60:51:3e:a4:81:e9:b3:e0:45:fe:cd:ff:e4:
         1c:5f:f2:7e:af:a0:43:96:dd:6b:1c:15:e8:19:49:34:44:81:
         4c:50:62:ef:70:56:44:d8:b8:a8:27:d8:17:ae:3b:51:e1:2a:
         11:98:18:d3:b0:cc:63:9b:d3:b4:59:80:84:77:00:0d:74:a7:
         78:be:5e:e4:ff:da:55:cf:26:1a:3c:a2:61:3c:84:76:91:09:
         6e:18:01:cf:f8:85:94:2e:71:14:19:93:5a:35:a2:2d:b3:f4:
         d4:69:10:51:19:57:99:7d:c7:a4:16:31:09:d0:96:98:bd:5d:
         72:db:31:06:05:0f:26:86:11:14:b8:53:87:19:af:d8:d1:6e:
         d5:1f:c7:1b:b0:df:b9:71:76:7e:7b:d4:f1:ba:11:a2:59:26:
         b5:d8:54:8d:48:c1:ee:d9:93:ec:06:08:d5:8b:54:66:46:d0:
         03:c3:21:b3:9d:38:ed:6f:f9:f1:ca:3c:64:48:3c:32:8d:83:
         13:24:2e:7c:6b:13:04:37:37:b5:5f:bb:65:75:65:95:6e:a0:
         77:86:99:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----