Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7E19D306A8F5D2160C51E73D76E363F08A42A7A5.cer
File:                     7E19D306A8F5D2160C51E73D76E363F08A42A7A5.cer (raw, json)
Hash identifier:          dQkyGeYCZ8ZCT3mntcQ+5IZln8INBVEECNOAq0kx1Ck=
Subject key identifier:   7E:19:D3:06:A8:F5:D2:16:0C:51:E7:3D:76:E3:63:F0:8A:42:A7:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       55658073080525EDA8718D17FE8694EB72BC77BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/7E19D306A8F5D2160C51E73D76E363F08A42A7A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2024 00:21:52 +0000
Certificate not after:    Thu 13 Mar 2025 00:26:52 +0000
Subordinate resources:    AS: 273756
                          IP: 2804:8bc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:65:80:73:08:05:25:ed:a8:71:8d:17:fe:86:94:eb:72:bc:77:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 00:21:52 2024 GMT
            Not After : Mar 13 00:26:52 2025 GMT
        Subject: CN=7E19D306A8F5D2160C51E73D76E363F08A42A7A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:4b:49:02:3c:b4:b2:a3:89:54:3c:f3:b1:
                    9f:ba:78:87:30:6c:29:c9:36:72:8e:92:7b:65:16:
                    d0:12:f6:c3:21:ec:8f:66:7a:d1:09:3d:f5:21:62:
                    37:c9:ed:49:76:6c:be:14:06:be:e6:d7:f9:7e:69:
                    4f:2b:bb:cb:26:cc:d5:23:44:be:63:29:29:c6:6a:
                    ac:ba:93:20:9d:30:de:bf:bb:7d:e8:d2:5c:6f:a2:
                    ec:24:53:a3:06:e4:ce:08:44:10:02:e9:a5:f5:3a:
                    2d:9f:61:3e:45:b2:5f:73:91:35:c6:15:53:54:f4:
                    1d:f5:7b:b2:e3:dd:fe:9f:2a:36:22:c7:7d:6e:09:
                    d7:be:94:f0:30:bf:3d:92:6d:05:e4:fd:20:45:6b:
                    69:ef:d6:90:a5:5d:b4:9a:30:d5:cc:1a:ea:3b:b0:
                    f2:ed:63:fb:c8:50:ef:a8:2d:9a:31:f9:d2:ee:26:
                    2c:ca:80:a0:59:76:dc:b8:31:ef:6c:af:ae:9a:b2:
                    e1:df:89:9b:4b:33:47:b0:f8:bd:01:0e:fe:87:74:
                    a3:fa:bc:3c:2c:24:86:df:c3:bc:27:3f:49:7a:6b:
                    9b:6a:fe:66:be:06:d9:23:91:fa:39:98:ef:a3:d9:
                    48:a3:c7:0d:1a:9c:d1:42:5d:d1:f3:47:3f:ae:54:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:19:D3:06:A8:F5:D2:16:0C:51:E7:3D:76:E3:63:F0:8A:42:A7:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/7E19D306A8F5D2160C51E73D76E363F08A42A7A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273756

    Signature Algorithm: sha256WithRSAEncryption
         16:42:d8:90:8b:92:56:16:b0:8a:fe:2b:89:8b:9b:9e:28:6a:
         93:72:b3:bf:e8:f3:b3:a1:92:3b:87:65:73:ed:7d:2d:73:cd:
         e2:81:7f:63:61:d3:1b:67:ba:80:b8:5e:0e:a6:5d:15:8d:05:
         46:9e:77:e8:ed:e3:df:f7:ca:e5:58:82:4c:41:96:ee:bd:81:
         c4:65:a7:2e:df:29:74:d2:fd:8f:d3:1a:2f:e0:be:cb:c4:d6:
         d1:25:83:d9:b9:00:62:44:96:28:64:b5:da:4e:fd:b4:a5:ec:
         e4:eb:db:ac:b4:44:d7:49:fa:d3:d6:b4:74:3e:a8:29:51:cc:
         af:46:0b:1a:26:25:8c:fc:e9:29:38:68:59:ef:7b:9f:34:a0:
         94:42:cf:dc:3a:48:71:d2:29:6a:ee:69:3a:5e:04:e4:8a:81:
         aa:e5:c4:8f:68:aa:30:9a:ec:54:f5:e9:ca:39:9d:c9:12:1a:
         ba:83:f0:0f:96:ea:c6:59:a9:2b:5d:44:68:dc:35:93:a2:48:
         a2:80:9c:ed:76:11:44:1c:1c:51:ee:81:aa:26:93:b2:59:7e:
         79:8b:9d:07:e5:68:98:1f:5c:bc:b2:25:32:0d:01:ed:40:dd:
         88:ae:4a:3a:4e:9c:da:7a:c4:36:10:90:3f:a2:0b:25:28:d3:
         e6:11:ef:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----