Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/763407673C9EDBA6822EBD00C9DEC6F5C34BECC0.cer
File:                     763407673C9EDBA6822EBD00C9DEC6F5C34BECC0.cer (raw, json)
Hash identifier:          Ixo45GZZoegR3kohZrb9XBkjqnFYS2QUpZsxFh3n2N8=
Subject key identifier:   76:34:07:67:3C:9E:DB:A6:82:2E:BD:00:C9:DE:C6:F5:C3:4B:EC:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A506BCD749CF9D24098C01AF7EC5FD55E727D6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/763407673C9EDBA6822EBD00C9DEC6F5C34BECC0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 12:56:55 +0000
Certificate not after:    Wed 19 Mar 2025 13:01:55 +0000
Subordinate resources:    AS: 267548
                          IP: 201.182.184.0/22
                          IP: 2804:4318::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:50:6b:cd:74:9c:f9:d2:40:98:c0:1a:f7:ec:5f:d5:5e:72:7d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 12:56:55 2024 GMT
            Not After : Mar 19 13:01:55 2025 GMT
        Subject: CN=763407673C9EDBA6822EBD00C9DEC6F5C34BECC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:ea:44:3a:7a:3d:23:01:62:9b:b9:97:01:
                    e7:b5:de:87:bc:ca:de:e1:28:aa:41:37:21:33:a5:
                    07:c9:4b:23:ff:36:b5:d3:c4:90:b7:2a:28:dc:d8:
                    1c:d3:14:d1:75:f5:fd:d9:fb:ae:7f:7e:bc:a1:c2:
                    90:f2:bf:01:d2:22:c0:d6:dc:56:ec:05:ea:9b:3d:
                    a3:c6:4c:5f:d7:0e:3a:0e:e4:f6:12:b5:c8:a5:76:
                    e5:ee:66:e2:fe:76:08:66:4c:58:ea:91:31:a2:7d:
                    b3:17:41:8c:9d:d3:9c:ea:9b:27:c8:f5:df:5f:4a:
                    5b:31:d5:e9:8b:64:41:3b:dd:94:d1:a3:ed:1a:61:
                    2e:17:e5:2c:5b:76:68:db:02:d6:2f:0d:c9:01:6f:
                    ed:c0:e9:fd:e5:06:ba:8c:6a:4c:51:25:1a:3a:3b:
                    e8:a5:17:a3:48:c5:80:97:e5:30:e7:d8:c2:79:55:
                    02:53:5d:cc:bd:6c:3b:36:dc:b6:57:fd:8e:54:ed:
                    62:fe:33:25:d9:dc:3f:c7:a3:98:1d:53:7d:49:79:
                    6a:9d:ea:89:90:90:21:35:25:73:c4:91:fe:3e:34:
                    69:1c:69:1b:9f:10:d3:6e:5d:2a:31:ed:dc:d7:07:
                    af:c9:3d:e0:d7:b5:e0:d8:6c:9c:d7:14:e0:aa:92:
                    98:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:34:07:67:3C:9E:DB:A6:82:2E:BD:00:C9:DE:C6:F5:C3:4B:EC:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/763407673C9EDBA6822EBD00C9DEC6F5C34BECC0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.184.0/22
                IPv6:
                  2804:4318::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267548

    Signature Algorithm: sha256WithRSAEncryption
         3e:6e:77:47:19:2e:0e:4f:c8:08:67:2a:cf:5a:37:25:a1:df:
         39:83:b5:b0:01:ac:0c:e9:7c:76:15:17:ff:bd:3d:8b:74:7c:
         7b:af:ea:a7:90:db:c7:90:14:df:2a:dc:4d:96:48:63:4a:33:
         82:e1:f0:75:70:1d:b5:0b:63:0e:12:c4:63:0e:7e:a8:5a:72:
         97:34:a9:b1:d6:f6:87:b6:60:d3:b0:6d:be:8c:1a:ad:cd:94:
         0e:f4:c4:21:66:37:42:8f:c6:c4:ab:32:80:f5:a9:8d:02:2e:
         06:d1:aa:60:77:f9:02:e7:f3:f4:6f:67:54:3e:36:48:95:19:
         ab:10:ed:83:36:fc:b4:3f:3c:90:b8:b5:e0:29:1f:db:cc:ac:
         5d:21:31:4c:8e:08:29:b7:14:7d:96:3d:97:93:bf:fb:4d:0a:
         73:e6:b5:3a:69:40:2a:e3:92:7c:62:b2:1b:04:60:91:78:a7:
         0e:ff:32:61:3e:90:02:8c:e4:7d:d1:5a:f4:a0:4a:84:63:a1:
         14:cd:d3:22:6a:ac:fd:1e:1c:02:0b:e8:1d:1b:6d:ed:7d:71:
         c5:64:a6:a3:e2:a2:b6:77:17:2d:29:d8:b7:4e:6a:74:a0:54:
         f3:08:38:a2:e4:87:14:e0:9e:92:39:49:a2:25:32:99:16:e5:
         f9:ac:19:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----