Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.cer
File:                     5EF0E2598B718F5793DF38CEF3A68EE38E017C06.cer (raw, json)
Hash identifier:          LGIFBVzwI3SM0v/aknw2oZRCLiBVTWzN4JSoEPhgJAM=
Subject key identifier:   5E:F0:E2:59:8B:71:8F:57:93:DF:38:CE:F3:A6:8E:E3:8E:01:7C:06
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7DF89D2812690359D6671FF58EB9B89780957CC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 12:39:49 +0000
Certificate not after:    Tue 11 Feb 2025 12:44:49 +0000
Subordinate resources:    AS: 267594
                          IP: 45.70.188.0/22
                          IP: 2804:43d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f8:9d:28:12:69:03:59:d6:67:1f:f5:8e:b9:b8:97:80:95:7c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 12:39:49 2024 GMT
            Not After : Feb 11 12:44:49 2025 GMT
        Subject: CN=5EF0E2598B718F5793DF38CEF3A68EE38E017C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f5:0f:18:a7:85:13:10:72:83:36:79:15:0f:
                    8c:09:5d:f4:43:cb:94:1c:dd:80:3d:6d:01:c6:0a:
                    2f:67:19:c0:ad:95:19:4a:5a:68:ff:fe:28:c9:e4:
                    e1:fb:23:25:ab:d1:71:f8:44:4d:20:49:97:23:f5:
                    a8:5b:05:9f:aa:04:51:a8:33:d6:64:77:97:43:38:
                    a8:c8:13:ab:3d:50:7b:14:94:8e:4c:50:1d:df:65:
                    ed:d4:5f:b4:cd:90:74:92:73:f2:e6:06:f7:0f:33:
                    52:a6:14:46:c2:b9:55:85:da:7a:1e:24:3f:ad:37:
                    05:7e:07:f3:82:cf:80:0d:5a:3b:58:5a:9f:a6:53:
                    4e:e9:07:d9:1e:0b:c5:d9:94:09:a9:8e:95:eb:3e:
                    4b:2e:e8:d4:b7:06:69:3a:6a:da:5d:d7:1c:38:67:
                    e1:31:b3:ed:8a:17:30:53:b5:47:37:c1:8b:73:a0:
                    96:46:4e:0e:10:3e:38:3e:f5:5b:b9:04:a4:26:df:
                    42:3b:ee:9a:a2:d5:6e:40:20:6c:43:3e:ad:08:b0:
                    3e:8b:10:9a:d7:ae:9f:e2:c7:e0:96:da:55:23:cd:
                    df:2e:f2:e6:b4:7b:c8:5a:27:4c:26:18:9d:1d:8a:
                    63:e9:a2:7f:d6:b7:ab:7b:58:74:9c:3a:8c:88:c0:
                    d4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:F0:E2:59:8B:71:8F:57:93:DF:38:CE:F3:A6:8E:E3:8E:01:7C:06
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.188.0/22
                IPv6:
                  2804:43d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267594

    Signature Algorithm: sha256WithRSAEncryption
         94:e1:e2:77:cf:33:21:50:6d:de:7c:96:2b:bf:b8:df:36:d6:
         1a:47:c0:bb:4d:71:34:b1:05:31:82:4f:51:9b:e2:b2:42:f8:
         b9:d1:b0:3f:82:50:d7:67:9b:2f:d4:42:57:3c:b2:26:29:d2:
         1d:cf:bb:2b:b9:b8:7f:d1:dc:10:2e:53:f1:00:95:4e:c4:2a:
         7a:b2:32:4a:69:24:92:19:51:c4:82:57:56:df:ed:79:81:0d:
         d5:49:b1:7a:1e:bc:1a:c7:02:94:3f:b5:ac:00:20:7e:6f:2c:
         77:de:e9:bd:4f:6a:48:a0:7f:93:14:fa:4a:47:f6:c0:a5:3a:
         9d:d0:d2:a9:49:ff:2a:d0:21:11:0c:fc:69:06:e0:7e:a6:94:
         55:41:db:ac:8b:18:74:fe:8f:96:32:9b:7b:5a:5b:3d:8c:95:
         3c:e8:41:01:55:33:7f:c4:15:54:db:dd:18:1a:83:30:12:62:
         25:ec:eb:37:de:2b:34:06:8c:11:39:f0:54:56:39:e4:3d:b9:
         48:53:a6:d4:53:c9:c6:bd:7d:52:f6:cd:57:bd:f9:82:1e:05:
         87:e3:dd:a0:bd:2c:4f:5e:d2:3d:95:26:2c:9b:9c:8f:3b:45:
         8a:7c:22:4f:49:f2:75:bf:e5:01:0c:83:42:bc:eb:4c:a1:94:
         95:0f:3f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----