Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/97DC73C1A77476398E6D6D372160DDABE4E6CCBF.cer
File:                     97DC73C1A77476398E6D6D372160DDABE4E6CCBF.cer (raw, json)
Hash identifier:          LdTwnVcSaqVMYjNrfhCcbDITou6iUb2ArHk4t2Ys8jo=
Subject key identifier:   97:DC:73:C1:A7:74:76:39:8E:6D:6D:37:21:60:DD:AB:E4:E6:CC:BF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       770E9DDB8B8CE6BD3A22B9D9BDA25077BAC3E6F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/0/97DC73C1A77476398E6D6D372160DDABE4E6CCBF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Mar 2024 18:42:18 +0000
Certificate not after:    Wed 12 Mar 2025 18:47:18 +0000
Subordinate resources:    AS: 269337
                          IP: 45.183.180.0/22
                          IP: 2804:6314::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0e:9d:db:8b:8c:e6:bd:3a:22:b9:d9:bd:a2:50:77:ba:c3:e6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 13 18:42:18 2024 GMT
            Not After : Mar 12 18:47:18 2025 GMT
        Subject: CN=97DC73C1A77476398E6D6D372160DDABE4E6CCBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:8c:9a:a7:3c:83:f2:98:e7:70:10:a9:f2:
                    99:9c:84:90:07:a9:69:04:62:95:f7:bc:30:9a:7e:
                    95:cb:ae:19:73:df:71:33:2e:f6:dd:f9:3f:28:aa:
                    ef:e2:46:4c:c3:f9:fb:16:96:86:a3:86:a1:3b:6a:
                    0a:71:6a:ee:6b:fd:94:fe:ac:b8:9f:1b:42:8a:3b:
                    c1:9a:6f:df:ef:d0:32:b1:af:34:2b:50:6f:c9:53:
                    49:b2:2a:f9:2f:95:5d:02:e7:0f:08:6b:ad:33:15:
                    6b:76:f1:ab:b6:58:e0:81:67:1f:ba:e1:a3:26:f1:
                    9a:f7:c8:69:b8:f9:c6:84:2b:b2:63:82:a2:74:cc:
                    9b:ad:58:fc:49:40:18:6a:9e:61:b5:c7:29:91:09:
                    25:13:0b:15:42:57:62:04:e7:04:59:f2:0f:e5:01:
                    1c:bc:1f:c5:92:5f:3a:fe:0c:ed:a9:7f:60:91:05:
                    1b:26:4a:4c:cd:31:14:f8:49:ed:3f:3d:16:40:fd:
                    ac:75:0a:d1:8d:c4:da:a6:d9:73:5a:96:36:e3:b8:
                    3f:dd:2e:7a:d7:90:08:42:65:8d:b0:84:09:e4:18:
                    c7:90:b0:fd:b1:6e:f6:2f:aa:35:93:ee:32:35:fa:
                    95:a0:d6:ec:85:18:b4:e0:72:86:a4:de:00:57:a6:
                    4e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:DC:73:C1:A7:74:76:39:8E:6D:6D:37:21:60:DD:AB:E4:E6:CC:BF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/0/97DC73C1A77476398E6D6D372160DDABE4E6CCBF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.180.0/22
                IPv6:
                  2804:6314::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269337

    Signature Algorithm: sha256WithRSAEncryption
         22:54:88:7f:47:dd:ac:d1:8e:30:44:0b:6d:be:72:23:3c:27:
         11:ee:81:88:6a:98:dc:97:2a:ed:d2:54:85:e2:57:10:9b:95:
         99:ee:5a:19:83:f2:4d:4a:8c:55:a9:7a:73:75:e1:86:04:ed:
         3f:81:1f:2e:f0:16:79:0f:2d:36:66:ba:5f:66:10:41:6f:37:
         95:dd:fb:fc:05:36:de:54:7a:8d:d2:ab:6a:8e:b2:61:9b:67:
         34:b3:29:e9:96:01:3d:42:83:b0:4d:16:5c:c4:98:4b:c1:71:
         5c:2c:fb:f9:ef:af:14:f2:20:49:18:16:cb:81:da:9e:d3:0c:
         aa:be:49:4a:3f:cd:c1:f6:dc:0a:07:d3:4b:3b:83:fe:b8:fe:
         60:17:3e:1c:34:0d:31:65:8e:9f:96:92:83:e5:e2:3c:a0:d1:
         42:43:58:ad:bc:65:46:6b:13:07:f5:c6:f1:24:81:23:51:f1:
         80:90:e4:22:c4:5f:89:fb:a5:61:83:04:a2:b0:6a:3a:8f:63:
         28:af:81:48:2b:ea:6c:87:ea:e4:f9:f5:2f:96:45:91:65:84:
         df:ec:62:b0:26:17:a5:d8:f9:34:24:49:45:22:b8:6e:5c:fb:
         73:b1:54:cd:e6:77:e4:49:67:bc:1f:c5:43:14:70:9f:2d:81:
         de:e5:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----