Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5442614336999E86885B6AC9A40CA8953FC17D75.cer
File:                     5442614336999E86885B6AC9A40CA8953FC17D75.cer (raw, json)
Hash identifier:          +nuHHariyDHdSbrqicKDKboZIC9IkEo4exzU6xfgeo8=
Subject key identifier:   54:42:61:43:36:99:9E:86:88:5B:6A:C9:A4:0C:A8:95:3F:C1:7D:75
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A08E2D7F0946A4186266CA220E9890FBB17D5F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/5442614336999E86885B6AC9A40CA8953FC17D75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Oct 2023 02:50:34 +0000
Certificate not after:    Wed 09 Oct 2024 02:55:34 +0000
Subordinate resources:    AS: 263480
                          IP: 191.242.204.0/22
                          IP: 2804:1280::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:08:e2:d7:f0:94:6a:41:86:26:6c:a2:20:e9:89:0f:bb:17:d5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 11 02:50:34 2023 GMT
            Not After : Oct  9 02:55:34 2024 GMT
        Subject: CN=5442614336999E86885B6AC9A40CA8953FC17D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:58:26:85:8f:69:33:c7:63:25:4b:2c:85:
                    ba:13:16:7d:05:b2:a9:58:c2:27:c5:b8:31:fe:e1:
                    de:4d:ed:09:24:3f:98:c0:1c:cb:81:fc:3c:4b:31:
                    f5:70:e6:d0:6e:ea:90:7f:4e:8a:1f:2f:c5:ae:9b:
                    25:32:1f:3c:05:3b:5d:07:1f:74:91:18:93:1d:23:
                    32:f6:25:a6:2f:19:60:d6:cc:4b:75:33:c8:2b:0e:
                    1f:6e:9b:34:bf:d2:3e:4a:76:b6:6c:65:b3:bb:2d:
                    e5:06:b2:ce:c6:f5:25:f1:bc:4d:78:b9:b9:e5:37:
                    90:a7:82:20:1c:0b:b5:70:15:fe:79:c9:1f:a3:72:
                    41:a7:63:6d:f5:49:ae:ca:cd:89:d3:31:af:bb:c0:
                    8b:09:04:e4:35:c8:27:a3:bc:3a:2d:89:50:68:20:
                    64:70:31:90:3f:37:1d:83:2e:7c:e2:52:aa:a2:40:
                    14:9e:d3:ee:4e:33:08:73:83:20:0b:58:b2:88:f1:
                    99:28:6a:fe:ac:07:48:5d:78:fd:e9:16:9b:8a:52:
                    93:2d:eb:7d:1e:1a:ca:76:45:3a:1b:93:1c:be:f1:
                    11:2b:44:0d:50:52:80:56:21:6e:49:1c:e7:9e:b7:
                    c7:5b:f7:0b:cc:0b:fd:22:69:eb:99:d3:be:4d:d9:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:42:61:43:36:99:9E:86:88:5B:6A:C9:A4:0C:A8:95:3F:C1:7D:75
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/5442614336999E86885B6AC9A40CA8953FC17D75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.204.0/22
                IPv6:
                  2804:1280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263480

    Signature Algorithm: sha256WithRSAEncryption
         50:76:2e:c7:1f:ea:48:c1:46:30:dd:86:8e:2f:5f:49:5e:4b:
         e4:5b:6d:37:c7:7f:dc:03:ae:d9:ce:e8:07:0a:47:89:9a:74:
         a8:a7:9d:db:3b:a3:84:49:50:4c:29:a8:01:8e:b0:04:5e:4c:
         42:df:87:c8:1b:21:28:9b:5c:e3:23:4c:bc:6e:c9:7a:ba:f9:
         a5:75:76:6d:87:8e:7f:7c:f6:79:79:ab:55:86:a5:1a:40:31:
         e8:e6:3d:b1:15:bf:80:23:9b:33:b2:a2:a5:76:1b:95:29:12:
         38:3f:e2:af:c6:34:7d:8d:31:64:ec:c0:d5:3c:ee:3d:48:ab:
         17:e4:32:8e:0c:fc:07:fe:e7:48:37:87:97:ca:bf:fb:b7:bd:
         8a:5c:0c:1b:33:86:bf:5f:83:35:14:7d:0e:f3:a5:8d:97:93:
         3b:58:11:1f:56:46:15:94:66:4c:84:1f:ed:77:d2:fc:6d:19:
         5e:80:f7:35:aa:0b:78:e2:05:b5:44:b8:2e:f8:72:fb:fa:33:
         36:af:60:70:5b:d7:35:f4:7f:ce:e9:52:61:d4:67:35:96:ce:
         f7:51:c8:9b:9d:d3:26:cc:67:80:25:af:da:50:89:d5:b9:b6:
         7d:70:5c:62:84:15:2c:1b:4e:59:e5:3a:04:f8:d0:80:d5:46:
         b3:4d:1c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----