Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/540DD83FF1692B2072A8312F529D6865CBB50CCE.cer
File:                     540DD83FF1692B2072A8312F529D6865CBB50CCE.cer (raw, json)
Hash identifier:          +5A/N+fzkJDUz8+NWxBg3r+woSADGgJoRsEzELb7fj4=
Subject key identifier:   54:0D:D8:3F:F1:69:2B:20:72:A8:31:2F:52:9D:68:65:CB:B5:0C:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18A77C606C1C02D8B6B079F65506425E889F7EAE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/540DD83FF1692B2072A8312F529D6865CBB50CCE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 07 Apr 2024 22:08:07 +0000
Certificate not after:    Sun 06 Apr 2025 22:13:07 +0000
Subordinate resources:    AS: 266196
                          IP: 45.6.160.0/22
                          IP: 2804:3c34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a7:7c:60:6c:1c:02:d8:b6:b0:79:f6:55:06:42:5e:88:9f:7e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  7 22:08:07 2024 GMT
            Not After : Apr  6 22:13:07 2025 GMT
        Subject: CN=540DD83FF1692B2072A8312F529D6865CBB50CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:bb:ba:e9:06:34:60:61:17:e9:1f:82:c4:
                    c8:8d:5a:db:0d:1b:10:96:c2:4f:3a:2a:00:4a:9e:
                    b8:10:05:69:0e:54:2a:58:93:0e:77:c1:31:57:16:
                    82:16:10:91:f3:d3:54:96:2f:52:92:c4:b6:b1:4c:
                    93:fa:db:0c:02:9b:b7:e3:ab:c9:67:99:05:37:fc:
                    dd:98:a2:91:d6:24:73:db:00:ae:b0:10:7d:dd:3f:
                    cb:fd:e0:b4:53:be:99:ca:29:e5:1e:40:4b:0a:bd:
                    1f:d6:3e:6d:a1:01:b4:94:ea:a1:26:53:6e:a4:57:
                    5e:2f:fc:86:20:18:1a:69:80:16:42:c8:b1:cb:3c:
                    76:ad:18:d7:40:24:48:c7:a0:92:3b:e1:01:00:d7:
                    cc:8d:4a:b1:e5:68:05:89:39:d0:6d:f4:4d:3e:07:
                    82:d6:05:5d:1a:6f:f6:8a:6e:83:d4:4c:36:ce:a8:
                    fc:00:10:1d:79:cf:1c:b9:fd:c7:2d:43:a3:4a:bc:
                    e1:e7:15:75:4e:e7:60:a9:03:ac:88:69:cd:58:f2:
                    12:e1:62:36:25:13:00:1e:db:d7:ad:a0:35:2a:c4:
                    5b:1f:5b:3e:af:fd:48:70:41:85:9c:19:3b:2d:26:
                    89:28:8d:1e:7b:e6:d3:87:9d:7a:d4:97:09:d1:f5:
                    de:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:0D:D8:3F:F1:69:2B:20:72:A8:31:2F:52:9D:68:65:CB:B5:0C:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/540DD83FF1692B2072A8312F529D6865CBB50CCE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.160.0/22
                IPv6:
                  2804:3c34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266196

    Signature Algorithm: sha256WithRSAEncryption
         1d:6e:3c:08:0e:c2:aa:f9:9c:74:51:cd:24:4e:e1:bf:7b:f9:
         7d:20:9b:d5:cb:89:ba:01:36:6a:58:bc:e3:84:45:7e:0e:9d:
         f6:e8:eb:67:0f:c5:b0:7c:21:1b:94:52:3e:28:d6:e6:88:31:
         31:d4:ac:6a:4f:27:48:07:8d:06:a5:0a:f8:5c:2c:00:32:50:
         2d:3d:2f:b4:00:f7:27:f0:44:6e:2e:51:e8:25:49:0b:f6:bb:
         9d:e7:be:1e:d7:61:c0:75:56:3b:5a:4d:d7:8d:2e:44:40:18:
         49:4b:40:bb:2d:c3:41:7f:a1:ca:f0:07:5d:a9:9e:7e:fa:fe:
         f9:b7:59:21:e8:f6:e5:c1:a7:40:4d:1f:a9:c5:a4:0a:b8:4a:
         77:d5:b5:f0:0e:e4:2e:06:21:bf:74:1a:51:d5:5a:02:84:77:
         49:0a:fa:81:f7:da:02:41:d4:d9:80:aa:5c:5e:36:0d:95:21:
         35:69:17:80:c7:de:47:7e:0a:a8:e9:1c:e4:4d:0b:a7:d6:29:
         81:b8:de:e4:9c:60:a0:a1:59:18:a7:0f:0f:cc:36:db:00:63:
         3c:14:36:23:ee:14:ff:09:31:c2:4e:50:94:48:b6:93:ff:28:
         e0:7b:65:e4:a6:6b:19:ca:32:f5:70:b2:9a:97:76:d0:02:37:
         89:59:2e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----