Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/48DFE379FC64C3F50512033477F929291FC10CF2.cer
File:                     48DFE379FC64C3F50512033477F929291FC10CF2.cer (raw, json)
Hash identifier:          ZN88VhJ4W6Wjvxojn4UMtdiqNxXVxselryg9xju4Wkw=
Subject key identifier:   48:DF:E3:79:FC:64:C3:F5:05:12:03:34:77:F9:29:29:1F:C1:0C:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       62EE962A5B9312A9DF1A1DA16DC42EAD084A6E1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/48DFE379FC64C3F50512033477F929291FC10CF2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 19:41:47 +0000
Certificate not after:    Fri 07 Mar 2025 19:46:47 +0000
Subordinate resources:    AS: 268106
                          IP: 45.169.108.0/22
                          IP: 2804:5818::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ee:96:2a:5b:93:12:a9:df:1a:1d:a1:6d:c4:2e:ad:08:4a:6e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 19:41:47 2024 GMT
            Not After : Mar  7 19:46:47 2025 GMT
        Subject: CN=48DFE379FC64C3F50512033477F929291FC10CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:0f:a7:98:4c:78:75:d8:ce:b6:a7:90:7b:
                    48:11:36:4b:82:81:57:ce:a7:cc:82:03:47:ef:14:
                    c9:cc:fd:45:c5:3b:8c:1b:62:8b:60:f4:2c:0e:ca:
                    2b:12:d7:82:d5:e6:ee:d2:39:f2:0f:00:74:b1:ba:
                    5a:25:cd:4c:9e:97:9a:74:8f:7c:f4:7a:20:e7:18:
                    05:db:bc:2d:19:37:40:6a:9f:14:c3:54:eb:d4:80:
                    73:46:70:1c:6f:bb:db:09:e3:ca:a7:42:68:6c:86:
                    c4:2e:65:4c:24:b4:dc:81:fc:70:61:36:ab:6c:95:
                    29:4b:49:ef:c5:6f:32:90:ae:1b:6f:b4:42:78:10:
                    b1:3b:26:74:0c:23:04:c3:d8:e1:dd:e0:fe:80:77:
                    a5:25:2b:2a:d3:ff:0e:29:7f:75:d3:60:89:8f:36:
                    c9:00:39:d6:c9:7d:69:68:6e:5e:d9:9f:f8:07:ac:
                    84:55:62:e7:a8:a3:2f:32:e0:b2:62:1b:26:0e:ee:
                    fb:eb:10:64:24:49:c5:f4:94:08:56:52:51:e3:7f:
                    68:36:a4:bd:9c:2a:03:b5:0c:04:3f:79:a6:0b:83:
                    54:36:66:e4:5f:ed:02:8a:97:75:e5:88:87:79:bf:
                    b7:aa:e0:ae:9e:11:0d:eb:6d:0d:85:ec:c9:a9:0c:
                    71:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:DF:E3:79:FC:64:C3:F5:05:12:03:34:77:F9:29:29:1F:C1:0C:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/48DFE379FC64C3F50512033477F929291FC10CF2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.108.0/22
                IPv6:
                  2804:5818::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268106

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:67:81:94:97:a6:a7:26:4e:3b:31:6b:10:03:92:4e:5b:
         79:02:48:2b:d8:f6:d3:a8:84:ef:84:17:45:e7:07:7e:24:9f:
         41:8d:e6:ea:53:05:b8:e4:06:8b:b7:26:09:90:68:81:a6:0e:
         a1:7f:3c:fa:68:41:cf:09:13:9f:ae:5f:7c:43:f9:af:c8:b8:
         a5:7c:55:42:72:1d:c7:55:8a:a4:12:93:58:dd:18:99:47:52:
         40:57:32:25:b9:97:e1:ca:e6:b1:d3:b6:d0:f2:25:57:74:fa:
         1d:5f:50:1b:d7:18:d4:98:26:23:f3:29:87:f5:b7:3f:16:a5:
         4e:d4:69:bf:ae:78:45:5e:08:eb:0b:7e:31:37:d8:77:86:c2:
         e8:15:77:e1:16:7e:43:ea:56:d6:af:cd:4c:0c:e9:69:5c:35:
         97:d6:dd:d5:99:e9:9a:18:14:29:c8:48:54:d2:51:96:a7:72:
         57:ef:d5:2e:50:e5:e2:7b:0e:f8:e6:cb:d7:74:46:fa:55:a8:
         02:b1:06:2e:a7:85:80:2a:10:61:80:3b:26:b8:a7:84:1d:00:
         b3:c3:b6:62:fd:96:9b:25:4f:5a:55:98:7f:6a:59:78:83:ac:
         ef:a2:78:cb:04:d8:4e:05:54:57:4b:c2:fd:cd:48:e5:6f:b2:
         d2:50:ef:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----