Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/63D025C813765015C5A952A7FA93C945BAAB0B2C.cer
File:                     63D025C813765015C5A952A7FA93C945BAAB0B2C.cer (raw, json)
Hash identifier:          pkh6q2FulzzO0eJsdE80GLNS8vlP7qBnbzeN0IKDCHU=
Subject key identifier:   63:D0:25:C8:13:76:50:15:C5:A9:52:A7:FA:93:C9:45:BA:AB:0B:2C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59D114E4DF561DA740AE1AB9F647B2FFBC8FC400
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/0/63D025C813765015C5A952A7FA93C945BAAB0B2C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 14:12:14 +0000
Certificate not after:    Mon 27 Jan 2025 14:17:14 +0000
Subordinate resources:    AS: 267101
                          IP: 45.228.32.0/22
                          IP: 2804:4828::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d1:14:e4:df:56:1d:a7:40:ae:1a:b9:f6:47:b2:ff:bc:8f:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 29 14:12:14 2024 GMT
            Not After : Jan 27 14:17:14 2025 GMT
        Subject: CN=63D025C813765015C5A952A7FA93C945BAAB0B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:33:92:7f:8e:62:83:1f:1c:6a:12:11:33:
                    37:b8:18:9b:db:8f:e0:5a:e6:53:58:e5:69:8b:df:
                    21:88:95:99:bc:bc:95:21:49:2b:90:40:98:85:03:
                    50:42:d5:9c:c3:34:b9:ae:aa:e3:93:16:1e:04:d1:
                    d1:05:9f:13:4c:7a:bb:52:e9:42:62:22:6a:85:d0:
                    b8:4c:ce:37:d0:3f:12:b6:ea:1f:7e:ae:66:42:35:
                    00:ba:40:f1:e7:ed:c2:ea:ea:fd:0e:d7:7d:c7:08:
                    71:79:9f:8b:09:b4:dd:a9:8b:d6:71:9d:ab:af:2b:
                    e4:57:6d:e2:67:f4:9d:af:be:6b:b5:02:c5:f9:29:
                    54:46:74:4d:30:25:e9:0c:81:e3:88:be:a4:dc:b7:
                    e4:5f:e8:77:36:a2:4e:b5:d4:14:e7:9b:ba:e3:f1:
                    f9:4a:cf:80:e4:bd:17:49:01:8b:36:a1:74:75:a4:
                    ca:e4:f0:01:a8:7e:90:ee:e6:72:48:c1:54:74:08:
                    dd:b1:40:8b:3c:ff:e6:16:31:b7:8e:0b:ea:e3:8c:
                    b5:8d:40:ac:2e:64:75:69:69:fc:fe:b2:9e:94:46:
                    e8:8e:36:72:27:3b:8c:79:8d:14:d7:ff:22:46:39:
                    5a:e1:1c:bf:b0:1b:48:35:75:a5:5f:e0:18:04:9b:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:D0:25:C8:13:76:50:15:C5:A9:52:A7:FA:93:C9:45:BA:AB:0B:2C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/0/63D025C813765015C5A952A7FA93C945BAAB0B2C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.32.0/22
                IPv6:
                  2804:4828::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267101

    Signature Algorithm: sha256WithRSAEncryption
         b5:cf:11:2d:54:bd:7f:eb:3f:a2:a0:55:c7:4a:fb:52:f9:01:
         c9:90:7a:24:55:f8:86:d9:13:f1:6c:c8:2f:69:4e:8c:0d:9f:
         c7:bf:6e:cc:3a:da:31:3e:50:2e:f7:d2:57:91:30:be:f4:c1:
         42:1a:2d:58:cd:56:71:b8:c8:c0:d0:1f:b9:36:6d:a5:68:19:
         52:8b:91:fb:43:ee:47:17:2a:2c:dc:49:be:6b:c0:9a:e8:ce:
         53:cd:f8:81:d9:e2:79:1a:09:f8:8b:c9:6d:34:fb:a4:7c:1d:
         02:69:33:39:78:b2:91:64:b5:4a:46:a6:4f:65:ba:03:d1:0d:
         97:17:df:dd:43:0f:88:38:88:91:88:07:81:c5:93:4c:70:1e:
         f2:58:da:d8:db:36:ef:88:5b:c9:64:95:17:49:90:52:ce:d7:
         97:7d:30:2c:66:09:fe:df:a2:3b:c7:9f:9f:a3:4f:c4:63:6f:
         49:5c:b0:67:ac:ec:2f:4d:87:42:be:20:bb:2b:cb:89:3a:ef:
         e9:51:ba:0a:78:25:8b:a2:3a:78:fd:11:0c:e3:73:88:82:54:
         af:9d:52:0b:1f:de:03:b6:fa:36:47:a8:2e:9a:3c:82:27:35:
         9d:dc:8f:ce:f4:16:c6:13:1e:9c:6e:5e:d3:95:dc:62:3d:bd:
         69:2b:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----