Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer
File:                     8A625A2C7A687327755280A68A944EED49133491.cer (raw, json)
Hash identifier:          C12If/dqHl+kCDvnVa2gonCSnEFxTe4o9iRxOQ6VtG4=
Subject key identifier:   8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F53CE5ACEE4A5942BD4DDBD638C2544CB504F64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/8A625A2C7A687327755280A68A944EED49133491.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Feb 2024 03:12:06 +0000
Certificate not after:    Sun 16 Feb 2025 03:17:06 +0000
Subordinate resources:    AS: 267218
                          IP: 45.231.196.0/22
                          IP: 2804:4a18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:53:ce:5a:ce:e4:a5:94:2b:d4:dd:bd:63:8c:25:44:cb:50:4f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 18 03:12:06 2024 GMT
            Not After : Feb 16 03:17:06 2025 GMT
        Subject: CN=8A625A2C7A687327755280A68A944EED49133491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:a9:7e:08:0f:4d:32:ad:84:0e:23:a2:fc:3f:
                    74:7c:c2:14:69:65:ff:b0:96:be:58:b8:d7:64:e3:
                    56:42:c7:d9:de:dc:9b:f9:40:21:b1:26:d6:32:99:
                    70:28:6c:e4:43:df:6b:a3:3b:8e:c6:00:52:b8:5a:
                    dd:28:90:d5:cd:23:ee:73:38:3f:2d:70:97:07:14:
                    49:ae:e0:c6:b2:60:9c:be:6e:7a:1f:a0:4f:9c:19:
                    e9:48:ae:e0:66:3d:b0:11:65:8d:85:ba:c9:cc:13:
                    13:16:38:50:53:d7:14:47:d0:85:bc:55:fe:70:71:
                    7e:52:49:30:f4:72:42:d9:b4:81:ad:63:c8:95:41:
                    da:03:dc:66:2a:ec:00:66:87:73:38:2b:1a:e9:55:
                    c5:05:d7:f5:1c:da:fa:e3:fc:82:45:a7:98:a7:7a:
                    68:50:62:a5:0b:55:05:b0:df:db:85:54:73:de:46:
                    6f:35:b3:aa:64:ea:14:de:07:ad:d3:2f:cc:9d:31:
                    e8:17:5b:2e:59:8d:70:19:83:9e:bb:e0:71:06:1d:
                    a1:89:d8:b0:7d:e0:94:38:3a:72:3f:ad:90:19:80:
                    b7:25:7d:3e:c3:ef:49:9f:f6:f9:1f:57:8b:2f:58:
                    47:02:6b:b1:6a:51:87:77:1c:2c:2a:c6:fc:a4:b0:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/8A625A2C7A687327755280A68A944EED49133491.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.196.0/22
                IPv6:
                  2804:4a18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267218

    Signature Algorithm: sha256WithRSAEncryption
         45:f3:fd:47:fa:c5:ed:17:87:22:5f:ce:f2:a7:49:d1:5a:f3:
         eb:ef:ca:32:cc:19:c3:a2:ae:67:91:f8:be:c0:51:e0:d3:fd:
         9b:26:6f:3a:6c:b0:84:6a:3e:2f:49:e7:f1:cd:56:30:82:30:
         dc:d9:b2:98:5b:ee:2b:dd:b0:d7:72:c6:95:48:20:bb:9a:1b:
         b8:71:66:d4:ce:1a:b7:b7:30:7e:fe:9b:3f:f7:5e:b1:80:6b:
         0a:87:81:1a:99:c9:92:b3:a9:ae:71:4a:33:42:75:43:c9:23:
         5e:62:59:75:5c:f3:b6:42:b4:cc:a7:a4:17:9b:21:75:9b:ba:
         19:92:59:0d:ae:82:39:79:44:2a:04:20:5b:44:bf:f5:4a:84:
         49:70:a5:1a:79:62:41:8d:75:04:d1:93:96:c9:f6:aa:f5:fc:
         99:9b:4a:c4:a8:d2:dd:08:79:34:a5:3f:3d:14:a8:c6:1d:88:
         d1:d1:1c:f2:16:e1:c6:d1:e9:3a:ed:84:ad:6b:78:49:20:09:
         7e:21:0c:f4:83:3f:fe:46:0f:f6:d0:7e:27:d8:d2:65:b6:95:
         bd:c5:eb:ae:76:3b:f4:1f:07:3c:3b:7b:98:09:6d:a5:78:80:
         0f:21:e7:99:d4:4f:8b:2a:0e:5a:79:68:e0:37:6d:7b:c8:98:
         84:1a:58:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----