Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/35FC7024265CE242898B3F38745C5FE60CAA741B.cer
File:                     35FC7024265CE242898B3F38745C5FE60CAA741B.cer (raw, json)
Hash identifier:          zNRH/EaIOhRFq7Wf+R/C0o9OfvaxTCM1OAw2bOleTAU=
Subject key identifier:   35:FC:70:24:26:5C:E2:42:89:8B:3F:38:74:5C:5F:E6:0C:AA:74:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B9F2A0B4BD8B149911610BA55758FCF282DBE7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/35FC7024265CE242898B3F38745C5FE60CAA741B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 14:52:43 +0000
Certificate not after:    Mon 24 Feb 2025 14:57:43 +0000
Subordinate resources:    AS: 271072
                          IP: 179.48.100.0/22
                          IP: 2804:75d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9f:2a:0b:4b:d8:b1:49:91:16:10:ba:55:75:8f:cf:28:2d:be:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 26 14:52:43 2024 GMT
            Not After : Feb 24 14:57:43 2025 GMT
        Subject: CN=35FC7024265CE242898B3F38745C5FE60CAA741B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:27:93:00:e9:e2:7a:7f:8e:4a:48:d5:42:ea:
                    c6:e2:82:11:13:e3:eb:bf:5e:8b:69:e4:7e:e5:6f:
                    cc:76:04:d7:86:02:96:7a:ce:d5:0f:35:07:04:d3:
                    cb:fd:e3:76:1b:db:02:e4:af:48:33:15:87:ca:06:
                    e8:79:a9:0b:2f:7b:5b:93:41:53:45:82:ea:ed:2a:
                    a6:90:53:00:a5:7e:e9:5e:22:d5:6c:70:bc:d5:21:
                    1c:e1:90:bb:61:da:bb:bd:57:42:61:d9:40:93:e9:
                    4e:6e:54:d9:e8:07:a1:fa:33:00:11:ea:ca:41:aa:
                    51:04:b8:c6:85:c8:28:59:23:ef:2e:cf:30:8e:db:
                    ee:2e:6d:d4:90:eb:84:03:46:e4:d9:22:af:f3:42:
                    e7:74:23:9c:bb:98:21:67:70:3d:7d:04:a7:eb:30:
                    05:40:7f:b1:2b:da:79:35:0c:7b:33:4b:96:ca:39:
                    8e:d8:e8:0f:6a:d6:34:21:7e:37:9d:89:b8:55:96:
                    2a:8e:4b:23:fb:e1:bb:b4:ee:34:61:85:86:b2:02:
                    81:94:ed:0e:50:60:cd:7e:b5:86:bc:35:0e:08:65:
                    70:5f:e3:ae:59:49:92:61:67:72:27:02:b4:49:9e:
                    2a:b2:d9:0f:b5:a8:28:1e:7c:71:49:a2:14:84:a7:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:FC:70:24:26:5C:E2:42:89:8B:3F:38:74:5C:5F:E6:0C:AA:74:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/35FC7024265CE242898B3F38745C5FE60CAA741B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.100.0/22
                IPv6:
                  2804:75d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271072

    Signature Algorithm: sha256WithRSAEncryption
         8f:5e:21:99:3f:7d:5c:55:73:a3:d1:0f:3a:e8:2b:d9:d6:09:
         84:c8:7c:28:54:d7:9f:c1:74:75:1c:4b:71:7a:47:46:25:23:
         45:5a:8d:bd:3e:6c:f2:6e:09:2d:66:3d:4c:c0:67:dc:c5:84:
         c8:0d:03:64:59:a7:b3:11:94:3a:56:b8:06:21:1a:90:f6:11:
         0d:ff:c4:d1:9c:ac:97:58:18:ca:74:98:13:ac:7a:67:a8:00:
         eb:fa:4e:d9:24:dd:e1:cc:a1:ec:53:30:80:29:09:f1:31:04:
         10:1d:d4:30:46:d4:ff:03:43:f1:0a:e3:5a:b7:90:c8:4a:48:
         84:f8:e0:3d:9a:7f:79:46:3b:55:9f:a5:59:fe:5d:9e:0c:60:
         36:ec:1c:31:42:f2:84:6e:6b:f6:74:ef:06:88:5f:07:d5:86:
         c8:b9:dd:cb:db:75:ff:cf:01:95:fb:49:75:be:e3:d2:9d:6f:
         71:af:c8:f3:62:f1:bc:1c:6f:6c:6e:c3:d7:1d:44:53:3a:78:
         4c:82:04:e2:e5:ab:c9:36:4e:1d:07:aa:a7:b6:0a:4d:e7:0e:
         1e:c6:d5:20:22:80:18:a6:bf:0b:3c:dc:d3:26:2d:64:ec:f4:
         78:7d:12:2d:9e:4f:1d:39:32:9d:83:12:9c:75:3f:d1:d9:22:
         08:a1:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----