Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer
File:                     8385AA20FCB01184811054ADA6C4B37FC0652175.cer (raw, json)
Hash identifier:          szL0ALJ+0BL570+gvDoVM14P3qDNeL+OJjs5QlTujRo=
Subject key identifier:   83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       56C2F75416728BC6ABD4957E20BA08391DD4A005
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/8385AA20FCB01184811054ADA6C4B37FC0652175.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Feb 2024 20:15:48 +0000
Certificate not after:    Thu 06 Feb 2025 20:20:48 +0000
Subordinate resources:    AS: 265078
                          IP: 170.233.112.0/22
                          IP: 2804:3270::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c2:f7:54:16:72:8b:c6:ab:d4:95:7e:20:ba:08:39:1d:d4:a0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  8 20:15:48 2024 GMT
            Not After : Feb  6 20:20:48 2025 GMT
        Subject: CN=8385AA20FCB01184811054ADA6C4B37FC0652175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:96:7a:03:f1:56:53:bc:a6:66:89:37:d2:
                    9f:c9:26:39:0f:de:21:5a:48:7e:78:eb:4e:a3:0d:
                    f5:50:2e:32:90:c4:4c:cc:80:db:06:85:3d:e5:cc:
                    62:15:c1:d7:e4:0f:2d:ed:96:2d:e0:be:ab:d6:75:
                    6b:58:cb:25:82:27:41:27:0a:af:f7:3d:d2:de:b2:
                    bc:73:48:57:fd:2c:05:a2:01:8e:f1:c2:09:69:51:
                    52:fe:63:dd:da:26:fe:43:c2:3c:62:4e:a1:f2:d7:
                    f4:f4:a0:63:e3:d3:a3:bb:8a:e0:d7:69:bf:79:64:
                    47:35:7d:3d:bc:f7:54:c9:c8:8f:8f:24:20:aa:7b:
                    08:30:29:93:4a:10:3f:13:dd:03:2f:24:a4:fa:b1:
                    61:ea:00:6c:f5:ff:c2:43:e9:3b:0b:3c:d6:5e:03:
                    18:c8:ff:7c:a6:79:5a:75:50:67:0a:dd:eb:4e:2f:
                    49:c6:18:47:82:33:ab:94:d2:5f:03:ff:c5:02:18:
                    b8:99:38:30:27:ca:e6:8a:a5:95:c0:07:4d:9f:d6:
                    ac:b1:bb:75:03:d8:48:f6:1a:68:37:23:02:fe:22:
                    df:8c:0d:7e:a9:48:20:34:0e:9e:6f:64:42:3a:c7:
                    d2:85:b9:bf:ba:68:71:16:f1:94:c3:39:f4:2a:03:
                    ca:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/8385AA20FCB01184811054ADA6C4B37FC0652175.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.112.0/22
                IPv6:
                  2804:3270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265078

    Signature Algorithm: sha256WithRSAEncryption
         45:ef:2a:e6:00:cb:07:86:b7:44:db:57:fe:d1:b3:53:49:98:
         fb:ea:0b:2a:83:33:48:ae:b5:8c:d9:19:26:eb:c8:91:37:a4:
         39:3c:53:4a:79:d5:19:6e:ea:a0:4d:b2:47:23:58:47:c9:4a:
         95:26:08:9b:e7:54:12:97:80:6d:3e:cb:4e:1f:1a:f9:e2:bf:
         7d:71:63:0e:bc:f7:93:0b:e9:b5:01:ea:43:1e:4b:f3:b1:4d:
         c5:31:42:b8:16:e6:3b:75:8b:ce:05:00:50:cf:59:de:56:2a:
         88:6e:dd:af:ab:f4:cd:a5:a9:84:8d:c4:19:1d:f7:f3:75:a1:
         31:b8:f0:0d:96:44:44:d7:b7:82:5e:15:a7:e1:bd:90:76:30:
         e3:0f:64:48:3d:64:f6:c8:4b:5b:53:fc:91:69:a8:c4:eb:d6:
         bd:2b:48:56:e3:33:62:11:3e:ab:fe:d5:83:5a:15:1c:a0:f7:
         b5:f6:db:2b:99:5e:b6:b9:81:23:9c:e2:33:81:99:ae:19:c3:
         d6:5d:a6:60:20:d4:2e:3a:c7:61:39:dc:e7:3e:c9:93:77:e6:
         d8:97:8c:94:32:fd:b3:7a:15:cc:f9:5d:ce:0c:b1:ce:d8:a2:
         d2:c0:72:ec:81:af:e7:1b:00:e1:09:ae:40:7a:4c:23:90:df:
         61:62:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----