Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/51C402AA1A86FAF6C7B0D166E7AF0FA70EC4FEAD.cer
File:                     51C402AA1A86FAF6C7B0D166E7AF0FA70EC4FEAD.cer (raw, json)
Hash identifier:          6TIGgFC0zk2LAi4qXvf411nbCL8rcTDeNV6pHj1VAkk=
Subject key identifier:   51:C4:02:AA:1A:86:FA:F6:C7:B0:D1:66:E7:AF:0F:A7:0E:C4:FE:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30A005D865E019DAFFA9D73D04DFC65C13E791F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/51C402AA1A86FAF6C7B0D166E7AF0FA70EC4FEAD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 17 Mar 2024 15:14:42 +0000
Certificate not after:    Sun 16 Mar 2025 15:19:42 +0000
Subordinate resources:    AS: 264915
                          IP: 168.228.220.0/22
                          IP: 2804:2fd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a0:05:d8:65:e0:19:da:ff:a9:d7:3d:04:df:c6:5c:13:e7:91:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 17 15:14:42 2024 GMT
            Not After : Mar 16 15:19:42 2025 GMT
        Subject: CN=51C402AA1A86FAF6C7B0D166E7AF0FA70EC4FEAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:86:4f:16:b5:6f:cf:02:fc:9f:88:33:76:e6:
                    66:e5:43:d2:52:ca:24:47:97:7e:e4:7b:90:69:b6:
                    2e:04:bc:70:0a:ae:56:60:ac:82:72:88:7f:3f:77:
                    00:81:2f:65:4e:fb:42:cb:76:89:87:17:00:85:87:
                    52:46:fd:e7:9f:4d:9e:ae:19:b8:2e:e2:bf:ce:e8:
                    e6:83:5e:1b:86:ff:4d:e4:33:7c:6b:ac:45:cb:7d:
                    74:c2:c6:6f:2c:b4:59:a6:2e:2a:04:39:ba:de:d4:
                    58:50:7c:db:6b:9c:e9:bb:42:3d:a7:d1:bf:82:30:
                    59:26:31:19:c5:08:eb:3a:0c:f5:ac:df:b0:3c:11:
                    d8:59:11:88:63:f5:bf:04:fc:df:50:ac:a0:e0:55:
                    45:69:1c:df:ab:e7:89:5b:09:59:ae:e9:de:c1:d9:
                    8d:71:c2:5c:6f:a0:d2:f5:41:75:be:a4:1f:36:ca:
                    c9:26:79:ad:a9:84:73:2c:82:0f:f5:c6:f7:1c:52:
                    ac:e3:b2:8f:1f:7d:c7:52:c8:80:22:4c:26:13:6b:
                    0f:45:a8:3e:62:24:fb:47:e2:e7:70:5a:13:e5:36:
                    5c:d1:50:ec:4b:3c:4c:e2:5d:f7:e8:83:14:5e:10:
                    d0:e9:11:7b:1b:0d:50:b2:c9:94:b9:0e:38:63:8d:
                    e4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:C4:02:AA:1A:86:FA:F6:C7:B0:D1:66:E7:AF:0F:A7:0E:C4:FE:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/51C402AA1A86FAF6C7B0D166E7AF0FA70EC4FEAD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.220.0/22
                IPv6:
                  2804:2fd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264915

    Signature Algorithm: sha256WithRSAEncryption
         06:63:47:92:c7:12:d8:2a:22:10:fe:73:70:87:60:3c:6c:7e:
         0a:ee:ed:37:b5:ac:40:f7:32:71:4c:7d:2a:86:1c:de:41:9d:
         aa:e1:9a:95:85:36:eb:08:42:7a:06:4c:3c:c4:f4:4d:41:8e:
         39:97:07:b7:f5:3e:37:eb:ec:98:25:27:e1:a2:9d:8c:70:6a:
         57:56:1b:de:43:02:d5:4d:a2:2b:57:23:0b:ae:e1:6c:44:03:
         62:d5:e7:05:8a:a3:dd:86:ca:e9:e3:d8:2b:4a:9c:03:07:1f:
         7e:fe:3b:87:10:a7:40:d5:4d:32:ed:e9:93:c5:3e:46:7f:b6:
         21:64:eb:1e:02:10:80:80:1f:48:31:09:7f:67:99:c0:2f:30:
         f3:35:fd:ed:2c:6a:c0:c7:f2:5c:0c:0c:e9:e0:bd:30:b7:13:
         60:a0:20:2a:90:19:06:0e:38:bf:b3:4d:05:ce:df:f1:d6:d1:
         07:03:46:5a:5a:dc:bf:ab:10:e3:16:3c:86:97:58:14:65:41:
         71:63:f0:4a:aa:c5:2a:20:23:3b:01:df:01:bf:e6:46:0f:25:
         95:c3:94:4d:a2:c8:a2:eb:4d:a5:ad:25:22:ce:b0:32:34:81:
         d4:e2:e8:be:59:3b:40:c9:78:a5:9d:1e:d1:7f:13:fa:03:ff:
         3e:fa:27:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----