Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5A2C66D63C82416370538243B702B510C0098794.cer
File:                     5A2C66D63C82416370538243B702B510C0098794.cer (raw, json)
Hash identifier:          gQD3md7U7MjXYRXclVq/ihc22O2U5CWbL2+ibE2PU4I=
Subject key identifier:   5A:2C:66:D6:3C:82:41:63:70:53:82:43:B7:02:B5:10:C0:09:87:94
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       48A7B294486A21A3309DE8E91774ECF1928E0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0/5A2C66D63C82416370538243B702B510C0098794.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 21:35:08 +0000
Certificate not after:    Mon 24 Feb 2025 21:40:08 +0000
Subordinate resources:    AS: 267233
                          IP: 45.231.60.0/22
                          IP: 2804:4a54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a7:b2:94:48:6a:21:a3:30:9d:e8:e9:17:74:ec:f1:92:8e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 26 21:35:08 2024 GMT
            Not After : Feb 24 21:40:08 2025 GMT
        Subject: CN=5A2C66D63C82416370538243B702B510C0098794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:66:03:75:b1:35:a6:4c:26:03:02:3c:dd:
                    a3:f7:67:61:02:c7:59:be:92:e2:b6:36:0c:dc:21:
                    ab:a1:46:1e:a7:33:84:a4:b4:0b:aa:7a:5b:7c:7d:
                    74:20:65:a9:f9:be:fe:fd:14:2c:fd:c7:c3:08:46:
                    43:38:1b:3a:be:82:38:1c:50:1f:65:1a:a7:6f:a3:
                    e6:ab:62:47:87:a6:e4:71:a3:58:f0:b5:8a:15:37:
                    b9:23:5f:81:84:23:81:d7:8d:79:9d:a4:61:d5:36:
                    f0:ff:71:c7:39:ff:fa:76:3f:33:f0:82:d6:ba:62:
                    42:71:1b:f2:f6:47:0e:b0:5c:f7:c7:36:a2:1f:25:
                    62:06:7f:ee:34:cd:ff:6c:70:91:8e:27:6c:f6:ad:
                    be:92:65:29:5d:a5:1f:f5:95:05:b4:05:b6:5b:71:
                    19:b1:8a:d2:4b:75:04:ce:f2:63:c7:5c:26:cb:44:
                    1c:0a:8a:4c:85:7c:d0:ae:d2:fd:d3:42:f7:95:d3:
                    c7:11:4b:00:10:3a:f9:1d:a0:34:fe:7c:8b:dc:ca:
                    9d:d3:60:75:65:8b:be:ad:f0:8c:2b:e1:84:7b:fc:
                    3d:7d:39:b2:c9:0f:40:35:08:87:a7:42:2e:14:f4:
                    31:93:22:10:17:53:22:6c:b6:a8:28:fd:42:e1:db:
                    80:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:2C:66:D6:3C:82:41:63:70:53:82:43:B7:02:B5:10:C0:09:87:94
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0/5A2C66D63C82416370538243B702B510C0098794.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.60.0/22
                IPv6:
                  2804:4a54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267233

    Signature Algorithm: sha256WithRSAEncryption
         1d:ab:c9:72:d3:3c:0b:30:56:c1:d4:af:8d:12:01:fc:2d:e6:
         1d:7b:5b:9e:eb:73:6f:5e:ba:1c:dc:13:93:c9:ee:83:36:e4:
         d8:86:1d:ff:9f:73:03:1e:90:18:cd:bd:a1:6e:1a:0f:04:04:
         07:12:43:ae:be:6c:df:47:fa:20:88:90:28:64:12:64:cb:8e:
         06:ef:be:e1:7f:76:8e:7c:b6:f3:d0:a4:aa:fb:8d:10:4b:93:
         b0:6e:9b:21:ab:fe:c7:07:a7:44:41:b3:a8:70:f7:92:9f:5b:
         c4:a0:94:07:1c:5e:a2:35:e6:79:d9:97:87:37:01:c9:3a:bb:
         a7:aa:ec:67:64:71:01:70:f0:66:93:b9:fd:d0:31:08:91:94:
         b0:e6:50:10:fa:1c:76:32:e3:6e:1e:da:b7:73:f7:d5:6e:4f:
         87:6c:50:03:d0:15:55:06:63:ea:96:ea:17:3a:63:2e:c8:ff:
         27:14:f4:fd:87:03:14:68:c0:81:5d:f9:87:e0:8f:0a:b6:72:
         f9:bf:28:36:2c:cc:79:16:ce:f0:4c:13:3b:76:17:b3:50:3d:
         8e:18:ff:77:7c:ac:d9:21:84:43:27:35:40:5a:03:97:70:c4:
         dd:3b:67:44:ac:27:d7:e1:3d:5f:53:cb:80:d1:6a:dc:c3:d5:
         5f:cb:98:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----