Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/449501A41FB5B63BE134A62426AA3A72D306EF80.cer
File:                     449501A41FB5B63BE134A62426AA3A72D306EF80.cer (raw, json)
Hash identifier:          2AZbA5iTRZ+Xncdu9fTi+55WcjyFHFLcarrEMjRYpVI=
Subject key identifier:   44:95:01:A4:1F:B5:B6:3B:E1:34:A6:24:26:AA:3A:72:D3:06:EF:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3AC7005F6E6AB910C23B1FB59FFE25CBDB50C825
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/449501A41FB5B63BE134A62426AA3A72D306EF80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Apr 2024 17:55:09 +0000
Certificate not after:    Tue 01 Apr 2025 18:00:09 +0000
Subordinate resources:    AS: 269367
                          IP: 45.185.76.0/22
                          IP: 2804:6388::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c7:00:5f:6e:6a:b9:10:c2:3b:1f:b5:9f:fe:25:cb:db:50:c8:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  2 17:55:09 2024 GMT
            Not After : Apr  1 18:00:09 2025 GMT
        Subject: CN=449501A41FB5B63BE134A62426AA3A72D306EF80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e8:56:92:2d:61:79:b1:48:0d:3d:3b:12:b3:
                    7a:f7:d6:b7:18:c9:bb:16:ec:23:96:4f:a9:78:60:
                    d5:d6:8b:41:ec:c4:97:fe:b1:15:04:5f:5d:4d:9b:
                    a2:77:97:aa:c0:aa:c9:e2:d4:fe:c4:c1:ad:71:e6:
                    41:e2:c2:31:9f:96:64:ae:fd:b4:20:48:d1:6f:e6:
                    b7:77:e3:54:d5:18:00:7c:02:22:52:0f:4c:da:21:
                    cd:a2:76:e4:8e:24:9e:6a:83:26:f7:5e:29:df:ff:
                    f5:e0:a6:13:23:3d:3e:7a:62:d2:f9:f0:49:a8:e9:
                    f7:3e:5c:14:ae:3a:50:3f:f8:c9:7d:45:1c:3b:36:
                    6d:7a:59:c6:96:6c:66:94:9b:bc:57:0a:43:ff:6c:
                    10:6b:14:78:61:9c:0e:a9:bd:28:cf:4a:0f:d1:af:
                    9b:87:f2:0a:7c:54:cf:1e:50:d9:41:25:b7:e8:e8:
                    31:b0:51:13:e7:2b:c6:46:6b:73:bd:fd:cb:7a:55:
                    e8:45:8c:58:ad:50:b4:65:32:8e:02:7d:1c:77:e1:
                    55:fc:6e:31:83:96:0f:e3:a8:40:3a:a5:99:15:76:
                    e2:d7:66:79:f4:54:4e:38:67:0c:92:08:12:0f:35:
                    18:62:6a:ab:f0:f3:b7:7f:ea:cf:22:4d:91:74:43:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:95:01:A4:1F:B5:B6:3B:E1:34:A6:24:26:AA:3A:72:D3:06:EF:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/449501A41FB5B63BE134A62426AA3A72D306EF80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.76.0/22
                IPv6:
                  2804:6388::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269367

    Signature Algorithm: sha256WithRSAEncryption
         2a:5c:12:ed:2d:b2:c1:36:c4:0f:6b:bf:d8:37:c3:75:68:a9:
         9a:c4:c5:19:db:64:c9:89:b2:53:27:8d:a2:a5:d5:d4:a1:a4:
         9f:6d:9f:88:ea:23:9a:80:13:d1:bd:73:90:e5:c9:30:a4:a8:
         43:1c:4d:1e:78:1d:68:58:66:fb:ad:bf:19:73:a6:0c:30:66:
         6d:32:57:f7:49:98:f2:b8:c4:02:a3:d5:ad:9d:fc:c1:58:a2:
         91:e8:99:0c:d9:78:c7:66:74:d0:ba:b2:9c:86:cc:da:85:e9:
         3e:a0:3e:5d:cb:7f:57:13:22:64:be:b3:d0:d7:8b:29:a4:c6:
         1e:28:14:58:f0:f0:a0:30:42:59:ab:f7:4e:ce:4b:51:21:7a:
         aa:76:82:42:f8:80:be:72:1e:1b:e1:bc:1d:cc:1c:55:3c:cb:
         c7:96:dd:a4:e5:56:63:ac:fa:b0:8e:6f:4e:db:16:1a:cd:24:
         7b:77:e5:4d:65:fe:f2:38:e2:d1:e9:a2:e5:3a:2e:0e:47:c5:
         0b:f6:23:23:65:64:7b:12:55:60:a1:c8:e5:6f:5e:6a:0f:32:
         78:ca:f5:2d:05:7a:55:13:7b:22:c5:bf:24:48:e9:d8:88:9b:
         8b:51:75:92:93:ad:c8:ce:f4:be:37:7f:27:4b:a8:ad:ba:6c:
         33:b4:9b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----