Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/50AE3D02A7293A2D0313DEB91609AA01A577A388.cer
File:                     50AE3D02A7293A2D0313DEB91609AA01A577A388.cer (raw, json)
Hash identifier:          BVuIkOoUUuZGCfN2fEFU2GEsQyr8hTSvqsAUTDIwqXI=
Subject key identifier:   50:AE:3D:02:A7:29:3A:2D:03:13:DE:B9:16:09:AA:01:A5:77:A3:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FA6DACEA0C07D221B6253544965FFBEC32D9987
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/50AE3D02A7293A2D0313DEB91609AA01A577A388.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 16:43:55 +0000
Certificate not after:    Thu 13 Feb 2025 16:48:55 +0000
Subordinate resources:    AS: 273321
                          IP: 2804:8ce4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a6:da:ce:a0:c0:7d:22:1b:62:53:54:49:65:ff:be:c3:2d:99:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 16:43:55 2024 GMT
            Not After : Feb 13 16:48:55 2025 GMT
        Subject: CN=50AE3D02A7293A2D0313DEB91609AA01A577A388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:3f:14:20:e6:65:62:66:89:07:e7:78:fe:
                    29:1d:cb:dd:64:7c:ea:5d:a8:1e:26:3a:6c:dc:39:
                    f0:12:97:2f:47:b4:5e:69:17:65:8a:27:4c:c9:77:
                    11:aa:ef:8c:84:55:a6:72:3b:dc:96:51:55:50:45:
                    81:0b:ba:29:fd:17:c3:b7:56:fb:81:49:eb:17:1a:
                    61:bb:77:69:82:29:4f:8b:ca:68:6f:cb:8e:b5:23:
                    54:1c:fc:df:da:58:84:bc:07:2a:cc:b6:9b:0b:a4:
                    cc:2f:ee:ab:06:e6:5a:18:d0:6f:28:98:14:ca:94:
                    7b:01:38:95:e8:ed:35:ce:25:e1:2f:16:71:3d:bc:
                    6f:ae:11:fa:8b:d5:aa:00:4d:d0:26:e9:dd:38:dd:
                    6c:fd:fe:1a:0d:86:32:da:4d:6a:03:04:25:46:4d:
                    a3:00:ed:b8:b8:be:d7:2f:ac:5c:37:21:23:eb:b1:
                    1c:12:e7:d6:d6:ad:df:72:e6:bc:a4:40:c9:2a:91:
                    4c:86:c1:52:e4:b4:2a:9c:b7:4e:d9:6b:76:98:ef:
                    2f:74:9e:83:ac:5e:da:2e:96:a5:38:22:04:bd:01:
                    25:1a:64:12:f2:50:85:39:aa:81:36:0a:4c:f4:9d:
                    48:57:20:c7:b7:78:91:1f:fa:c0:8e:b4:fc:d8:1c:
                    5b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:AE:3D:02:A7:29:3A:2D:03:13:DE:B9:16:09:AA:01:A5:77:A3:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/50AE3D02A7293A2D0313DEB91609AA01A577A388.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ce4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273321

    Signature Algorithm: sha256WithRSAEncryption
         28:c8:c4:38:cf:ba:df:31:8b:79:af:63:72:5c:f0:6d:7d:c4:
         4f:d8:98:30:9e:dd:98:29:b2:bd:ac:37:50:44:f0:26:08:81:
         21:e1:ac:c9:72:d4:3d:3e:40:a7:9f:ee:81:40:2f:74:9e:88:
         e5:29:25:16:3d:7e:4c:34:6b:fa:85:31:2a:79:95:b5:92:94:
         75:67:e2:97:a7:b6:8d:0f:61:73:24:5c:02:68:08:b7:d3:40:
         eb:38:af:e6:f2:21:1f:45:d9:66:c1:23:e0:de:7c:f1:93:cc:
         24:e3:57:7f:26:09:d3:2a:21:9a:00:2d:51:45:87:6f:ab:5c:
         34:a6:a5:99:36:4a:6c:5f:98:89:15:e1:a0:ce:ab:8c:70:6d:
         b9:9a:e0:0f:9a:23:e6:5b:28:20:fb:b5:db:2e:03:c9:76:76:
         69:e3:76:7d:6f:d7:30:26:dd:e1:3b:d4:f3:60:08:9a:56:fe:
         95:12:d6:25:82:64:d2:dc:08:4b:3f:51:66:78:2f:17:d2:fa:
         63:36:53:c8:dd:da:c8:1e:8b:b2:b3:d8:b9:3d:a5:2d:f9:60:
         c1:cb:ee:6e:91:9e:8b:ae:b2:17:63:0f:4f:57:e2:e8:ad:9b:
         54:0b:38:14:4a:13:c3:ec:30:a1:6d:cd:19:e5:a5:76:e6:7a:
         f1:fa:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----