Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/50DE48A3BFC137A4D9A1AFB812475E21968193AB.cer
File:                     50DE48A3BFC137A4D9A1AFB812475E21968193AB.cer (raw, json)
Hash identifier:          YSy8MopMwKnpXO1A9SAJV+RdTbE5sSEpaR2mYC2aenQ=
Subject key identifier:   50:DE:48:A3:BF:C1:37:A4:D9:A1:AF:B8:12:47:5E:21:96:81:93:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6AC9F50F0DA0770F88AEB40DAECDCA46EB6A3A3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/50DE48A3BFC137A4D9A1AFB812475E21968193AB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 16:06:13 +0000
Certificate not after:    Mon 10 Mar 2025 16:11:13 +0000
Subordinate resources:    AS: 271410
                          IP: 131.196.28.0/22
                          IP: 2804:7b18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c9:f5:0f:0d:a0:77:0f:88:ae:b4:0d:ae:cd:ca:46:eb:6a:3a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 16:06:13 2024 GMT
            Not After : Mar 10 16:11:13 2025 GMT
        Subject: CN=50DE48A3BFC137A4D9A1AFB812475E21968193AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:09:0c:8b:2f:c4:04:44:59:28:62:9b:99:
                    ee:a1:e6:d2:75:a9:19:a1:f3:92:bf:63:b4:de:8c:
                    e4:4a:c8:75:05:76:cf:1f:da:28:08:0e:30:d1:a0:
                    46:ec:26:3e:87:e5:91:aa:cd:94:91:fb:76:68:bc:
                    c8:2f:69:ac:66:c6:0d:95:2e:7e:66:be:ae:92:44:
                    c3:a4:57:c4:87:1a:ee:72:85:98:18:e7:5a:c2:75:
                    94:55:38:c9:3f:6b:8e:a7:12:4e:4e:46:aa:d0:17:
                    d3:4e:6a:8e:fa:dc:03:7b:f8:b3:88:d0:31:a1:5b:
                    59:42:2c:88:e6:30:9d:d6:77:af:7b:35:0c:5c:fb:
                    99:04:c8:34:70:80:62:95:ec:cd:39:e4:28:b4:0d:
                    aa:b3:80:59:b2:38:74:b5:6f:fe:de:77:3c:39:1c:
                    57:e1:3b:d6:e8:f6:76:1a:1c:b1:72:2b:c1:03:19:
                    64:83:1b:01:87:bb:49:6d:6f:30:88:cf:ee:90:11:
                    2f:2f:74:ed:41:c2:b1:cf:0f:88:7f:fc:62:50:02:
                    d7:0f:e9:bb:9e:76:3f:6f:49:fe:76:28:7c:4b:25:
                    0f:74:65:46:d9:56:c4:30:26:95:a8:7c:d4:56:0e:
                    fe:fb:fa:34:e9:c4:6b:46:7e:2e:d1:9f:d3:e2:e8:
                    9f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:DE:48:A3:BF:C1:37:A4:D9:A1:AF:B8:12:47:5E:21:96:81:93:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/50DE48A3BFC137A4D9A1AFB812475E21968193AB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.28.0/22
                IPv6:
                  2804:7b18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271410

    Signature Algorithm: sha256WithRSAEncryption
         82:5c:78:cd:e4:45:92:76:16:8a:7d:8c:bf:72:4f:95:f7:85:
         83:ca:4a:70:d0:89:2e:9e:7b:58:27:5a:e8:b2:2f:d4:03:01:
         68:3f:f4:4f:aa:46:98:12:61:36:73:f1:a8:25:41:2f:4a:87:
         db:e2:50:55:5a:1c:cf:e4:d3:04:9f:fe:82:03:74:b4:dd:0c:
         ce:e3:02:89:3c:5b:a2:99:ea:10:1b:f7:43:f6:bf:e3:17:9d:
         ab:25:84:11:9c:ab:db:b6:1e:7c:01:10:45:2f:69:a2:b8:40:
         ce:4d:58:bf:ea:8e:a2:1b:74:df:40:ca:d2:52:70:fb:e5:8c:
         aa:12:db:f7:5f:e4:c4:33:a4:34:7d:37:88:9e:5e:c2:1f:78:
         7f:72:10:10:b8:a3:00:1d:c3:d2:7c:bd:d5:c6:df:d2:b3:85:
         aa:65:07:12:d7:fa:29:e2:f6:f9:68:60:7a:49:fc:9c:10:de:
         3c:f7:31:18:a7:ac:bf:ed:7d:7b:0c:af:3d:f0:0a:2b:cf:d8:
         f1:04:96:07:48:77:5f:25:87:04:9f:a5:9d:31:af:e4:e0:d4:
         02:99:52:e3:20:ec:3d:55:89:cf:e9:26:0d:64:04:d5:e5:8e:
         99:bb:4b:b5:5b:79:32:fb:18:f2:10:ec:05:40:5c:b5:21:2e:
         fb:c4:12:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----