Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.cer
File:                     8E970756ED5B45BB3259FB4311AA88EE977EAEE0.cer (raw, json)
Hash identifier:          Ga6NwGsIVZE5WxUUrNvPie3CmaTB8R87Ki5punXDkQ0=
Subject key identifier:   8E:97:07:56:ED:5B:45:BB:32:59:FB:43:11:AA:88:EE:97:7E:AE:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       291DF24BDDA99EEDF3F7A1DF8433DF4EA1B66DEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 18:33:30 +0000
Certificate not after:    Fri 14 Feb 2025 18:38:30 +0000
Subordinate resources:    AS: 270615
                          IP: 200.215.252.0/22
                          IP: 2804:6eb8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1d:f2:4b:dd:a9:9e:ed:f3:f7:a1:df:84:33:df:4e:a1:b6:6d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 18:33:30 2024 GMT
            Not After : Feb 14 18:38:30 2025 GMT
        Subject: CN=8E970756ED5B45BB3259FB4311AA88EE977EAEE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:4d:b4:cb:f5:5f:dd:96:97:98:1d:6f:0f:
                    74:5f:9c:8c:f7:83:7f:cb:61:d2:f7:d8:ef:0a:1d:
                    ed:02:e6:0a:23:d6:08:fb:b0:a3:2c:ff:3b:bf:c0:
                    3c:de:92:11:7c:fb:1c:3b:cc:42:5c:1b:5d:db:af:
                    8d:f3:c7:86:2e:51:56:4b:11:62:58:46:78:61:92:
                    d3:65:da:e9:24:20:0d:ff:2e:ce:d6:0c:bb:87:00:
                    34:92:52:f4:e5:97:09:9f:76:d4:ab:40:fd:eb:15:
                    40:21:84:0b:e3:46:23:ce:35:c4:31:67:4b:4a:3f:
                    41:e3:e6:a3:02:0b:5c:f8:f0:69:c2:47:ba:56:93:
                    20:c6:68:60:08:37:37:40:60:bd:6b:66:4f:b3:3a:
                    e6:f8:72:29:d6:e2:dc:49:76:8f:9b:f8:05:50:0f:
                    21:b0:e4:ad:fb:2a:1b:52:a1:9b:f2:57:c0:8a:c2:
                    23:80:d2:97:59:51:fa:24:6c:f0:a8:d3:fa:a2:76:
                    76:71:6a:85:fa:94:25:54:d7:b3:e0:47:01:3b:60:
                    b2:13:0b:a0:46:a3:d8:25:8f:26:32:54:8b:b8:1e:
                    97:79:44:10:5b:e5:c2:cc:74:d9:56:6b:1b:fe:9d:
                    28:d5:b3:98:71:4f:36:67:d8:6e:b4:ec:e7:ef:ac:
                    46:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:97:07:56:ED:5B:45:BB:32:59:FB:43:11:AA:88:EE:97:7E:AE:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.252.0/22
                IPv6:
                  2804:6eb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270615

    Signature Algorithm: sha256WithRSAEncryption
         0e:56:07:e2:f1:3b:18:af:27:9d:87:d8:0a:4e:9a:a0:9b:9a:
         08:c3:65:82:ce:2e:86:95:8d:85:1e:ee:96:4b:f5:71:0c:41:
         83:db:ee:8b:4c:ad:7a:fa:43:86:9a:f6:2c:03:d3:09:32:8d:
         ff:2d:77:c3:9c:bc:03:4e:74:68:1b:40:5b:ce:76:b5:39:9c:
         5b:c6:46:58:82:75:66:d7:53:a8:e2:dc:22:de:3e:5d:15:7a:
         69:49:28:e0:90:35:26:0f:2f:6a:21:88:3d:8a:62:66:52:5c:
         db:5f:60:6b:b9:78:78:e2:75:ee:da:57:d3:bd:e9:2a:e5:39:
         56:17:18:b6:e5:0f:90:3e:53:fb:05:cf:ea:7f:2e:45:51:e8:
         1a:8e:20:15:32:e9:a3:96:a7:6f:4f:1f:5d:6f:80:c0:ee:1f:
         8b:0a:cb:a3:5f:6a:45:bd:2c:01:fc:25:0d:22:6f:90:71:d8:
         88:10:32:88:04:00:f8:4d:d2:2f:1d:51:69:97:ac:de:95:a8:
         98:55:95:d7:32:da:11:41:69:f1:54:a3:37:df:ab:a4:62:f5:
         df:05:2c:36:ec:ab:25:b2:18:73:4d:24:b0:7b:66:1a:ca:b2:
         7d:cf:57:85:bf:55:7e:97:cc:1b:9c:fa:29:97:56:00:24:0a:
         d1:bc:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----