Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5D1C01661F76337C537B616528DEE8BDB3C55925.cer
File:                     5D1C01661F76337C537B616528DEE8BDB3C55925.cer (raw, json)
Hash identifier:          WRGXYd+w/K+dT1qqkYt3v8eLBvlsC7V2uQ6F9z2JF18=
Subject key identifier:   5D:1C:01:66:1F:76:33:7C:53:7B:61:65:28:DE:E8:BD:B3:C5:59:25
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E63525CC3FEA6F91499D13FA396D287B6387BDF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5D1C01661F76337C537B616528DEE8BDB3C55925.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Mar 2024 18:08:22 +0000
Certificate not after:    Thu 27 Mar 2025 18:13:22 +0000
Subordinate resources:    AS: 270878
                          IP: 186.194.0.0/22
                          IP: 2804:72d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:63:52:5c:c3:fe:a6:f9:14:99:d1:3f:a3:96:d2:87:b6:38:7b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 18:08:22 2024 GMT
            Not After : Mar 27 18:13:22 2025 GMT
        Subject: CN=5D1C01661F76337C537B616528DEE8BDB3C55925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:e5:9f:a7:fd:95:ed:7c:67:6c:05:28:41:
                    f1:9b:f0:6f:82:d6:42:2b:49:14:28:e3:40:25:5c:
                    cd:f6:1a:3c:62:e7:85:fc:39:0d:43:9e:cd:46:35:
                    26:cf:86:a7:23:79:2a:82:60:81:de:06:90:1f:94:
                    75:d4:7e:2d:57:36:62:c6:ae:72:5d:32:26:49:47:
                    a9:94:7b:1f:8e:5a:26:18:c7:94:ed:d8:1e:db:17:
                    b6:83:72:e8:33:9f:8e:42:4d:b9:6e:0a:5b:cf:09:
                    51:00:d2:a7:8d:b2:eb:2f:c6:1d:df:c9:e2:da:72:
                    ce:7b:28:77:00:27:28:a0:eb:70:79:c6:55:9c:2f:
                    b8:41:75:75:c5:40:b9:95:99:d5:14:d3:8a:4e:79:
                    9e:ef:51:b7:7d:3d:16:84:63:03:11:b1:9b:8d:08:
                    84:6a:18:3e:fb:6a:a0:1e:33:9f:3a:63:2c:84:0a:
                    91:7b:a0:f7:0f:ad:89:da:91:f5:86:42:27:db:49:
                    0b:a6:f7:87:17:35:e3:6c:c7:db:02:bc:a6:8d:ae:
                    58:a9:c3:16:ec:86:66:cb:ea:c1:61:47:42:89:91:
                    7f:26:08:a4:ca:4d:8a:8f:3d:95:dc:86:42:75:82:
                    a0:87:06:6f:52:2a:14:48:24:f1:7f:2e:91:d1:7e:
                    f9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:1C:01:66:1F:76:33:7C:53:7B:61:65:28:DE:E8:BD:B3:C5:59:25
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5D1C01661F76337C537B616528DEE8BDB3C55925.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.0.0/22
                IPv6:
                  2804:72d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270878

    Signature Algorithm: sha256WithRSAEncryption
         04:fb:40:a2:9d:37:24:1e:b7:88:ff:c0:42:bf:fc:2f:b0:1b:
         01:d6:d5:d7:07:71:05:b1:ea:de:84:33:61:dd:59:9d:91:67:
         1f:8a:2e:5c:d8:80:fc:61:a1:1a:2c:60:c1:29:d8:1b:13:06:
         fc:d0:86:32:d7:23:2c:0d:3b:b4:e8:4d:c7:91:91:db:f8:40:
         72:17:7d:cf:3c:d4:ea:6e:42:9c:67:bb:a6:78:60:8e:ea:45:
         76:5b:2a:3e:30:9b:79:e1:6a:d6:0b:94:ad:f0:6b:4d:ca:6b:
         ff:29:25:57:5e:04:74:3c:90:8d:14:3d:bf:33:95:00:e1:fe:
         59:4a:78:36:fc:a0:c5:3c:9f:1c:03:e1:6d:1b:7a:7c:52:d8:
         c5:1b:04:06:a5:94:f0:24:55:ac:0f:17:ca:df:c0:82:9f:8c:
         e2:e4:2d:f7:fb:0d:b8:76:41:14:11:08:42:88:ea:a0:ac:27:
         1b:5d:6c:e7:62:4d:eb:58:25:f5:18:49:62:e3:53:a1:78:a6:
         a3:6d:0f:82:dd:3d:4d:00:78:a6:fb:4e:c7:5e:a1:57:0b:92:
         73:8a:2c:d5:d7:75:f8:a5:0b:ca:68:82:dc:b8:66:cd:8b:55:
         d5:80:0e:76:cc:32:33:8d:c5:d0:92:a2:e3:39:81:20:34:90:
         07:d4:6a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----