Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.cer
File:                     43C65DD1E6B9100D645ED1A61A1B3F781D617330.cer (raw, json)
Hash identifier:          dbOaYaYWt+SeoOcTYZfTKvAieyrgURWUKsx845LulfY=
Subject key identifier:   43:C6:5D:D1:E6:B9:10:0D:64:5E:D1:A6:1A:1B:3F:78:1D:61:73:30
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27DD41E9FAADC08EA1DA864A7592432D29944A28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Feb 2024 19:32:21 +0000
Certificate not after:    Mon 03 Feb 2025 19:37:21 +0000
Subordinate resources:    AS: 265111
                          AS: 273353
                          IP: 170.254.192.0/22
                          IP: 2804:3304::/32
                          IP: 2804:8d60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:dd:41:e9:fa:ad:c0:8e:a1:da:86:4a:75:92:43:2d:29:94:4a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  5 19:32:21 2024 GMT
            Not After : Feb  3 19:37:21 2025 GMT
        Subject: CN=43C65DD1E6B9100D645ED1A61A1B3F781D617330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:3c:6d:42:93:74:a0:79:f7:26:ca:46:a4:
                    b7:98:f4:ce:d0:03:22:1e:17:5f:84:ad:2a:44:39:
                    33:23:a4:5d:de:68:22:9e:aa:a9:b0:f3:1f:e1:9c:
                    69:a5:55:0b:3d:bb:da:69:bb:b4:3f:57:61:d8:bc:
                    aa:ff:1d:d3:26:a3:5c:14:ee:45:55:ba:42:95:cf:
                    9f:de:dc:df:8b:61:e4:a8:96:0e:80:73:86:8e:74:
                    29:16:f4:0e:6c:92:a5:74:99:ac:78:95:a4:62:8a:
                    d9:79:4a:7a:24:d3:5a:f9:14:ff:a9:b3:1c:90:2e:
                    34:bc:47:a9:1f:bb:1c:e8:52:99:a0:cc:a7:09:2e:
                    34:a9:5b:b3:09:7f:7a:03:5e:01:e8:0b:77:de:38:
                    bc:93:5e:af:47:04:08:29:10:c8:99:49:f2:af:ed:
                    d1:6d:56:40:50:eb:52:9f:f0:96:c4:06:be:50:f4:
                    ca:74:22:bf:5b:a9:68:71:b5:74:8f:fb:dd:d4:57:
                    52:8c:96:4c:60:21:29:11:11:fe:94:9f:c5:d6:5e:
                    78:ba:00:1e:71:29:ae:c5:ef:aa:c9:76:a7:e1:91:
                    f1:17:18:de:21:18:7f:d5:d8:41:34:b8:5b:c4:01:
                    ba:65:b8:87:bb:32:4d:53:f2:ec:a7:02:f6:80:10:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:C6:5D:D1:E6:B9:10:0D:64:5E:D1:A6:1A:1B:3F:78:1D:61:73:30
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.192.0/22
                IPv6:
                  2804:3304::/32
                  2804:8d60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265111
                  273353

    Signature Algorithm: sha256WithRSAEncryption
         8f:c6:ae:0b:ae:2c:9d:a2:98:dc:92:33:cc:b2:ea:91:76:85:
         6f:f9:38:bb:a7:dc:57:9a:e4:41:0b:d3:4a:fe:1d:0d:1e:0e:
         20:69:aa:d1:b9:76:ab:e9:8b:af:38:51:ad:93:9b:00:b6:50:
         fb:31:b9:b4:71:33:37:f8:68:2b:3b:19:f1:34:3a:af:6e:83:
         7e:cb:58:93:e3:80:54:fe:2b:ef:b8:cb:a5:48:b2:18:03:fa:
         01:17:13:25:8e:9a:d6:6f:b5:79:fe:d5:9f:cb:e2:a0:e6:4a:
         40:bf:d2:ae:72:f7:c0:fd:8a:26:4d:cd:4f:ba:45:d3:9e:1d:
         59:f3:7a:0e:48:be:29:66:30:3f:dc:29:b7:62:10:f4:79:d7:
         29:78:4c:0d:f0:52:a2:b6:f6:fc:11:c8:98:79:c0:3b:ac:9e:
         81:07:cd:f2:30:8c:4c:fc:74:69:bc:80:9a:99:18:b4:f0:c7:
         50:a8:0d:c9:a5:40:15:5f:f2:fc:76:a3:bc:d3:08:75:47:6f:
         75:2e:5f:82:38:18:e4:41:06:84:70:04:83:5f:18:39:8e:49:
         44:9d:50:cf:38:be:12:90:41:e0:9b:f8:b1:39:b2:18:00:51:
         4d:1e:bc:dd:6d:63:fe:dc:d4:bd:36:e8:2e:bf:b2:fa:f3:87:
         5f:ce:52:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----