Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8440593C9AC1E6069C1BA534B55E08344C8627E4.cer
File:                     8440593C9AC1E6069C1BA534B55E08344C8627E4.cer (raw, json)
Hash identifier:          13t/ok06xuwwAgWXK6aA0hVgma01ePh9v2DBO5pylDk=
Subject key identifier:   84:40:59:3C:9A:C1:E6:06:9C:1B:A5:34:B5:5E:08:34:4C:86:27:E4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4994A7F1D7B2F5DA4CE8647F41DEDBE88476742A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/0/8440593C9AC1E6069C1BA534B55E08344C8627E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 23:37:50 +0000
Certificate not after:    Thu 13 Feb 2025 23:42:50 +0000
Subordinate resources:    AS: 268479
                          IP: 45.161.240.0/22
                          IP: 2804:51d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:94:a7:f1:d7:b2:f5:da:4c:e8:64:7f:41:de:db:e8:84:76:74:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 23:37:50 2024 GMT
            Not After : Feb 13 23:42:50 2025 GMT
        Subject: CN=8440593C9AC1E6069C1BA534B55E08344C8627E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:7e:2c:ee:81:b6:20:f9:43:23:00:e9:c0:
                    ea:d3:25:44:be:8f:bf:3a:be:5a:7b:c3:f0:c1:ab:
                    43:43:7c:69:36:66:3f:58:e3:17:98:78:6c:4e:15:
                    55:2e:86:19:27:13:e8:2e:e2:cb:c2:c1:8a:aa:77:
                    c6:18:07:09:6d:59:ed:85:24:11:de:4d:69:20:c6:
                    b3:3f:0e:04:c8:22:58:1e:6a:49:4c:48:5d:20:fa:
                    a1:3b:e2:79:e0:a6:bd:26:0b:bc:50:c7:1a:5e:be:
                    06:37:bd:5c:81:c0:02:63:69:56:ad:26:d7:c1:cb:
                    b4:72:33:cc:cd:a7:70:93:3a:3b:07:42:95:82:29:
                    c9:48:03:f6:11:0f:63:8b:0d:31:36:44:bf:3b:6d:
                    50:ef:b0:52:dc:91:ec:9d:99:77:ba:4a:5c:89:28:
                    7a:e9:61:fe:63:bd:f8:e0:e1:07:60:43:ec:d1:32:
                    46:29:45:b9:c0:cd:38:38:40:7e:78:2a:0e:b5:8a:
                    eb:37:aa:48:b2:a4:79:8f:2b:94:44:f9:7b:a0:54:
                    26:df:95:09:7e:c4:d1:41:2d:19:10:fa:6b:f8:1b:
                    ed:35:16:e2:b1:e9:7a:01:6f:65:4d:3c:64:62:62:
                    0a:79:0f:b0:e9:a8:aa:b9:86:96:63:b8:c5:2a:61:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:40:59:3C:9A:C1:E6:06:9C:1B:A5:34:B5:5E:08:34:4C:86:27:E4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/0/8440593C9AC1E6069C1BA534B55E08344C8627E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.240.0/22
                IPv6:
                  2804:51d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268479

    Signature Algorithm: sha256WithRSAEncryption
         45:25:15:dc:e4:e1:23:d0:02:9b:3a:8c:54:8f:78:d3:f7:65:
         32:fa:6e:e0:a6:4b:d9:56:2c:d3:2c:47:5f:0b:5a:e5:aa:cb:
         03:b4:38:d2:86:69:ae:a4:ac:bb:65:a8:10:36:3f:c7:d1:cb:
         b4:fd:5b:01:60:a1:22:8d:8b:d8:43:08:a3:1b:1f:88:e6:3f:
         b4:0b:af:51:b2:5c:83:6f:4f:54:e9:17:a6:8b:da:d5:7b:ae:
         a3:a9:74:bf:28:b1:f7:16:a8:ad:8a:16:69:0e:b5:b0:37:86:
         70:b4:c3:30:25:73:44:30:84:10:d5:fa:48:1a:6f:9b:07:8c:
         e1:ae:11:c5:e7:26:5a:51:76:6a:75:11:44:6d:92:28:58:69:
         02:04:e8:d1:fb:c9:b9:61:bb:28:14:af:c6:59:90:11:29:91:
         c2:e6:b9:96:11:7c:eb:12:04:f5:e5:f2:a5:68:01:58:2d:7b:
         79:0c:82:07:a9:4b:4c:ca:fd:6f:c7:be:9c:23:db:15:dc:6c:
         57:04:73:9a:24:b4:2b:cc:7f:a0:48:f0:67:ef:9b:f8:0a:b3:
         66:ee:6d:97:83:a2:cd:53:92:ac:68:78:c4:fa:70:11:2d:0f:
         ca:81:ee:83:a4:2f:99:84:dc:08:2b:a2:67:29:a3:94:f5:bf:
         f8:29:a9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----