Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.cer
File:                     8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.cer (raw, json)
Hash identifier:          hQBbkEAqpi3+DKaIWE+ZZITd90AfyZfzemUR+f7lbfE=
Subject key identifier:   8E:53:05:51:06:EE:DE:2F:0D:FB:F8:E2:D7:2E:71:F1:E4:EE:2C:11
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2CD2BE56C61DB49B1FFAA28B11978F07E62DF38F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.mft
caRepository:             rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Feb 2024 17:21:34 +0000
Certificate not after:    Thu 27 Feb 2025 17:26:34 +0000
Subordinate resources:    AS: 61820
                          IP: 201.131.176.0/22
                          IP: 2804:19d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d2:be:56:c6:1d:b4:9b:1f:fa:a2:8b:11:97:8f:07:e6:2d:f3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 29 17:21:34 2024 GMT
            Not After : Feb 27 17:26:34 2025 GMT
        Subject: CN=8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:c6:25:04:85:ef:b4:8d:cf:e6:cb:35:f8:
                    33:7f:8c:94:69:68:1a:7c:d3:25:34:6f:89:17:79:
                    51:a5:93:f9:bc:83:e8:cb:bc:08:33:52:1c:00:a8:
                    21:6f:5d:fe:1a:f4:8f:29:3c:5e:53:45:b3:93:43:
                    ed:28:f9:c1:2c:a9:01:58:45:ea:0e:bb:03:40:84:
                    de:b9:b2:3c:83:d1:e0:b4:f6:7b:fb:c4:40:b1:44:
                    6a:77:0a:6f:c2:9e:65:15:23:d8:24:6d:92:f2:07:
                    e2:07:1f:bb:9d:7b:8e:79:da:75:bf:d2:38:88:89:
                    7c:81:3e:22:8f:f9:b5:50:1f:45:1c:b2:2d:89:6f:
                    a7:dc:be:d7:a8:e9:97:10:06:e9:84:97:4c:60:3f:
                    ec:29:0e:71:a7:2f:03:ab:4f:7d:c4:1b:86:45:2b:
                    04:37:e7:e5:a9:c6:71:9a:71:68:73:14:60:52:27:
                    55:70:2b:ac:11:31:64:52:db:81:f7:7e:8b:fe:f6:
                    dd:01:20:14:59:cb:26:a3:54:30:e3:81:92:2d:eb:
                    89:5e:6a:a9:de:aa:ef:4c:77:4d:7b:4f:0e:38:83:
                    a7:67:4d:02:34:59:cf:03:09:90:52:7a:74:15:00:
                    3a:33:9e:26:f8:b5:98:f5:ec:ce:24:30:7d:55:67:
                    a0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:53:05:51:06:EE:DE:2F:0D:FB:F8:E2:D7:2E:71:F1:E4:EE:2C:11
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.176.0/22
                IPv6:
                  2804:19d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61820

    Signature Algorithm: sha256WithRSAEncryption
         8b:a3:be:1c:b7:2b:20:87:26:2b:e1:79:71:0a:a2:76:33:d7:
         55:67:4b:8f:14:10:65:d2:85:82:14:c8:e5:40:7c:aa:d7:12:
         cd:81:69:25:25:29:33:2f:f8:7a:b4:97:8e:3d:a6:ef:8a:6f:
         de:de:b4:c3:7c:ac:0d:07:fd:78:55:26:8d:08:09:b0:4c:66:
         e6:3a:5d:3b:40:1f:07:65:56:62:5a:b5:3c:79:28:25:af:92:
         13:55:ea:03:bc:a0:e4:17:f6:b9:0a:70:66:18:c5:e9:ea:0a:
         b3:17:14:51:7c:ea:9e:f7:12:23:ed:5e:9a:80:05:a7:98:fa:
         f5:1b:80:c0:76:69:ab:8a:ce:a5:03:d0:fb:22:b3:49:15:cf:
         f7:ff:03:42:9b:e6:c4:10:8c:31:7c:0d:b2:d5:9f:0e:e1:72:
         1b:b2:b0:91:8e:67:75:5e:f3:c8:5c:6e:92:54:16:48:f0:7a:
         55:1b:1d:6e:28:c5:0a:f8:45:3d:7c:ca:3e:71:14:7b:60:cf:
         4a:7d:e2:9b:39:95:07:fb:33:d8:fd:da:6a:0c:df:0a:52:14:
         bf:db:a1:ca:9f:19:f7:0d:92:e5:cb:59:c2:a0:68:cb:87:53:
         a4:1f:be:c3:f1:d8:b3:50:4b:0c:33:5e:ca:e2:e5:29:99:42:
         21:46:14:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----