Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9836DDAF4A063B35C599D8E74240140479434CEE.cer
File:                     9836DDAF4A063B35C599D8E74240140479434CEE.cer (raw, json)
Hash identifier:          rdGQzHS5VqLtJP4xejcKlWIKEBZ2VHH9+RZbrPUFSlc=
Subject key identifier:   98:36:DD:AF:4A:06:3B:35:C5:99:D8:E7:42:40:14:04:79:43:4C:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C6D9945ACE9C8A0CE6B684020E3C7BF192A2B2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/9836DDAF4A063B35C599D8E74240140479434CEE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 19:25:22 +0000
Certificate not after:    Mon 10 Mar 2025 19:30:22 +0000
Subordinate resources:    AS: 268789
                          IP: 45.173.28.0/22
                          IP: 2804:5ab0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6d:99:45:ac:e9:c8:a0:ce:6b:68:40:20:e3:c7:bf:19:2a:2b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 19:25:22 2024 GMT
            Not After : Mar 10 19:30:22 2025 GMT
        Subject: CN=9836DDAF4A063B35C599D8E74240140479434CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5a:37:52:c3:05:b5:65:6a:ef:92:5e:2a:b5:
                    6e:19:f8:24:f8:8d:0d:a7:72:a2:66:81:ee:17:73:
                    ef:22:cb:85:11:7b:f2:b2:c1:2e:23:fe:41:08:85:
                    b9:81:d1:b3:1a:b4:ae:7e:bc:98:a4:96:4a:98:cb:
                    d0:cf:15:3f:21:df:47:ca:25:9d:fe:b6:6c:67:11:
                    c6:c8:10:48:b0:a9:2b:37:fe:27:31:cd:5c:89:71:
                    74:1d:ef:2d:37:a6:ed:a3:17:97:5b:66:3f:b8:d3:
                    12:2a:cb:eb:42:ba:22:6b:db:ef:09:a6:11:da:30:
                    35:00:f9:2e:02:1e:c3:1d:37:b2:7f:94:8a:e7:6f:
                    4a:02:43:9c:91:2b:4c:27:56:7c:38:33:89:e5:4a:
                    6b:44:43:52:cb:c0:fd:94:d1:3e:28:59:36:73:22:
                    c1:2d:5f:a4:5d:0e:53:ee:ce:1a:b6:c7:fc:9a:7c:
                    1e:f8:f8:9c:b4:07:c7:f0:6f:97:61:c6:4c:f8:ca:
                    e8:ca:69:9e:83:bb:6e:1a:71:be:07:8f:b7:a3:71:
                    12:d9:4b:ce:02:ae:6d:2e:c4:4d:fd:47:65:5b:5b:
                    82:fd:73:35:11:74:ad:5b:18:ee:24:23:f8:38:52:
                    59:1e:4e:e3:06:ce:f4:86:81:49:35:b8:83:2f:ba:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:36:DD:AF:4A:06:3B:35:C5:99:D8:E7:42:40:14:04:79:43:4C:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/9836DDAF4A063B35C599D8E74240140479434CEE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.28.0/22
                IPv6:
                  2804:5ab0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268789

    Signature Algorithm: sha256WithRSAEncryption
         b7:09:aa:98:db:5a:4a:f5:e1:b7:36:bc:87:32:75:58:c5:56:
         f9:a6:88:f9:84:bd:70:dc:7a:04:59:7a:2c:bd:a1:97:cd:26:
         cb:47:67:a5:5a:f3:56:39:d9:3f:82:9f:87:5a:68:22:7f:11:
         4e:dc:8c:eb:f9:67:ca:de:05:3e:38:e3:d1:48:06:7f:d1:63:
         12:62:47:b1:a6:e9:ec:c3:a5:e2:c2:98:50:5b:46:34:70:cc:
         4a:70:df:1d:2b:c4:66:51:c0:75:8a:e1:1e:df:61:23:2f:dd:
         44:fe:ad:0f:3c:64:ca:19:71:a3:4a:10:12:52:26:24:d8:d4:
         fe:fc:87:4d:0d:f6:f9:21:45:0f:b6:84:41:c5:67:92:59:5d:
         2d:fe:91:17:db:73:d7:91:94:17:75:38:c0:d4:51:60:a4:1c:
         bd:c6:01:28:0c:4a:2b:0a:d6:72:72:cb:cf:74:9f:d3:37:16:
         74:c2:86:53:56:b2:5b:e2:e3:e6:a9:7b:99:b3:ad:3f:86:40:
         dc:1b:9f:98:51:b2:96:7c:d3:a1:c4:76:c1:ea:8b:76:92:41:
         27:e2:25:a6:d5:c8:20:29:c9:0b:7c:29:76:67:9b:20:c3:4d:
         d0:70:dc:0c:88:f5:bf:3b:95:73:f4:87:44:75:21:4a:76:98:
         ba:40:34:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----