Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/500A731638F48A95A1B9CBAD6B725A67CE9D1DAA.cer
File:                     500A731638F48A95A1B9CBAD6B725A67CE9D1DAA.cer (raw, json)
Hash identifier:          zSXY1trqbtzE5NR4TRsiHWepImbAULiFtSH0OSrp42M=
Subject key identifier:   50:0A:73:16:38:F4:8A:95:A1:B9:CB:AD:6B:72:5A:67:CE:9D:1D:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       47D45CCC1331ABCA8FC8733F65B194F36F3F6246
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/0/500A731638F48A95A1B9CBAD6B725A67CE9D1DAA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Mar 2024 20:22:31 +0000
Certificate not after:    Fri 21 Mar 2025 20:27:31 +0000
Subordinate resources:    AS: 271441
                          IP: 181.233.92.0/22
                          IP: 2804:7b94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d4:5c:cc:13:31:ab:ca:8f:c8:73:3f:65:b1:94:f3:6f:3f:62:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 20:22:31 2024 GMT
            Not After : Mar 21 20:27:31 2025 GMT
        Subject: CN=500A731638F48A95A1B9CBAD6B725A67CE9D1DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:07:d9:49:cf:71:7a:c7:39:4c:9f:ae:66:
                    2c:6b:04:b9:c0:03:9a:7c:74:35:df:bc:fa:32:f6:
                    d6:c2:c3:c2:92:c6:f1:d0:60:69:fc:cb:77:6a:6d:
                    a3:4a:50:26:75:f4:66:d2:14:f9:d5:f2:8d:2b:e5:
                    96:73:d0:63:91:2d:65:a3:da:08:af:82:0c:15:f5:
                    ce:db:77:e9:13:ca:de:6e:c2:c2:44:e3:91:dc:32:
                    6b:1d:23:13:f7:a9:03:2b:b3:e8:e6:dc:f1:ce:36:
                    08:72:14:6b:79:0a:58:dd:f3:06:8f:1f:07:6f:55:
                    e2:c7:17:bc:ad:d7:b4:1d:fb:79:a4:a9:11:35:f5:
                    b0:25:be:1b:17:a1:1a:26:ef:17:d4:24:59:ba:ec:
                    b2:5e:60:ac:d7:6a:68:e6:77:1a:6f:ad:ee:16:0a:
                    0e:57:4b:bf:9c:f8:f5:1f:9b:a7:09:ae:e9:4d:45:
                    92:8e:8f:c2:11:6a:6b:b7:48:06:51:81:b2:6f:0d:
                    9f:d0:75:cc:22:b5:58:0a:a3:d0:b8:a8:72:da:da:
                    7e:31:26:f0:e9:d6:76:e4:70:b8:17:11:27:7f:71:
                    0e:cd:f6:c7:ec:b1:ef:00:b6:ff:bb:06:fb:10:e0:
                    4b:98:8f:fb:7c:22:d8:ed:37:ae:06:7d:bf:ca:45:
                    33:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:0A:73:16:38:F4:8A:95:A1:B9:CB:AD:6B:72:5A:67:CE:9D:1D:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/0/500A731638F48A95A1B9CBAD6B725A67CE9D1DAA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.92.0/22
                IPv6:
                  2804:7b94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271441

    Signature Algorithm: sha256WithRSAEncryption
         91:7b:a0:c2:79:7b:d7:5f:c9:62:6c:0f:c4:10:1e:2b:0e:dc:
         28:61:8b:a8:5f:c9:df:36:a9:f7:64:aa:8f:81:93:b7:13:f3:
         b1:47:6e:7c:7f:e5:46:1c:fe:e9:00:bd:fc:a4:82:cc:eb:5c:
         6f:05:38:fb:6b:27:a3:4a:c0:ed:38:ca:81:7a:55:2b:34:15:
         23:e2:f8:dd:e1:a9:0a:f7:bf:43:57:c1:d5:46:30:be:16:55:
         7b:d3:e9:ba:bf:66:56:ac:4a:ae:b0:87:84:ac:b8:d1:e4:a4:
         61:60:52:3f:ae:28:77:f8:f4:79:d4:2f:5c:bd:1a:21:c9:55:
         4c:d9:07:75:43:26:f7:9c:02:46:27:59:a3:21:db:51:13:5f:
         49:ab:63:b5:f3:ee:bd:18:d9:b9:d6:f8:82:e6:6d:51:d2:14:
         ee:31:7b:b1:81:1e:f5:d3:98:d8:c8:06:bb:84:c7:17:5d:c6:
         56:b3:04:10:7e:73:5f:1b:64:ae:61:9d:98:98:67:a9:28:5e:
         d4:5d:9e:6c:cb:a9:b6:cf:e8:2c:04:e4:28:05:47:47:30:0a:
         fc:72:33:20:76:5b:73:75:9c:14:a3:94:ad:36:79:70:e8:cb:
         8f:f4:e3:0a:8b:1c:1e:1b:2f:45:9a:79:fb:0a:44:58:64:1b:
         66:ad:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----