Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/849EDC8B01488DAA924378D7A31D412647B39B67.cer
File:                     849EDC8B01488DAA924378D7A31D412647B39B67.cer (raw, json)
Hash identifier:          PtDBxjZk2MdSeQq+S9FBbHugAXQOSQUwWYzr+gWTnzs=
Subject key identifier:   84:9E:DC:8B:01:48:8D:AA:92:43:78:D7:A3:1D:41:26:47:B3:9B:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A97C363A618E199EAE8C5CFBEAF10FF93D36D7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/849EDC8B01488DAA924378D7A31D412647B39B67.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 23:21:27 +0000
Certificate not after:    Mon 03 Mar 2025 23:26:27 +0000
Subordinate resources:    AS: 271556
                          IP: 179.63.80.0/22
                          IP: 2804:7d5c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:97:c3:63:a6:18:e1:99:ea:e8:c5:cf:be:af:10:ff:93:d3:6d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 23:21:27 2024 GMT
            Not After : Mar  3 23:26:27 2025 GMT
        Subject: CN=849EDC8B01488DAA924378D7A31D412647B39B67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:98:39:8d:d7:66:11:c3:be:d5:07:c6:24:f0:
                    77:99:4c:3e:c8:2f:d0:63:d5:7d:1e:c9:a6:92:e7:
                    bb:d7:46:f3:f9:e2:34:f4:78:61:c0:72:d2:6a:b7:
                    dd:d2:ed:17:49:52:7b:bf:83:91:39:82:b4:89:b6:
                    15:7e:29:42:49:40:12:7a:2f:84:ad:60:76:f9:e8:
                    5b:2a:3c:83:10:bc:ff:c0:21:a3:e2:69:4b:28:b7:
                    7f:9a:7c:05:65:5a:32:79:bc:45:dd:d1:f9:39:72:
                    c9:93:e1:2c:20:bd:05:3c:9e:20:2e:c8:7d:94:27:
                    ac:04:0d:9b:04:af:3a:b2:94:b8:69:5b:67:c8:2e:
                    7a:11:31:f2:7a:4c:d2:25:09:f5:22:0d:b2:f3:0e:
                    c7:20:d8:64:82:f6:79:41:c2:41:dd:a0:37:07:b6:
                    c3:ed:b0:01:ca:e4:f3:03:f4:d0:90:94:fb:28:3b:
                    c9:55:5c:60:2e:76:6d:06:64:a4:78:dc:f4:20:6c:
                    55:ed:f1:a3:04:25:7c:48:8e:ba:73:3f:e0:08:ce:
                    d1:96:e6:fe:0d:3d:28:d8:fa:15:c5:04:65:52:d5:
                    5e:0a:ba:fe:2e:98:da:5b:ad:6d:f5:85:dc:93:13:
                    93:ed:93:3e:64:0a:c5:b2:8a:15:3c:36:21:5f:e1:
                    b0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:9E:DC:8B:01:48:8D:AA:92:43:78:D7:A3:1D:41:26:47:B3:9B:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/849EDC8B01488DAA924378D7A31D412647B39B67.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.80.0/22
                IPv6:
                  2804:7d5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271556

    Signature Algorithm: sha256WithRSAEncryption
         b7:46:7e:8d:44:d8:e5:c5:cc:1f:eb:91:3e:7a:13:06:b7:83:
         f4:63:76:df:bd:fc:14:e6:95:1a:d3:f0:a5:24:c4:3a:a9:4b:
         1f:ea:49:68:2e:85:86:37:cd:cc:0c:32:b9:b7:37:d2:71:ed:
         b4:19:63:67:bc:b9:71:b7:58:28:c8:4a:2a:97:f2:bd:4c:56:
         79:31:d7:19:61:2e:6b:7a:48:21:a2:61:60:ab:16:7e:e2:4a:
         2a:a7:78:f6:31:3e:21:95:58:4f:93:f4:95:d0:60:00:eb:86:
         41:a0:86:56:f5:0b:6d:0e:66:39:35:08:50:89:f9:28:4d:ce:
         1b:5e:d7:68:65:a9:7b:05:ff:17:a1:a1:93:da:d9:1b:e3:81:
         1f:78:93:f3:75:7a:f4:1a:c8:da:42:b8:d0:65:e4:68:bd:d2:
         20:cf:87:a7:1a:6d:02:57:24:73:3f:8f:a4:7b:2d:63:1a:ab:
         3f:93:4f:a8:84:11:db:a5:a2:a9:9d:1c:20:1e:ff:cc:ab:9c:
         97:e2:28:6d:1a:f8:8a:88:eb:2b:de:4f:8e:e1:73:6c:4f:50:
         26:c5:a8:31:4a:10:c1:a5:78:1b:9d:57:60:f6:d7:13:b5:b1:
         dd:8d:3f:f2:c0:c5:86:94:5d:5f:ba:9d:f4:e3:49:23:e1:f6:
         a0:9f:48:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----