Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
File:                     59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer (raw, json)
Hash identifier:          S/xfimt0iHEVaxfmZ8kiwW3pAYb7ycmfLS+8Qj0ouKo=
Subject key identifier:   59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BDE9B4479AC6BC671E0A167F441C7EE2939C499
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 19:50:23 +0000
Certificate not after:    Thu 30 Jan 2025 19:55:23 +0000
Subordinate resources:    AS: 61637
                          IP: 131.100.132.0/22
                          IP: 2804:1c18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:de:9b:44:79:ac:6b:c6:71:e0:a1:67:f4:41:c7:ee:29:39:c4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 19:50:23 2024 GMT
            Not After : Jan 30 19:55:23 2025 GMT
        Subject: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f5:c0:9c:ba:8c:87:9d:7e:05:8e:d0:4e:e6:
                    97:e3:17:82:09:92:08:f1:21:fc:4e:a1:b1:d9:cd:
                    2e:76:b5:6a:90:97:96:4b:6c:39:e5:15:32:6a:46:
                    8f:11:b7:5e:b1:cf:42:09:02:49:63:97:32:00:e3:
                    c6:a0:fd:d1:61:08:0f:3f:d9:ce:fb:29:36:3c:e4:
                    a7:bf:88:22:9d:45:08:4e:a4:37:ba:fc:b7:ad:19:
                    9f:19:c6:8e:f2:6c:2a:73:2e:d4:4e:c2:77:9b:e5:
                    c3:ed:68:ae:3f:c9:3b:fb:61:71:04:42:62:b8:c5:
                    b0:d1:0b:b6:2a:3a:cd:2e:9a:40:2f:4f:6c:b1:c3:
                    b6:ef:cd:fa:fb:bd:2b:d2:95:6e:c5:a6:84:20:80:
                    07:05:56:89:86:88:8c:e9:31:9b:1c:7b:44:47:fa:
                    6e:c0:5e:87:cf:6e:eb:0f:29:93:2d:b1:cb:dd:90:
                    e9:da:58:83:e0:e1:00:d2:77:0d:bc:1a:9c:8f:00:
                    9b:fb:6e:67:b0:1d:79:e7:fc:35:30:ff:89:5c:43:
                    92:24:8c:10:4a:cd:e1:c9:4e:57:01:ec:7c:64:36:
                    1a:4d:6c:2b:51:c9:0b:2f:eb:a8:9e:74:91:f1:18:
                    40:b9:8f:83:24:b2:b8:e5:2c:56:d9:2d:3e:93:01:
                    f8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.132.0/22
                IPv6:
                  2804:1c18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61637

    Signature Algorithm: sha256WithRSAEncryption
         45:e1:9f:24:69:76:a7:4c:08:c0:df:67:68:60:3b:b0:4f:80:
         1a:3b:78:7f:4b:21:e5:e2:11:21:50:37:a6:67:9f:6f:a5:38:
         21:83:07:ef:72:30:b5:a7:25:f0:8e:f2:3b:ba:28:46:28:39:
         1c:42:29:b4:ed:af:da:31:24:ed:37:36:e0:b8:20:b3:4e:0d:
         0a:88:c8:b7:04:1b:02:84:80:5f:1b:7a:15:71:02:00:70:7c:
         ab:c7:e5:bb:48:b4:5a:17:2b:26:c7:4c:09:98:06:95:b8:df:
         02:9a:17:5f:01:ed:3e:d8:6c:cc:dd:36:fe:d1:50:70:d4:b3:
         ce:d2:35:0b:88:22:33:d9:82:44:7e:cb:3c:3f:c7:6c:87:41:
         87:f7:d3:20:9a:ad:44:6d:4a:eb:43:5e:bc:3d:93:8b:97:75:
         47:2b:c0:38:6a:d9:c4:f1:55:18:ac:14:18:4d:a8:d1:b4:1f:
         2b:c5:22:59:84:b2:90:90:54:81:84:fd:22:b7:0b:8b:fa:07:
         50:ea:b1:e5:76:98:4c:12:47:c0:42:67:bf:42:cf:e7:da:0b:
         bc:72:85:7e:b3:19:d8:69:2c:70:c3:44:30:20:94:93:b5:97:
         43:c7:76:46:17:88:ac:82:c9:9b:6b:21:50:dd:30:e7:dd:24:
         f8:f2:bb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----